Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File: bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier: CBRis7YNwsWTdufaR3L0AEp+SYUA+nLXW1sQ13yKaCo=
Subject key identifier: 9E:F2:F7:98:0A:FC:49:C5:6D:8E:0C:9E:EB:E0:2C:A1:BC:BF:00:87
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer: /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial: 0194BAF274B797CEE6F14EA48D8CF397023C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:39 +0000
Manifest this update: Fri 31 Jan 2025 06:00:39 +0000
Manifest next update: Sat 01 Feb 2025 06:00:39 +0000
Files and hashes: 1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=)
2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: WVTMUfWJiWyzjWFNzSHWn+cMqNYQ1HOJGCICsCFd3j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:74:b7:97:ce:e6:f1:4e:a4:8d:8c:f3:97:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Validity
Not Before: Jan 31 06:00:39 2025 GMT
Not After : Feb 1 06:00:39 2025 GMT
Subject: CN=9ef2f7980afc49c56d8e0c9eebe02ca1bcbf0087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:cd:d4:46:1b:cd:96:d0:1d:b0:da:6a:0e:
06:71:5f:b7:a0:4f:f2:c0:3b:f9:4e:8e:ed:5a:6b:
7e:7f:74:ac:1e:68:b2:9e:52:89:c4:7e:1a:78:b8:
00:2a:97:7b:b7:f4:e7:0a:05:5a:a3:f5:83:6a:c4:
07:35:f7:d6:94:a4:30:36:e6:0d:53:80:a3:a3:38:
d7:a9:69:65:7d:60:79:74:6e:54:0c:5c:3d:6b:2d:
1b:1c:07:b8:fa:fc:e5:78:b1:b4:a9:f1:43:f1:9a:
f3:66:76:81:3b:c2:59:b6:b6:eb:17:aa:52:e0:d1:
22:f6:09:33:e2:d2:8d:cc:60:96:e7:0f:c8:a6:2f:
36:cd:20:2f:e7:8d:b4:23:2c:93:56:70:1d:d5:4c:
1a:1a:38:85:c3:47:a9:ca:ba:5d:a4:33:93:1e:50:
be:df:1c:d1:94:b0:90:37:5a:3a:7f:ee:38:56:76:
68:ca:5e:a0:bb:44:bd:c9:c0:99:bb:07:12:21:ff:
dc:eb:b9:1d:43:54:ba:90:35:d1:aa:30:20:56:43:
20:5c:01:27:f8:62:06:fa:da:b9:f1:cb:94:cc:1b:
66:6b:5f:3a:10:b2:92:08:3b:55:90:ac:b7:e1:93:
c1:32:cc:0b:f2:e7:f7:e6:26:9e:f1:67:be:9d:ee:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:F7:98:0A:FC:49:C5:6D:8E:0C:9E:EB:E0:2C:A1:BC:BF:00:87
X509v3 Authority Key Identifier:
keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fd:eb:28:e3:b5:82:47:71:31:b8:0b:fa:9f:b9:87:38:99:
7b:c2:10:c8:85:f7:da:07:ef:78:0e:20:28:1b:60:4c:f6:e7:
bb:95:7f:38:93:59:c3:c3:27:e8:18:01:48:c5:08:91:dc:03:
7b:ef:d7:c5:92:b2:06:e6:0d:1b:29:8e:71:d3:a6:5a:7b:31:
c9:c2:c9:fa:62:e5:3c:22:cb:e0:19:fe:20:8d:54:c2:50:b6:
a0:50:03:0f:40:0d:66:27:88:d5:79:da:84:a3:b8:63:e1:4c:
4c:3c:8c:af:74:a8:62:b3:68:f9:9f:96:6d:57:cc:4e:e1:91:
51:12:f1:ed:27:8b:c4:80:06:00:60:47:6b:34:7e:ad:b3:c8:
db:40:22:56:47:7c:0b:64:a7:2b:1e:3f:c8:3c:e8:3f:c4:74:
3f:71:7c:61:d4:ae:e6:99:92:a0:5d:2f:71:b7:30:28:6d:40:
a3:dc:e0:af:17:f7:62:89:ee:08:87:94:83:69:c9:02:5a:4b:
ba:16:77:88:f5:99:9a:83:7f:69:7f:47:9f:fc:14:56:28:b3:
57:74:e1:6e:8c:d9:57:5d:c7:54:22:6b:9e:a1:a5:02:95:27:
61:a3:ad:ce:94:f7:81:84:e8:28:93:04:a6:53:31:f3:8c:e3:
38:79:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:07 2025 by rpki-client on console-fra.rpki-client.org