Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: Dxf7uLy4mNKQ3Yy5EcBuigwBsGzDqCQl7uMm4vYKBcs=
Subject key identifier: 94:67:D1:3C:26:4B:93:34:91:FE:66:D0:69:E8:E8:A5:62:69:A6:64
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 0194BB2980E33DC3A839846AE320C3D98BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 05C5
Signing time: Fri 31 Jan 2025 07:00:46 +0000
Manifest this update: Fri 31 Jan 2025 07:00:46 +0000
Manifest next update: Sat 01 Feb 2025 07:00:46 +0000
Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: IpLZVuglYZgXqIlbrKvr/pVzn7Wre6lkkhN3G8Kzzfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:80:e3:3d:c3:a8:39:84:6a:e3:20:c3:d9:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Jan 31 07:00:46 2025 GMT
Not After : Feb 1 07:00:46 2025 GMT
Subject: CN=9467d13c264b933491fe66d069e8e8a56269a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:eb:01:95:75:0e:35:d1:45:74:5e:2d:96:
5d:8c:16:31:3e:51:06:7b:3f:a9:7f:b0:96:6d:ef:
25:ec:2f:26:de:a4:9f:1e:9f:03:77:eb:92:9b:e5:
a6:af:7e:d2:b1:03:0d:b7:26:c1:50:7e:f8:17:44:
2b:be:89:42:6e:5e:1a:d7:bb:30:c4:5e:27:90:91:
93:0d:4d:5f:43:9d:25:5f:a9:87:de:1a:cd:dd:37:
25:9d:75:5d:ff:7f:a5:2c:15:8b:96:8b:e1:3f:8b:
74:92:6b:b3:16:dd:89:30:2c:79:94:f8:b7:14:18:
13:9b:9c:6e:39:c1:52:a0:45:9e:d6:71:f1:d2:6d:
6d:f3:c6:e0:32:15:27:d7:17:f5:c3:59:05:17:9a:
5f:a3:3d:70:ac:79:c6:83:89:48:3e:67:8d:f4:53:
7d:06:1b:39:fb:93:ea:69:34:26:3f:b1:53:4a:12:
f4:67:46:2d:45:2f:66:65:ed:c0:15:02:a7:36:25:
cd:5f:98:2e:07:02:0f:ee:23:8a:28:1c:80:84:d9:
a3:c0:b6:74:d2:af:d6:e5:5f:d5:6b:6a:f3:38:23:
f2:55:fd:9a:50:ec:91:5b:95:47:0c:46:65:c7:b7:
c8:f2:1f:0d:4e:f9:76:02:be:07:3c:f7:ba:36:dd:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:D1:3C:26:4B:93:34:91:FE:66:D0:69:E8:E8:A5:62:69:A6:64
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:96:fa:5d:1d:d0:45:41:d7:01:f7:d8:cc:4c:ea:db:d8:22:
7e:fa:13:46:cd:76:09:86:0b:1a:1c:3e:10:f1:68:b7:6d:46:
bf:59:9e:bf:05:aa:d2:c5:d1:09:5c:98:12:ad:54:85:03:91:
68:b3:f5:06:41:14:cf:09:da:68:40:c2:e2:b4:1f:6c:24:aa:
88:26:c2:f9:32:c1:7e:d6:ab:2e:22:1d:c5:c7:c2:5d:48:6d:
e9:6e:6e:36:76:e5:bf:3e:fe:f1:fb:a5:31:bb:92:95:dd:21:
17:8e:e8:6e:9d:56:0a:9e:a4:3a:3a:ae:f8:6f:27:99:2f:d6:
5e:a7:ae:56:62:04:b7:76:f4:91:c3:bc:02:a3:9d:04:9a:c3:
a2:3b:81:93:0f:d2:5b:fa:97:8f:ac:1b:1c:99:80:6a:53:51:
97:cf:df:a6:f9:7e:85:64:25:46:01:28:8d:08:93:ca:d5:40:
80:fa:ec:c0:02:8e:6c:74:a4:c1:9b:87:5c:ab:c8:ea:5f:63:
c6:a8:32:9d:25:ab:94:7a:bd:98:b0:e8:72:14:fe:1a:53:d2:
1c:5e:45:5a:c9:84:8d:f1:e8:80:69:2a:d1:9d:f2:f5:38:00:
bf:a1:c4:1f:99:90:5c:1e:bd:80:2b:0d:ab:ef:f7:fc:10:9b:
e8:30:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:37 2025 by rpki-client on console-fra.rpki-client.org