Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: WIbZzh0feT3DxnFWYoIhs2uB/Mjhd6Oh6/jXCmMiR44=
Subject key identifier: F1:B6:FF:A4:16:BC:5B:FD:16:6D:0D:86:33:F6:94:E4:7E:FE:65:2E
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 0194BB297D6A7BBD2A9C47A2C33BF2F9058A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:45 +0000
Manifest this update: Fri 31 Jan 2025 07:00:45 +0000
Manifest next update: Sat 01 Feb 2025 07:00:45 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: Js+XeW8hne32Uih+++pltocbX7JVk8bx2FArQKTlcMQ=)
2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:7d:6a:7b:bd:2a:9c:47:a2:c3:3b:f2:f9:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Jan 31 07:00:45 2025 GMT
Not After : Feb 1 07:00:45 2025 GMT
Subject: CN=f1b6ffa416bc5bfd166d0d8633f694e47efe652e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:8b:36:2b:b5:de:2c:17:05:5a:02:fa:6d:
14:b3:f8:f1:70:df:b4:f1:d9:a6:b7:23:e4:0f:0a:
78:5e:b4:04:70:97:b1:6c:89:45:28:d3:ca:ca:59:
cc:5a:fa:a0:43:e8:9f:43:31:f6:8d:80:41:34:d0:
c3:ea:f6:ea:db:53:b5:11:c5:1d:2c:67:5d:52:92:
8d:49:b5:75:1b:d8:35:11:04:20:58:9d:f5:cd:72:
07:c9:2d:6b:63:c1:a9:05:c0:8b:08:ce:e4:a7:76:
65:29:59:45:53:af:89:59:c0:5f:48:e2:cb:ce:82:
b2:90:f5:01:95:d9:ce:a7:5d:d9:8f:4d:85:b2:e1:
b7:90:85:2c:0d:1a:ba:44:9f:12:2a:9e:4d:87:f8:
7f:d8:af:7a:0d:b0:0e:ab:92:45:89:e4:49:b4:cb:
8d:82:11:fe:cd:ef:95:83:70:e3:4f:a8:50:15:66:
bf:42:e2:92:8a:79:ec:e7:dd:e6:ab:aa:23:c7:fe:
84:03:42:4e:44:e2:b5:f6:e7:dd:4e:99:c1:4b:4a:
c3:66:8f:03:43:da:d6:6e:b2:58:59:2b:51:77:63:
11:63:94:74:f4:06:54:68:b6:f5:a9:06:4b:5c:59:
6a:59:ef:0b:58:1f:28:7a:14:b6:a8:6d:bf:db:ee:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:FF:A4:16:BC:5B:FD:16:6D:0D:86:33:F6:94:E4:7E:FE:65:2E
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:81:46:d7:3a:82:c3:cb:16:4c:79:10:80:b0:87:55:6f:
07:66:56:71:06:49:c4:af:40:f0:39:a3:cf:cf:af:c1:02:81:
ef:fa:3f:34:e6:cc:f2:b7:36:9a:bc:0c:25:b3:07:86:af:9d:
ed:fa:6c:69:49:46:84:3a:8c:b4:1a:63:bf:84:68:1e:a2:89:
53:1f:0b:aa:3f:81:55:a6:53:22:43:4b:65:53:5e:70:0d:84:
d8:39:b0:54:af:99:96:5a:2d:4e:72:ca:38:b6:1e:4c:c3:14:
da:ff:f1:81:9c:db:8a:ba:c5:fc:fa:85:2f:0d:a4:43:fc:e5:
a7:3c:d2:17:d4:75:b3:e8:88:7e:17:59:8a:a6:0f:cf:1e:7e:
69:9c:f0:61:7f:84:a9:72:a8:6c:2d:4f:33:5c:e1:78:e7:38:
fb:aa:f3:4a:0c:b2:24:f3:63:8a:8c:34:8c:76:29:62:b2:98:
0d:c7:34:15:5e:48:af:85:ec:f7:27:a9:ad:59:0f:ef:c1:98:
07:a7:d4:8a:64:28:a4:41:17:92:db:83:86:d0:ea:26:bb:e6:
5f:be:4a:4c:aa:5b:68:b5:d9:ba:9c:f1:84:4d:90:46:57:81:
04:38:3d:62:a8:ad:da:01:b9:4f:23:de:df:fa:5d:42:c8:dd:
9c:4d:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:23 2025 by rpki-client on console-fra.rpki-client.org