Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File: 04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier: WsnaojbtX6ApH2c/uVNnJ2Z9vjjHW4A0yVYM5nsXLNc=
Subject key identifier: 14:AE:F6:81:E0:14:FB:2C:F7:38:FC:59:00:46:1E:CC:F6:E2:F5:67
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 0194BBCEEE76FD63D332EFF23E200BA0632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: dqs91IEQbXeALafWKms1NAF0BCeW/3Ajb06kJ1Iqe/A=)
2: KLtsjlGrVnzbkeUJSmzIjL7T3xA.roa (hash: dQC1YGAliym4O0fOEkj19V2nKJdGt/YcGpB4KJkFysE=)
3: qD-2pb2qng4nBMfMJeGVrrBitCQ.roa (hash: zUfXGUbYQ8uBiHtXgD2WsAWohVApi6QI7gTEEQIzGnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:76:fd:63:d3:32:ef:f2:3e:20:0b:a0:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=14aef681e014fb2cf738fc5900461eccf6e2f567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:3a:78:06:31:25:49:93:a9:8f:c8:bb:42:
06:22:27:47:26:1d:00:d3:fe:d7:66:fd:d5:d0:ba:
8f:5d:2f:d5:84:3a:00:88:60:9f:ab:2a:4a:85:17:
8d:b3:04:90:bb:5c:90:d4:42:2f:a7:f4:dd:42:04:
62:50:e1:dc:84:b0:a7:91:6a:c5:21:5a:60:f8:6e:
7b:a1:19:a8:70:5e:f5:ff:70:ea:7e:b7:93:68:a2:
28:8d:23:ba:12:31:69:d8:ae:47:7b:b2:16:4f:ec:
8b:1c:68:c2:c8:af:4a:8e:7c:94:a1:ad:65:f0:ac:
62:b1:dc:c0:02:a1:ec:fe:a0:9e:ee:2a:7b:d1:31:
b6:b2:b3:f4:74:f4:d9:ab:fd:fe:6d:bf:e9:14:fe:
ea:7e:d8:31:08:e6:33:95:83:c2:1c:66:cc:4c:9e:
99:be:6c:aa:b6:67:bc:2d:22:08:3e:3a:ed:fb:e9:
67:90:c0:5b:f2:01:ee:81:46:6a:6f:66:01:8c:10:
11:f1:f4:4f:c7:9d:b0:22:a3:7c:9b:97:4b:6f:51:
35:af:67:be:38:fa:cf:25:ac:0e:0d:a3:af:c9:e2:
23:da:1e:0a:d8:31:00:89:7b:98:65:48:37:1d:4b:
d1:1b:fe:4d:73:5a:81:d3:61:93:6a:7d:0c:28:a3:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:F6:81:E0:14:FB:2C:F7:38:FC:59:00:46:1E:CC:F6:E2:F5:67
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:04:bd:29:9c:24:ab:1c:cc:75:f1:97:3f:b0:72:65:60:e4:
04:d5:eb:67:f9:b3:2c:81:1f:59:57:8a:dc:ba:03:6d:bd:73:
7c:a9:96:05:91:42:f2:89:a2:03:82:60:64:be:a7:af:bc:f1:
26:cf:d2:20:11:46:7f:c5:cc:30:97:b3:e9:02:ee:7e:f0:bd:
53:e9:5e:15:9e:0e:00:63:4a:15:9c:fd:68:c3:b8:0c:57:3a:
18:10:c1:a7:db:a7:a7:44:37:92:73:5c:8a:f0:f3:c7:8f:e8:
c3:24:42:43:c8:42:49:69:a5:ac:49:19:a2:8f:39:ee:42:f0:
8c:e7:89:96:e7:c0:46:c0:e3:d8:93:ee:85:9c:9a:ce:42:e1:
36:66:be:49:1b:99:50:40:3f:93:f2:a4:93:4c:54:72:b2:b9:
74:8b:98:90:f7:88:0c:98:31:10:d7:54:9d:12:66:65:c4:3f:
5d:b3:97:34:02:e4:e1:99:07:33:bc:6d:cb:87:6b:1d:5b:e0:
5a:ba:dd:4e:ba:70:4e:30:07:a9:e3:34:35:ce:96:d5:99:c5:
46:95:1b:0f:a0:5f:5c:f8:1c:13:e3:d7:00:80:e3:48:ed:05:
82:ae:b8:ac:b7:0e:ef:fe:5e:1b:16:c0:b7:6b:5b:92:e5:ea:
c0:3a:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:42 2025 by rpki-client on console-fra.rpki-client.org