Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: G+4eS9JcDRHBAh2kEvpNp/F7E2UveA/9+OpPcnLGvJQ=
Subject key identifier: 1E:E4:B1:A2:9C:79:F9:70:52:0D:57:94:BE:DC:EC:99:CC:D2:0C:FE
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 0194BAF264E7E8EDBA512FCC788156446B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0CB0
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: TAlHu5VUAbHjqS+wR5ZsIrNGN5lshr/xRc3HxFMNlao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:64:e7:e8:ed:ba:51:2f:cc:78:81:56:44:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=1ee4b1a29c79f970520d5794bedcec99ccd20cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:93:b8:b3:29:93:bb:b8:0f:42:48:b6:9d:
4e:a1:af:f0:28:58:1c:ac:be:c0:12:a5:61:de:de:
cf:8b:07:c6:42:76:c4:d9:0d:77:15:7d:98:63:37:
49:b9:13:11:30:c4:63:4b:b4:7e:0a:7b:0e:1b:14:
c1:e5:bb:ae:2d:0e:5c:64:52:55:0e:16:0f:9d:df:
ca:b6:73:df:be:22:33:50:65:34:95:5d:42:1a:2c:
63:41:0c:f2:4e:16:c3:94:65:35:6a:8e:2d:4c:d1:
65:bb:21:67:c4:74:0c:a1:7c:fd:39:b4:5f:31:6a:
74:f4:34:c5:85:3b:bc:94:0d:a7:c7:f9:41:46:40:
63:ae:10:6c:ca:14:16:bf:52:dd:df:bd:0e:38:2d:
15:ff:a0:b7:4d:14:f0:da:c6:d4:57:e6:fa:a0:3a:
8a:e3:2c:e2:21:7c:d4:1f:2e:b8:15:14:63:34:40:
b3:52:2f:d7:42:23:7f:54:08:d5:58:ae:eb:47:5a:
be:57:51:ef:07:32:69:96:a7:c9:26:71:ca:81:e4:
2f:69:8d:6e:97:bd:60:94:71:98:3a:8d:f6:3f:e6:
5e:ae:bd:65:42:29:a4:e2:81:ae:a3:8a:5b:ae:46:
93:09:98:b7:e6:65:a1:70:e0:f6:c1:56:04:92:a9:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:B1:A2:9C:79:F9:70:52:0D:57:94:BE:DC:EC:99:CC:D2:0C:FE
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:7d:dc:62:3f:de:e9:41:39:ae:c5:68:7c:9d:f2:4b:e5:
1d:71:57:cf:d4:9e:e0:4c:2c:c9:55:d4:3f:31:c9:3c:d5:67:
73:03:fc:9a:86:45:0e:1c:06:0d:f1:76:1a:22:57:34:dc:93:
86:3d:22:c5:35:0e:9e:9e:a0:06:10:b8:5a:1b:cd:66:a0:2a:
26:03:21:bd:4d:c2:11:b9:65:15:01:d4:3f:95:65:24:fc:22:
13:ed:3a:f4:03:65:78:fc:57:69:58:26:73:86:5e:93:94:74:
92:86:26:26:2e:2e:28:d9:1e:87:3b:97:e5:b5:52:11:63:56:
4e:da:cb:13:99:50:8b:84:bc:fa:52:22:3c:30:e8:ae:13:3b:
e4:00:37:c7:d0:9f:f8:ce:61:74:fe:f6:2f:9d:1e:f6:d2:87:
10:5b:e8:95:31:4c:53:f6:e9:22:fa:8c:19:38:32:d6:91:6a:
50:84:c7:6d:61:cd:67:37:b0:ed:e1:f8:9c:46:75:f9:20:d1:
ad:10:4a:91:3b:fa:cc:89:99:f1:81:9f:0f:3d:ac:99:47:29:
dd:f6:24:5c:62:11:69:f1:36:55:53:68:bd:b4:d6:29:81:fe:
e8:af:6d:b1:e4:80:0a:43:13:f3:33:da:e6:d6:a2:d9:ee:9c:
5f:01:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:19 2025 by rpki-client on console-fra.rpki-client.org