Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: jKMHPe1nzmUKJEu043LJqFskeSYTu2f8V+tQYLKBI98=
Subject key identifier: 1C:16:32:8C:DD:0F:89:6D:74:00:4E:58:F8:F5:F7:53:6D:BC:70:22
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 0194BA84AB237BFC138B0CD6DAAD02F19503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:44 +0000
Manifest this update: Fri 31 Jan 2025 04:00:44 +0000
Manifest next update: Sat 01 Feb 2025 04:00:44 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: GGD0VSdaqvHQiZr2orhraJiAjpkMXqWbVeEKaX7NEqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:ab:23:7b:fc:13:8b:0c:d6:da:ad:02:f1:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Jan 31 04:00:44 2025 GMT
Not After : Feb 1 04:00:44 2025 GMT
Subject: CN=1c16328cdd0f896d74004e58f8f5f7536dbc7022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:ce:dd:2a:6e:8f:f6:16:cf:fd:ac:20:a1:
14:2e:bf:a5:19:a1:9f:9e:e1:57:72:b1:b4:98:09:
ed:36:2d:7d:e2:a3:20:64:a8:83:55:b7:0c:11:2e:
2c:48:1c:70:0e:dc:b2:a5:84:9b:4c:f7:1e:bb:fe:
1d:2e:89:a0:67:64:24:a5:8c:78:42:bd:79:ff:4d:
10:23:d4:4e:7e:2f:cd:c5:e1:31:6c:c3:f1:37:f1:
bf:75:1d:6a:a1:6d:2d:8e:a1:a2:73:22:23:a0:20:
2a:e6:fb:bc:04:22:c5:dd:32:1d:c1:4d:7c:42:c6:
9c:b5:20:6a:26:b6:dc:d0:8c:43:06:20:7d:f4:a6:
36:36:9a:5b:6f:5b:3d:d6:96:17:44:b8:a4:d8:10:
a2:d1:22:68:c1:d7:17:3a:9f:7c:e2:9a:37:0b:e9:
b8:95:0d:45:c0:9a:63:a1:fa:75:66:4e:fc:0d:5e:
24:02:aa:64:d0:8e:36:fd:69:fc:5a:63:f5:db:ef:
d3:87:fe:60:a2:95:43:4a:a3:74:ce:44:cd:40:2f:
34:a5:82:06:50:49:4b:55:a1:9c:b8:17:e1:d8:7f:
47:c0:8d:42:c7:56:52:60:83:7b:59:7d:29:5f:59:
d8:cf:58:a5:87:66:70:6c:e6:c9:8e:6e:b5:3d:1a:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:32:8C:DD:0F:89:6D:74:00:4E:58:F8:F5:F7:53:6D:BC:70:22
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:ba:b1:28:3e:36:5e:5e:54:4c:8c:88:d0:bd:e3:a5:f0:
ee:66:91:20:ec:48:00:38:a0:5b:e1:04:06:f8:bb:cb:ba:06:
56:9e:73:4b:07:d8:0d:ed:71:47:68:c6:fe:3e:47:11:08:52:
af:22:2d:26:9a:72:e1:04:5b:49:39:87:e5:96:8c:77:9f:7d:
63:92:91:57:12:56:13:bd:ce:41:9f:10:f0:74:c9:c4:d9:cd:
01:e7:25:a2:a2:e6:a4:b0:22:50:7d:c1:ad:bd:82:b4:a2:c6:
bd:43:0c:c5:2c:2b:08:55:d7:6c:6e:16:78:11:d4:2c:c3:a8:
e4:73:82:93:f5:b5:1d:e6:7f:6d:f0:aa:71:65:f1:78:58:85:
27:68:81:1e:82:46:bf:c3:2f:f7:68:8a:71:79:c6:47:a6:2e:
83:55:54:e2:f5:15:06:d3:88:9b:47:d1:98:3b:de:3f:cd:02:
e7:0c:7d:63:c7:2e:de:76:7b:2f:20:77:a9:32:ea:35:84:37:
29:c7:f5:98:0e:5b:a9:19:3e:15:94:e4:b8:3b:ca:2a:3a:ed:
26:38:0c:8b:9b:9c:92:72:1b:7f:1c:27:35:fc:82:f9:3f:6a:
8e:7c:d1:97:7b:08:41:90:65:22:3d:7b:b9:57:52:e4:3e:fa:
35:df:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:01 2025 by rpki-client on console-fra.rpki-client.org