Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: KJtUmFIHKJvt0Qzuarj+Ql7xl2fnH3tvirwEqTTdGLE=
Subject key identifier: F4:F7:F4:F7:BA:A6:70:C0:27:D8:14:CC:64:6F:1B:2A:F9:4F:0F:92
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0194C4634EDCC21C4AB78736C7CFEB3055B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0E2B
Signing time: Sun 02 Feb 2025 02:00:30 +0000
Manifest this update: Sun 02 Feb 2025 02:00:30 +0000
Manifest next update: Mon 03 Feb 2025 02:00:30 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: NwY/UTmncfsCVq6Zfk6yfR6c8r3h/FnO7lY6tVTDE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:4e:dc:c2:1c:4a:b7:87:36:c7:cf:eb:30:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Feb 2 02:00:30 2025 GMT
Not After : Feb 3 02:00:30 2025 GMT
Subject: CN=f4f7f4f7baa670c027d814cc646f1b2af94f0f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:24:8b:0c:14:0f:d4:7c:7c:93:78:92:f2:
e6:0e:30:3b:06:2b:14:9c:58:35:e8:8a:a2:65:08:
88:af:fb:47:a2:cf:92:83:85:8b:65:8d:16:df:d4:
31:47:ad:5c:d3:c5:78:83:59:25:47:7b:64:35:05:
62:0b:d1:56:cf:bc:c0:6b:d2:fc:f5:55:a3:31:33:
db:77:8c:a4:84:08:9e:a3:cc:d6:15:69:0d:eb:68:
28:90:63:63:b4:7c:2f:72:44:78:25:5e:ec:d6:9c:
da:99:68:12:19:77:5e:a0:85:b6:a8:ee:21:6c:59:
c8:fe:d5:b7:72:f5:c0:b0:3d:5b:01:60:cc:e3:a5:
02:fa:69:b2:bf:5d:cb:b2:07:b5:0a:9c:c0:36:a9:
6f:2f:de:97:67:30:59:b8:d5:eb:f2:3e:54:cc:77:
5e:ef:51:2c:0a:0b:79:e7:64:77:32:55:6b:44:2e:
53:7a:c2:45:d6:13:99:2b:6d:05:fe:71:a8:fd:72:
7b:ba:46:40:4a:b3:38:1e:30:f5:87:12:d9:46:65:
28:8f:3a:4d:3e:2d:7c:a3:99:6e:f0:c6:ec:32:45:
b7:2b:ff:05:73:79:aa:73:3c:5f:fd:83:89:ba:10:
71:7b:ab:e4:56:7f:7c:eb:6e:6d:4b:b5:14:31:80:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:F4:F7:BA:A6:70:C0:27:D8:14:CC:64:6F:1B:2A:F9:4F:0F:92
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ee:ff:aa:46:d1:f0:6d:09:dc:1a:3a:38:d0:89:14:41:11:
f2:b4:8e:92:91:78:11:44:81:a3:c8:0b:bd:01:66:c2:f1:75:
4a:fe:16:52:22:00:16:9b:cb:9c:74:da:12:6e:da:fe:cb:49:
e7:5d:9a:4a:44:91:5e:a0:44:c7:2c:ae:16:3d:db:85:d0:58:
f3:b0:c2:45:ec:ad:f9:9a:53:ca:16:f2:ba:04:7c:7d:1a:9b:
04:65:a8:24:0c:de:03:1d:9d:57:cd:85:2e:eb:c9:1a:6a:a4:
c3:84:cb:5f:da:b8:61:31:eb:b9:6a:2a:a2:15:6a:1d:7f:81:
5d:8b:bd:f4:20:8b:20:1f:32:c2:81:20:f5:dd:0c:20:f2:3d:
fb:1b:74:9a:02:c3:04:d0:60:1b:3e:dc:94:a7:a3:50:99:f8:
33:d4:b6:59:88:84:aa:6d:39:1e:6f:c0:46:61:e6:56:4d:23:
40:0d:96:95:04:e2:93:76:43:aa:f1:f9:9d:ee:78:95:b8:af:
3e:85:9f:4c:2f:1c:c3:1d:63:c3:34:7e:3f:e4:b6:09:f2:6e:
fa:3e:07:66:3c:30:e5:35:40:d1:35:51:4a:27:36:bc:0e:b0:
23:03:db:1f:e9:9d:8b:ed:ec:4c:1e:ac:49:df:67:0d:0c:b1:
cf:fd:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:58 2025 by rpki-client