Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File: dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier: gqRHmjg6Zr/WgJ6MGrR3ZR1ZXD8f9Pev0xTB3TybEp8=
Subject key identifier: 5C:C8:D5:61:28:54:44:2F:BB:3B:F3:6C:AD:88:17:7F:A9:54:84:90
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial: 0194BA844CE5A9D77995C0A54D90247EF50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:19 +0000
Manifest this update: Fri 31 Jan 2025 04:00:19 +0000
Manifest next update: Sat 01 Feb 2025 04:00:19 +0000
Files and hashes: 1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: hnFWIXQ5R1DOBJLODwEg1sIO1b6VsOB+NtmmozKTT0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:4c:e5:a9:d7:79:95:c0:a5:4d:90:24:7e:f5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Validity
Not Before: Jan 31 04:00:19 2025 GMT
Not After : Feb 1 04:00:19 2025 GMT
Subject: CN=5cc8d5612854442fbb3bf36cad88177fa9548490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:73:40:37:b4:48:ff:3f:9b:70:56:de:81:
25:87:a9:c3:ac:3e:2a:2c:f7:65:21:45:6c:16:c0:
e5:7b:26:f6:a8:c4:5a:3b:b9:2f:d6:cb:cb:ec:d1:
a3:d6:78:7e:79:e0:ec:28:43:af:26:32:98:d8:c9:
f9:4b:90:88:dc:50:c0:4e:bc:83:41:23:36:e1:1b:
48:e2:51:c6:72:45:d0:46:b7:5c:13:41:37:ac:b6:
5b:45:59:9c:ba:c8:ce:d4:c8:3b:6f:97:f5:91:b0:
b7:02:dc:ed:8d:21:28:49:64:28:ff:a6:9f:3d:bc:
fb:80:fe:9e:53:2b:ef:3b:61:a5:40:0c:9b:ad:66:
d2:e1:d6:28:ed:0f:a6:3f:cf:7e:31:23:d4:f5:d7:
43:16:91:83:2d:fb:8d:5e:91:03:83:4b:4b:49:56:
55:d3:a4:da:d3:10:99:62:f4:15:03:bf:51:76:46:
b5:a5:b4:3d:16:61:5c:6d:12:b7:57:03:30:9c:cf:
f3:bf:bd:3b:f4:43:54:42:81:06:59:71:8d:f1:7d:
e2:e6:92:f1:8c:a3:74:65:1d:8a:05:83:12:5c:dc:
d6:ad:71:d2:46:7e:f4:c5:ed:c0:07:6a:26:88:ff:
38:2d:5d:eb:10:ea:60:30:4e:ce:c0:e3:6c:5f:5c:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:D5:61:28:54:44:2F:BB:3B:F3:6C:AD:88:17:7F:A9:54:84:90
X509v3 Authority Key Identifier:
keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e4:61:ea:ed:9f:a0:69:58:4f:17:0f:aa:33:3f:e4:0f:7e:
cd:a1:16:d2:25:44:0b:b0:fc:4d:25:8b:a1:3b:b8:49:10:67:
9f:a5:0e:ec:fb:9c:ff:4c:07:e0:a0:2c:bb:a3:0f:04:07:61:
ec:79:c2:42:78:84:8a:09:45:fc:da:bd:a9:f9:0a:61:7e:86:
10:78:59:83:0a:17:0f:db:c2:3e:82:ec:18:bc:d8:17:d4:86:
c4:c7:b2:ad:0e:c0:e7:00:f9:0f:8d:bf:f9:5b:b8:57:df:bc:
ff:16:28:26:9e:b6:3e:be:e1:a6:5a:34:10:28:eb:8e:0c:12:
35:e7:fb:c5:38:17:cf:38:cc:b1:f6:fb:f2:37:a9:df:cb:60:
32:b2:55:1d:ba:7c:08:d4:e3:29:bd:89:12:1c:84:ce:4e:35:
fd:98:da:cf:c2:54:ea:71:e3:d7:3e:ab:2d:67:98:3e:71:77:
b3:72:19:13:63:ed:49:c2:b2:e1:05:b7:89:3d:04:15:ff:b2:
7b:47:82:82:d1:d7:76:f4:e8:78:d8:92:0d:99:d0:bc:e4:0a:
ce:39:9f:62:30:9a:89:77:b9:6c:ff:02:8d:5a:22:a5:49:9f:
ef:19:a6:c4:23:3e:b4:ba:99:d5:26:5e:63:e3:b3:83:91:53:
21:ea:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:24 2025 by rpki-client on console-fra.rpki-client.org