Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: QKP4Ngz/6NVDrfjLiNscizFS/lWjF2pTb/7rtbyPCA8=
Subject key identifier: 98:2F:D2:9A:39:61:C3:8B:E4:2E:E4:49:67:52:8B:DB:31:71:E3:C6
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0194BAF26B9D2E61883867AB5E9C3A9917D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0315
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: V4LdGrxorNyG3Zyk5o10yEepaRjfpxVZo3Xb5Z7G36s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6b:9d:2e:61:88:38:67:ab:5e:9c:3a:99:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=982fd29a3961c38be42ee44967528bdb3171e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:f5:4c:03:22:eb:4b:d9:06:81:22:16:c8:
54:3e:32:28:7c:4c:5f:10:d5:50:48:2a:47:cd:a4:
b9:9c:29:12:70:30:64:a4:fc:3f:8d:65:d3:7c:5e:
21:62:60:c4:71:d0:7c:9f:06:d4:c4:bc:19:6e:c6:
86:0c:43:40:24:4c:a9:f8:b9:a1:c0:57:a8:f6:82:
37:fa:f9:14:9f:e6:3c:e5:27:51:6a:c9:2b:be:75:
c2:34:11:e0:d6:ef:5a:59:9a:fb:f5:b3:bd:5c:5b:
8d:0d:64:42:06:1d:48:cf:9c:4f:d9:a0:b6:7c:0d:
ef:fc:63:18:6a:0e:65:a1:03:5e:72:a2:cf:56:e0:
e3:68:02:6a:bc:3a:09:ef:ff:63:d0:ae:49:20:c9:
17:43:9b:14:27:97:78:eb:03:04:e6:cf:4a:63:97:
dc:bf:2e:1c:b4:ad:d3:cb:82:39:76:b9:44:2f:66:
d4:f1:b3:45:e1:ab:97:b1:a8:c9:ae:8e:a2:81:66:
64:47:40:e9:5c:13:64:7b:0c:8f:34:bd:3f:44:ea:
0c:6e:38:b8:6b:04:72:bc:40:c9:95:b3:db:50:ef:
93:25:88:04:21:40:c7:8e:d6:98:57:81:bd:6c:f2:
8c:df:71:17:c4:88:20:68:67:19:87:b0:5e:0d:ae:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2F:D2:9A:39:61:C3:8B:E4:2E:E4:49:67:52:8B:DB:31:71:E3:C6
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:ca:12:91:52:cd:2e:13:ab:08:63:5e:b9:ef:ed:e9:61:
2f:00:84:13:df:4e:66:47:36:7e:ff:12:e3:4b:54:20:2d:35:
ac:e8:2e:44:3a:28:92:24:bf:f3:fa:39:83:e5:66:3c:0e:11:
70:dd:a9:47:f8:3c:39:bb:42:8d:16:47:33:bf:1d:46:8a:a6:
04:5f:82:cd:12:be:b5:cf:23:59:eb:22:5e:49:b0:c5:1d:dd:
dd:c2:bd:5b:4e:3b:15:9e:08:da:3f:8f:66:36:e7:97:e4:16:
d4:8d:c8:cc:cc:a3:6f:33:70:18:08:6f:11:35:89:e3:20:56:
a1:2e:ee:b0:ae:04:d4:bd:38:79:89:86:42:f0:40:91:e5:ba:
1a:61:5e:2b:a8:79:7d:5e:7f:56:ed:27:b6:cd:ee:14:9a:1a:
0e:ba:ee:49:25:97:33:c9:5b:da:b3:23:ec:ca:9f:07:2a:5d:
aa:10:83:a3:ab:a3:c0:d1:a7:dd:50:3c:aa:22:69:ff:e7:ef:
60:1d:8c:c3:c7:41:7d:6b:62:ac:97:7c:f4:54:65:09:3b:c0:
ec:f5:a6:28:aa:16:67:e2:fb:c8:49:e1:f4:90:3a:90:91:80:
8a:36:d2:4f:c4:63:94:e9:80:4f:9b:dd:d9:de:0d:83:b7:ac:
58:11:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:59 2025 by rpki-client on console-fra.rpki-client.org