Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: VW328HLQNNtNLMn/T32onWBbllcecXEeg0xM+CAZbKA=
Subject key identifier: AF:30:6F:E9:E1:67:FC:50:8C:55:A8:8F:5F:82:FC:1C:D6:E8:D3:EC
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0194BAF23CEC68CF01C7820D9D2A51FB2EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 0212
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: H7etGPUN8h+6BHeZHoOePXcaU+mY3tz957VNYWrUKvs=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3c:ec:68:cf:01:c7:82:0d:9d:2a:51:fb:2e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=af306fe9e167fc508c55a88f5f82fc1cd6e8d3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:94:88:14:3a:b5:fb:11:73:6b:21:8f:76:
5a:fb:e1:ce:00:db:30:80:7f:b3:b8:77:0c:52:7b:
22:37:86:98:ec:63:8f:63:de:46:f4:c6:a7:80:df:
ce:50:cb:02:98:f7:7c:98:2f:98:d8:4d:9d:59:9f:
8e:ce:c2:27:28:98:66:33:d9:23:cd:c2:c7:d9:c8:
d0:2c:22:24:48:72:9d:0f:87:f0:1d:57:aa:8f:13:
73:77:a2:5e:31:0e:61:00:01:8a:d8:8f:ab:63:14:
ca:f8:8d:31:df:32:89:08:99:a2:e5:a7:08:7d:59:
8e:c3:b8:6b:b7:53:3f:83:2c:c1:63:dc:f5:43:f5:
cc:f6:97:4b:9f:ff:ad:6e:d6:77:c9:87:2a:44:d1:
78:29:16:57:6a:c8:1b:ad:24:47:d0:6f:90:c0:2f:
5f:ac:c0:83:f2:93:02:55:25:d6:3a:d2:5e:15:31:
8c:b6:3e:c5:fd:16:a7:be:89:b8:47:98:83:21:0d:
81:03:bc:b2:1e:ef:f4:f4:9b:73:98:d1:69:c4:09:
3a:f5:31:63:14:12:ee:8a:86:a7:5f:89:ce:87:75:
28:72:14:b4:b3:65:dc:df:36:15:9b:93:6d:44:de:
91:08:97:47:71:f1:12:f1:3f:c3:ef:70:c1:a5:79:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:6F:E9:E1:67:FC:50:8C:55:A8:8F:5F:82:FC:1C:D6:E8:D3:EC
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:2b:e6:e6:46:9c:c0:43:74:6f:d6:ed:9d:e1:52:e7:94:
96:eb:31:21:94:8e:2d:12:56:a5:eb:90:15:90:cb:f1:65:cd:
93:1a:98:93:df:82:7c:7d:7d:78:d1:8f:51:72:34:58:98:fb:
74:68:81:d1:49:04:ac:4c:98:d8:07:64:3a:32:ce:51:47:57:
56:e0:0a:d5:ff:1f:d5:a3:ea:17:90:bd:87:72:07:44:ec:35:
8f:94:73:5b:ff:b2:08:7a:f8:38:46:33:39:aa:c1:0a:b9:4b:
23:5b:4c:46:3c:1f:40:52:c2:c3:66:8b:c3:62:3e:2c:55:03:
ec:26:68:d0:55:38:e6:b9:92:03:86:19:19:ba:c5:38:81:a3:
27:b9:de:c1:ee:41:fe:9a:9c:6b:87:b0:74:3f:32:e3:13:de:
5a:eb:89:b7:3b:32:79:eb:b9:34:64:63:33:ec:71:f9:40:3b:
aa:ac:84:67:47:1d:72:47:61:97:9c:0e:ce:da:fe:95:a7:39:
6d:fe:7b:bd:b2:ac:39:e2:c4:c2:62:30:b7:28:6f:67:87:f8:
bf:3c:95:f3:55:b3:32:c8:22:c4:36:c4:19:fa:9b:af:3d:67:
94:58:cb:15:cc:dd:f3:73:6e:79:79:1e:7e:d7:98:81:82:51:
45:d5:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:07 2025 by rpki-client on console-fra.rpki-client.org