Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: 6FcyV+0jUmw8layGe+iE0i0MkPH2djf0rtUAnQ9TzhU=
Subject key identifier: B7:E2:C0:24:EB:CD:70:F9:46:78:4F:43:3E:70:CA:19:89:93:7C:4A
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0194BB96F756E938BAFF2D48221E38EA908E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:20 +0000
Manifest this update: Fri 31 Jan 2025 09:00:20 +0000
Manifest next update: Sat 01 Feb 2025 09:00:20 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: tAguu+OW45b9EKSitxLFS5zti7DAjoCokNm/WVs/cNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f7:56:e9:38:ba:ff:2d:48:22:1e:38:ea:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jan 31 09:00:20 2025 GMT
Not After : Feb 1 09:00:20 2025 GMT
Subject: CN=b7e2c024ebcd70f946784f433e70ca1989937c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:da:5b:a7:3f:50:07:4a:a8:60:be:e7:f8:
74:99:98:eb:d2:8a:e1:67:59:ca:47:c7:66:85:89:
b4:9e:7d:b4:16:ed:63:50:6e:88:b5:83:81:06:0b:
e4:83:0d:35:35:e8:ef:20:e4:11:64:1b:a0:36:63:
8d:7d:06:04:2a:61:d1:69:cc:05:84:36:2b:3c:17:
7f:0f:d0:6f:8d:34:a7:5a:a5:e9:c4:c7:f9:21:55:
86:06:66:4e:fd:42:89:0a:66:02:9e:39:6c:2f:0f:
e4:c4:e4:95:20:cf:42:57:03:66:9f:e8:c3:40:ca:
af:af:d3:9d:6d:22:79:b0:b5:48:15:b5:26:66:be:
90:55:65:a1:1d:1e:cc:e6:a4:95:f7:4b:d3:02:1f:
7e:79:d0:c5:b3:0a:70:61:f6:eb:7a:73:83:e4:d8:
a9:98:16:74:94:d3:7c:3e:05:08:d9:3f:93:55:f1:
99:b4:d5:6e:bf:eb:ce:3a:e3:6e:aa:9a:05:42:a9:
b2:9e:a6:58:39:0a:8d:b9:84:9d:46:98:96:cc:cf:
24:e2:9f:6f:32:11:b9:c4:3b:38:69:c0:e8:a5:66:
f6:36:66:4f:07:e4:2f:df:65:1b:78:71:26:78:0f:
4c:a7:d3:e9:07:b8:ee:02:af:74:b9:1e:7b:f0:c8:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:C0:24:EB:CD:70:F9:46:78:4F:43:3E:70:CA:19:89:93:7C:4A
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c3:a2:a9:16:41:02:4e:77:c5:e7:8e:7b:94:3b:43:a1:c0:
d8:0f:92:ca:af:a7:a7:87:77:91:bf:c2:28:33:35:c5:47:73:
48:7d:26:01:bf:f8:5f:ff:0d:82:de:9a:75:eb:94:74:88:9e:
24:41:0a:4f:45:33:f6:9b:a0:35:00:c4:59:08:a4:fb:a7:70:
a2:8b:1b:39:13:45:4d:ba:a1:a7:76:83:95:2c:11:08:99:4f:
fd:0b:1e:a7:ec:99:b6:19:57:3d:8f:b6:b2:11:47:35:10:c6:
de:8c:2d:28:bf:d2:55:be:4d:1c:62:57:01:a6:68:6c:1d:3d:
87:dd:cb:ef:64:a5:77:41:95:f0:5b:99:04:18:36:11:dc:a2:
38:96:97:fd:f4:f9:e8:64:18:62:1e:15:b7:49:c4:e4:0f:ed:
d7:45:90:d3:62:8a:71:fa:d3:3c:53:6b:3b:34:c1:68:4e:c9:
0f:ae:63:37:f3:37:0f:22:5f:a7:e4:51:c2:92:19:54:8e:81:
29:2a:97:4b:62:ac:34:e6:8c:06:9e:c1:da:07:90:35:2f:e4:
d6:69:8f:66:5f:7e:a2:df:af:12:e2:59:3b:08:70:49:8e:04:
21:86:73:0b:db:b7:e2:23:25:64:78:5e:59:42:22:69:20:c1:
cf:f0:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:53 2025 by rpki-client on console-fra.rpki-client.org