Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: 7SYdo5F4PuFP3vbWRK9Su9aHMH9zH+GjuWsfQUH+Qzs=
Subject key identifier: 77:AF:57:74:63:BC:8A:2C:DA:85:BD:A4:5B:78:0A:0C:68:59:64:F9
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 0194C3F5734C5593B712421CBFD7E7395FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 1081
Signing time: Sun 02 Feb 2025 00:00:30 +0000
Manifest this update: Sun 02 Feb 2025 00:00:30 +0000
Manifest next update: Mon 03 Feb 2025 00:00:30 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: ayM5eRr1eNE+WR+YHug4d9i/77YYM9f0zDWWMiN1O1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:73:4c:55:93:b7:12:42:1c:bf:d7:e7:39:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Feb 2 00:00:30 2025 GMT
Not After : Feb 3 00:00:30 2025 GMT
Subject: CN=77af577463bc8a2cda85bda45b780a0c685964f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:86:27:8b:c4:04:3c:6b:c9:f6:e7:23:d6:
fc:3d:2e:9e:e3:95:fb:9d:5a:2c:81:96:84:1a:ac:
23:a8:a8:cc:77:dd:7e:aa:cb:e8:b4:b4:2a:4c:25:
0c:1c:1d:54:13:61:eb:d1:f9:08:8a:eb:c1:0d:d2:
98:cb:dd:72:84:50:72:22:13:bf:92:5e:2b:f5:43:
3c:98:29:ef:1e:91:1c:9c:01:3e:38:77:83:e8:0b:
21:5e:77:6e:a9:13:78:f9:ad:3c:82:5a:9f:db:b2:
93:08:db:0d:ea:29:f9:1c:f0:e4:90:f0:ea:d6:f6:
4c:b3:a5:2b:18:49:33:48:7a:6c:53:21:41:65:7b:
af:d5:b9:1a:52:9f:f3:fb:5d:92:b6:19:1b:a4:96:
d0:b9:aa:4b:db:ec:30:ca:c4:d4:da:08:8f:b1:69:
f0:16:25:4b:21:fc:94:72:67:9d:bb:a2:c9:cd:f3:
87:56:b8:db:f0:1a:28:b8:67:ad:23:1d:a7:05:33:
5c:64:97:33:f3:b8:4f:ba:e5:06:aa:91:eb:a6:00:
25:2f:d7:2d:67:2a:aa:c3:04:67:36:e5:a1:1f:79:
b1:c8:55:01:3d:6a:b6:e6:c6:41:65:0a:20:1c:c6:
0d:62:8f:82:20:9a:b4:f1:ab:49:02:0e:88:97:ba:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:57:74:63:BC:8A:2C:DA:85:BD:A4:5B:78:0A:0C:68:59:64:F9
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:12:cb:8b:38:57:ef:22:82:ad:7f:27:79:b7:ab:60:e7:ba:
9a:34:8b:c7:59:01:09:52:f9:a1:e1:98:59:dc:d5:ea:e6:cb:
76:c8:12:16:ef:64:bf:27:bf:38:cf:eb:77:eb:d7:68:1a:0c:
0e:a0:65:de:34:56:40:d8:5f:dc:1d:f9:e3:30:e5:90:34:ae:
c6:27:27:f3:4d:7b:0f:d7:8f:fc:9f:f5:7e:3b:44:87:75:22:
af:c9:43:03:e4:c0:1d:23:5d:40:a7:5f:79:fc:61:a6:ba:0c:
74:37:ba:f7:0c:bd:f1:36:0c:9e:b4:fb:8e:73:65:0f:6e:81:
9e:bd:cf:94:75:72:00:f2:3f:8a:b3:2c:82:c8:db:75:d1:a2:
f2:9c:f2:0a:da:90:cc:15:a8:44:fc:f9:c3:17:49:ce:b2:a9:
9c:ed:99:1f:44:8d:58:3b:75:ef:f1:93:ee:a5:26:cb:aa:85:
80:2b:a6:5a:18:9b:e8:e1:99:18:f0:40:cd:e9:8f:17:c9:fb:
06:97:ea:24:2e:6c:14:68:7d:29:19:b1:91:20:ab:72:76:b0:
94:32:24:c0:a0:de:a7:fc:9e:d5:b9:72:0c:8e:35:78:17:fa:
eb:17:40:7d:34:48:d9:c2:7e:b9:f3:1f:57:d5:4d:7f:08:8e:
b3:8b:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:03 2025 by rpki-client