Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: Fx+4A+KPgqGiXR/IucS+HCe3z8lpCi9AGyBGGICu7T0=
Subject key identifier: 46:6F:04:3F:A8:72:40:F0:83:71:7C:54:ED:7C:F6:6A:08:40:9D:83
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 0194C49A1D1D8D5A1934904D00C752E2C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 03:00:21 +0000
Manifest this update: Sun 02 Feb 2025 03:00:21 +0000
Manifest next update: Mon 03 Feb 2025 03:00:21 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: TxyWVh6TTJQ/HmzJZ21WlKs1INxbBK0VVF3511JuDps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:1d:1d:8d:5a:19:34:90:4d:00:c7:52:e2:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Feb 2 03:00:21 2025 GMT
Not After : Feb 3 03:00:21 2025 GMT
Subject: CN=466f043fa87240f083717c54ed7cf66a08409d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:a6:a3:2d:74:0a:c1:0d:28:52:3c:d6:f3:
ac:b3:1a:49:02:e6:3f:52:4c:21:85:9d:4c:4b:4e:
5d:11:9d:6e:80:37:b7:b1:02:26:4c:15:fd:ca:ad:
64:1b:55:52:b9:0b:52:46:5d:0f:57:4b:20:a5:6b:
48:54:19:85:3c:4b:8a:20:03:25:02:d4:22:67:f7:
19:0b:51:b1:5e:62:da:0a:62:2d:b3:a9:19:35:55:
e6:8f:74:44:d0:8c:df:ee:ca:d3:11:ee:64:c2:1e:
8f:84:54:57:60:c4:1e:c1:b2:14:aa:82:4d:17:ca:
61:81:57:f5:69:c8:80:8d:e1:f5:3d:d6:2f:34:c6:
2f:bb:24:e4:72:38:0f:5e:64:99:f0:31:48:2e:fd:
0e:8f:56:73:96:26:88:07:87:b2:26:bb:a9:78:60:
dc:ce:9a:24:71:dc:fd:d5:78:af:eb:11:3f:27:f4:
6a:8a:94:71:48:ac:f1:51:75:49:51:55:36:99:6c:
6b:dd:68:93:31:78:78:b5:21:09:73:d7:82:0a:c3:
fd:58:e9:09:16:dc:42:65:88:20:b7:c3:4b:67:47:
6c:a6:4c:f9:a2:92:70:ae:5e:06:a4:3c:98:0b:9f:
36:d7:3e:cd:3d:00:01:d2:15:18:01:59:c0:e2:d1:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6F:04:3F:A8:72:40:F0:83:71:7C:54:ED:7C:F6:6A:08:40:9D:83
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:2a:39:4f:0a:ca:92:94:ae:3b:b2:e2:f3:ef:ce:b8:08:
e8:a6:52:20:99:0a:20:00:0f:4a:a2:73:8e:86:18:ff:a7:13:
d1:33:27:f0:0c:41:46:f9:46:e4:84:e8:e0:51:9b:ab:0a:7e:
8f:dd:32:3b:ec:f3:f5:87:c6:43:9c:a8:e6:9d:77:fd:14:9c:
2a:d5:5b:0a:21:68:88:cd:ef:1d:81:3c:1e:e3:99:5f:dc:0b:
b5:d0:e6:a4:cd:b1:a9:79:e9:b3:b6:57:2b:4b:31:aa:58:f2:
f7:ba:94:0a:fe:72:58:38:95:16:b1:e3:c9:ab:dd:54:d1:aa:
16:b9:42:77:81:64:f0:d7:bc:55:a1:8a:09:17:b0:85:bc:8b:
68:a5:b6:f0:d5:8b:4b:fc:61:ae:e5:e9:65:7a:95:31:36:6b:
cf:b7:07:77:5f:5c:74:4d:e6:ec:ac:8d:ea:7b:f8:22:87:40:
ee:d5:bc:8f:cd:d6:74:e1:96:50:75:b2:13:78:2f:6a:7c:0c:
c9:7c:3c:76:46:44:84:fb:4e:a4:f8:92:96:c3:20:a7:01:2e:
67:1f:49:6f:34:b4:b1:97:5f:77:c0:54:96:5c:b6:ac:81:ee:
63:2a:ba:b9:57:0b:ae:6a:4e:ea:d1:b7:bb:b0:0e:89:2b:88:
2c:29:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:46 2025 by rpki-client