Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: IrQjYU+TG1i/zRJckmDsvJi4vwzevbJ+lfIXKAJi6Tg=
Subject key identifier: 5C:A5:C8:F4:72:77:C0:FF:15:7A:29:B3:3B:D4:AF:18:57:C9:60:7D
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0194BB9744282ED6E83A55D0154FD2BA5727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: yfIfu69sScCatUmnFxOzjpM2rwfzBGWtggZN/JzccL8=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:44:28:2e:d6:e8:3a:55:d0:15:4f:d2:ba:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=5ca5c8f47277c0ff157a29b33bd4af1857c9607d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:d9:2f:32:bb:26:73:46:09:9f:2a:98:6f:
8c:81:22:1a:d6:94:b2:80:8a:25:e8:9f:d6:32:ba:
51:72:32:cc:b9:59:19:6d:e0:03:87:a5:c3:4e:30:
86:cf:1f:59:09:cc:44:29:68:09:a0:d8:6f:1b:57:
2e:6c:37:e7:fc:a7:e7:b0:18:88:ba:50:ee:96:dd:
d9:59:9d:1c:ad:40:ff:fa:2b:96:0f:5f:90:a4:81:
57:d5:d7:d9:fe:9e:c1:3c:6c:dd:42:73:fa:13:73:
5d:ef:81:d6:da:ae:01:71:74:a7:98:54:86:9d:f4:
15:2d:ad:2a:23:f1:98:5e:68:6d:13:5f:cb:d4:8e:
31:bc:64:61:82:1b:90:75:95:ef:58:c5:4d:9a:87:
c3:ce:db:ce:ca:52:35:63:87:4c:b5:1c:58:ef:a7:
eb:a1:fc:88:8a:68:4e:9d:1a:d0:b9:1f:0f:2f:19:
0e:ab:8c:f2:9d:22:9f:65:53:db:25:07:b6:04:08:
69:43:a5:7b:a4:81:fa:6c:60:ea:5f:21:69:c3:d3:
a3:21:99:f9:c7:c4:42:3d:66:89:69:a8:42:7e:6e:
52:f1:b4:1f:16:40:20:ba:2a:a7:86:0b:08:bd:eb:
ad:2e:3d:33:a4:63:66:58:d3:cb:af:3d:d5:db:65:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:C8:F4:72:77:C0:FF:15:7A:29:B3:3B:D4:AF:18:57:C9:60:7D
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:44:a1:9c:20:76:56:df:ff:27:1f:98:b9:60:d1:e3:93:3b:
38:18:7d:09:58:8c:ed:9b:8f:dd:22:3d:6f:a1:a6:82:10:0f:
a5:76:10:aa:8d:cc:6b:83:65:85:33:5a:9e:17:ec:6f:05:2a:
4c:03:9a:5e:b8:ea:f0:36:c3:85:41:b1:f9:79:d2:4d:e8:b9:
42:2c:93:e3:6d:58:31:1e:a7:5b:22:3d:c3:4b:0e:ea:f1:46:
81:b8:97:f3:a6:13:5b:33:e5:54:40:b5:e9:51:10:68:f8:19:
11:30:86:3a:a5:59:c3:95:9c:e4:b8:e2:63:01:fc:76:e8:e2:
9e:e6:f7:2f:d4:f2:df:c5:65:72:93:6d:bf:b4:02:54:36:84:
2f:92:82:b2:8e:48:fb:aa:74:5f:df:7a:87:fd:1b:45:43:e7:
1c:5c:10:bf:f8:33:85:c7:03:93:98:4f:d9:94:fe:1e:1f:f8:
d9:a9:72:4f:43:ee:50:31:53:21:59:0f:45:53:ec:3a:a9:eb:
ea:33:43:38:1d:a8:86:42:27:fe:3c:64:a9:ef:30:47:9c:40:
2f:ed:91:0b:62:1b:1a:92:2c:49:f2:3b:df:96:d5:f8:5b:28:
4c:e8:6d:30:77:59:30:99:47:bd:cd:1f:25:78:10:74:87:40:
00:63:e9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:30 2025 by rpki-client on console-fra.rpki-client.org