Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: 1xY26KqR3tSupS2+kuFOUynaQjF2xylcP+JsdEu97lY=
Subject key identifier: 78:21:10:E6:14:B6:F1:81:5D:4F:D6:4D:EA:1F:21:9F:2D:7E:92:58
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 0194BABBBA55A5F63242427662FDE955CF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 10EB
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 4QeQep/4MVeWQe41DwrWRsQyO6Qvee+v1Fvb+u5WAsM=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ba:55:a5:f6:32:42:42:76:62:fd:e9:55:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=782110e614b6f1815d4fd64dea1f219f2d7e9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:83:94:7a:bb:e7:0e:62:1c:59:d6:72:cd:
33:0e:c3:c4:ac:1d:6b:dd:b8:1e:cc:80:05:81:5e:
6e:1b:9c:f9:d2:24:55:79:ad:fc:bd:cf:cd:b8:e8:
c4:61:88:eb:f5:10:c2:34:ec:5c:ea:bb:cf:75:84:
00:66:7f:8a:b7:b9:64:21:97:48:8d:76:a4:60:47:
46:2a:1d:a3:a1:e0:e8:63:d4:ba:30:1f:d6:2f:7b:
9c:60:22:72:11:c4:d4:3e:88:9b:ee:5b:3f:ba:59:
3c:7b:c1:df:f2:3c:0d:4b:87:67:b1:67:cd:3e:47:
10:9f:49:03:9b:0d:a1:41:f5:0f:78:92:f3:32:d5:
8e:92:be:f6:c7:61:ee:b7:36:31:e1:9c:4f:92:75:
c2:d8:20:2e:fb:6e:96:16:cf:8f:da:2f:79:75:e3:
a1:c5:f8:fd:a4:42:b6:97:c5:e7:de:2a:7e:4e:fb:
e0:cf:64:d9:c0:90:d7:9e:05:7b:21:31:03:b3:34:
4b:c4:29:b1:bb:c9:97:d5:de:7f:1d:ef:a5:03:49:
30:30:6a:7e:5c:75:62:ce:35:0d:81:05:4c:a6:31:
5e:7e:30:53:3e:c2:9d:14:82:3a:e3:4b:7f:e8:7f:
35:b3:c9:28:05:aa:b6:05:ab:8e:28:12:ed:8e:88:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:10:E6:14:B6:F1:81:5D:4F:D6:4D:EA:1F:21:9F:2D:7E:92:58
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:22:d8:1e:3a:85:bd:4a:fb:55:9d:21:59:2e:96:7f:ab:ca:
1e:00:d9:ce:c3:35:76:0b:43:87:41:94:ca:fa:26:73:f1:3d:
f0:b7:7f:eb:2e:e0:b2:ab:5f:53:fb:a5:97:b3:df:59:dd:1a:
f9:df:7a:b6:aa:5b:de:15:eb:a9:6a:b0:1d:e6:63:c2:1d:4d:
11:9c:62:4a:86:b0:17:8a:cf:17:f8:b8:cf:06:dc:e3:6c:10:
a9:ac:61:77:83:80:20:4e:c0:03:3d:14:d0:a5:47:03:54:0b:
dc:e0:75:26:d6:16:47:04:d8:04:01:fe:16:66:c8:15:3a:13:
e8:40:3a:f6:61:7d:b8:2f:ca:37:2c:85:d3:ae:e2:a7:cb:72:
74:31:65:df:0f:2e:b9:d8:7b:5d:52:ab:c3:cd:3c:6c:a8:73:
08:1f:90:b1:b2:0e:d1:0c:e4:54:9c:b8:09:eb:88:d5:88:83:
4a:ff:e5:50:10:8d:ce:d3:ad:68:e9:d5:fa:9d:dc:8b:f5:09:
28:64:86:87:9c:44:3a:07:31:fb:25:c5:45:af:d2:b4:9d:b9:
0e:12:5b:6d:bb:d3:33:92:ec:22:86:70:ec:e8:e7:b8:ce:07:
9a:6d:b0:b2:c8:26:ff:4b:f8:91:03:63:b8:c9:dc:19:cb:59:
3d:1a:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:02 2025 by rpki-client on console-fra.rpki-client.org