Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: oLt6UOYgo0WDLvrBa+CAhqW7AGklKQuBBRZLxzTxLGU=
Subject key identifier: 7F:73:95:3D:38:0D:31:63:0F:49:99:FD:58:39:BE:A9:8E:12:58:15
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 0194BB97119701F8C4D552763AB20AA87956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 0EB5
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: aaXLVksT0odhddYLrjazkb3TRLDC03I2qMTiLyLT1WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:11:97:01:f8:c4:d5:52:76:3a:b2:0a:a8:79:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=7f73953d380d31630f4999fd5839bea98e125815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:62:06:c6:dc:93:fe:3b:9a:46:15:ea:b9:
04:76:08:86:c9:2f:2f:4c:50:2d:f4:b0:68:ee:6d:
0f:02:57:64:16:0e:41:8c:dc:7a:32:4b:60:51:bc:
1e:c8:1b:5c:c4:dd:bc:1f:92:fe:9a:7e:9a:fd:70:
98:5b:26:a1:c2:79:e7:c3:28:30:bd:d2:e8:d5:3c:
03:d1:b3:74:d9:89:dc:65:a1:51:41:76:4c:58:df:
c9:16:54:69:5a:51:ac:e1:03:e5:03:ea:b5:d2:59:
a7:89:77:e0:42:69:f7:6b:35:ad:41:5f:3c:61:73:
89:0c:50:2c:23:92:04:4f:d0:e3:02:38:71:c5:a1:
dc:36:72:6f:f6:e5:cf:54:e1:59:b7:d7:84:04:2b:
28:9e:f3:51:06:3d:4e:77:dd:2e:56:ec:f7:b4:f3:
0e:ef:3a:14:dd:14:75:70:4f:95:9c:29:7f:3a:ea:
c6:b9:e7:6e:91:e2:4d:61:d6:53:c5:5c:89:28:44:
79:19:fb:9b:d4:99:5c:db:6e:78:d2:f3:4e:1a:b3:
20:2d:d8:31:f8:6d:6b:11:e1:e2:18:c1:f8:a3:2a:
e4:28:bb:07:cc:ce:eb:6b:f1:c4:36:32:e8:de:18:
e8:53:3f:11:5a:6b:67:a2:5e:b1:c8:a7:4e:ea:d2:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:95:3D:38:0D:31:63:0F:49:99:FD:58:39:BE:A9:8E:12:58:15
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e9:4c:70:69:01:e1:f3:07:67:25:b5:41:c8:ee:2a:34:67:
dd:48:90:3e:fe:ea:84:90:70:13:2e:4c:6a:c6:84:1f:9b:35:
f7:f4:03:ad:69:e3:db:3e:44:16:e1:6d:fe:c5:75:22:8f:2d:
98:c4:12:30:72:99:13:5f:63:35:ab:36:61:d0:31:f1:54:75:
02:79:e5:2f:3f:2d:4a:c3:ba:b4:a3:2a:6c:05:58:87:59:2a:
e8:e8:42:b9:33:f0:c4:f4:db:b3:b3:54:5b:83:29:0e:ed:e2:
d4:b0:31:b0:86:0b:f2:19:1e:e1:30:76:e8:e8:ef:6a:94:ea:
59:85:df:8c:75:7e:88:b6:86:c7:1b:0e:83:4a:6e:5d:01:91:
bc:b6:80:68:10:9b:88:7d:08:79:dc:aa:e1:65:4a:0f:bc:a9:
15:0f:98:76:f1:58:9e:a1:ed:ef:bf:03:6e:62:6a:65:00:59:
7b:af:0d:05:61:c5:8b:56:1e:48:8a:e2:5c:94:35:e0:05:93:
e5:d2:c3:de:9d:f8:10:5b:df:4e:71:d5:7b:b4:17:24:e1:e2:
38:ed:77:6b:1d:03:9d:fc:4e:b7:4a:a3:31:bd:a3:97:77:9f:
9a:46:ee:ca:0c:b2:26:0d:3b:e9:c2:a8:99:f9:6c:90:da:c4:
2f:40:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:31 2025 by rpki-client on console-fra.rpki-client.org