Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: 7E+kliwJqMQrKp3JJWsxt+8euRR2tSG2i1HxBuS23KU=
Subject key identifier: C2:86:8B:9A:94:42:69:D2:31:CB:E9:0A:CE:14:5C:B8:8A:58:D9:60
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0194BB601DABF07B809310C4A31B31F77583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1153
Signing time: Fri 31 Jan 2025 08:00:25 +0000
Manifest this update: Fri 31 Jan 2025 08:00:25 +0000
Manifest next update: Sat 01 Feb 2025 08:00:25 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: fLQ+3kELxozJdToLsCIxGItqrLCemycMyWYp/GVkRiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1d:ab:f0:7b:80:93:10:c4:a3:1b:31:f7:75:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Jan 31 08:00:25 2025 GMT
Not After : Feb 1 08:00:25 2025 GMT
Subject: CN=c2868b9a944269d231cbe90ace145cb88a58d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:f5:4a:15:29:18:74:aa:c5:f3:78:88:51:
da:ac:dd:38:5c:c6:fb:09:b9:2a:a7:d2:22:cf:c5:
1e:bc:6a:a0:ea:25:9d:b2:00:b0:d8:9d:ba:46:14:
ab:bf:8c:c3:a2:b4:54:7f:95:fe:8d:21:b7:cd:08:
9e:f9:9f:18:70:94:a9:de:08:aa:56:5c:68:d1:79:
39:d2:9d:2a:7c:40:48:dc:ba:59:ef:78:bd:de:e3:
99:57:1c:f2:cb:03:3d:ba:a1:30:6a:6c:21:e8:7d:
af:b6:5e:94:b5:26:0c:7a:5f:36:66:1b:e6:6c:88:
cc:fc:36:12:ca:3e:58:50:07:8c:51:d7:75:be:da:
00:89:b9:d1:54:c3:ac:8e:23:3f:98:b3:72:68:1a:
fe:39:61:af:ba:a8:ec:b0:d8:c1:08:f9:7f:bd:fe:
95:2e:66:7c:c0:d1:ee:19:a2:d2:e5:45:b9:cd:a7:
0d:92:d8:36:c5:e3:96:0d:4e:82:e4:19:c8:26:65:
bf:f5:c1:33:0a:29:a4:a8:ca:86:9b:fe:28:0b:a1:
23:cf:1b:d8:74:b1:b3:92:1b:56:e2:a2:ad:10:38:
46:fc:a6:90:9d:d7:aa:6a:77:92:8a:cf:58:c9:87:
92:2b:a3:93:16:21:db:72:20:06:b9:08:37:f8:d9:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:8B:9A:94:42:69:D2:31:CB:E9:0A:CE:14:5C:B8:8A:58:D9:60
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:cd:30:b9:93:91:cc:5a:41:eb:27:81:c0:98:f1:e9:4a:
fd:fd:34:28:88:c6:33:f9:16:38:3a:c4:fe:f7:5b:bb:40:28:
04:13:87:b6:c0:c7:2e:69:82:e8:4b:1a:44:71:aa:de:58:75:
37:81:94:3f:dd:94:ca:ba:b5:87:95:d0:81:c4:10:24:8f:05:
91:36:28:f1:55:0b:46:ee:7f:d2:e4:e8:eb:c5:87:6d:02:80:
65:a4:fb:8e:07:de:06:73:e5:7b:6a:53:5c:30:ff:42:fe:7e:
4c:2b:2d:fc:a3:d8:44:40:7b:09:e1:9a:06:57:4d:6c:ba:31:
8a:48:2a:73:cf:a2:64:c6:90:72:e8:00:56:af:7f:dc:22:d7:
1d:b3:d4:f8:3c:d4:fc:43:f9:a8:ab:71:19:10:ac:03:37:4d:
24:5d:a8:1e:0f:ad:63:4e:1f:ac:39:fa:3a:a0:d4:86:65:ae:
e5:57:cb:bb:73:83:d1:8d:eb:7c:14:9a:29:9c:fc:67:df:cd:
dd:b7:39:32:a2:9a:71:91:34:6c:9c:d4:89:1d:4b:b6:51:48:
c7:bc:d5:64:60:2f:70:94:c2:57:a7:1e:78:95:cb:af:25:7b:
a0:dd:e8:c6:9d:85:17:f4:a8:7b:d4:7b:68:74:09:6f:22:14:
b2:49:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:23 2025 by rpki-client on console-fra.rpki-client.org