Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: P0VA1vbL5uUeRj8S3iYck1YEza+b8oen7YL7ZG5i0w0=
Subject key identifier: 7E:3E:5D:5D:82:09:91:3B:A1:99:B3:BD:9D:8C:61:A8:D8:69:F3:96
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0194C319CBE046E9761700AFB77D5C657ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 08
Signing time: Sat 01 Feb 2025 20:00:35 +0000
Manifest this update: Sat 01 Feb 2025 20:00:35 +0000
Manifest next update: Sun 02 Feb 2025 20:00:35 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: 8ZavbPiCt4nDrVq/z78sP5TR9cYsiAnishUHAuTr8Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:cb:e0:46:e9:76:17:00:af:b7:7d:5c:65:7a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Feb 1 20:00:35 2025 GMT
Not After : Feb 2 20:00:35 2025 GMT
Subject: CN=7e3e5d5d8209913ba199b3bd9d8c61a8d869f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:f8:51:63:36:6a:93:b5:b5:77:49:b5:30:
da:8f:30:f2:30:dd:04:34:8f:46:b5:a0:23:b5:8d:
96:69:f2:53:c7:e4:7e:9b:0d:82:f5:fa:b6:82:07:
d4:08:6c:b4:06:9e:06:38:3a:2e:1f:a9:79:f7:0e:
ae:ab:c7:c5:da:f9:f5:2b:02:6e:35:36:a0:7e:19:
3a:ed:73:3f:04:36:61:7c:41:ac:1c:e8:44:92:b5:
66:52:79:75:d2:0c:47:ed:55:96:0c:83:08:d7:30:
87:5b:de:7d:fd:96:b2:20:92:d1:9d:5a:07:2d:d2:
c4:c2:9d:70:7d:6a:b7:fa:3d:c2:37:c7:dd:eb:f5:
fb:87:c2:f9:a7:a9:9d:0d:41:78:a4:30:0e:9b:26:
d5:30:f6:d9:bf:c2:3d:7f:e3:38:95:15:9d:29:89:
60:b9:75:50:c2:22:96:cd:d3:7e:7c:4c:3b:33:d5:
ad:60:6c:91:ee:1b:4b:33:96:be:94:36:bd:54:3b:
c4:eb:10:e2:c0:0e:f1:d1:5c:c5:22:3e:dd:99:1e:
0c:b0:c0:40:56:03:cc:04:e4:06:61:35:83:a8:96:
6d:4c:05:35:89:2b:3d:5f:e5:78:ef:bf:41:42:ec:
c6:b2:12:48:6e:6f:cd:82:47:e6:17:dd:b1:de:50:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:5D:5D:82:09:91:3B:A1:99:B3:BD:9D:8C:61:A8:D8:69:F3:96
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3e:2a:29:9e:9a:df:78:4b:14:10:67:cc:15:8a:f6:3a:ac:
29:7b:40:e1:50:dd:7b:15:58:1b:2c:51:62:e0:ab:46:88:b5:
02:13:d4:09:66:2c:ed:c7:d4:d8:95:11:87:6e:d7:5f:85:91:
c8:4b:8c:d2:23:c1:32:fd:3a:5b:a5:ce:3b:7e:cd:db:0b:fa:
35:ae:7a:96:58:86:69:c7:b7:5a:65:df:ff:82:27:ff:a3:94:
0e:1d:b4:6c:c7:59:48:55:16:4b:f7:dd:15:19:07:80:74:8d:
98:ac:62:d4:d2:09:e1:9b:2e:15:74:ea:c2:1e:9a:c2:d5:39:
46:a2:6a:ad:82:08:7d:bd:f6:0f:2c:9d:38:a9:1f:b1:9f:e0:
5c:35:ca:10:e4:f9:e5:2f:6d:6e:70:00:e5:72:7d:d0:63:a9:
36:af:77:47:df:f9:59:38:9a:b2:11:1a:06:2c:40:56:c1:dc:
d0:56:41:9e:3e:7e:da:69:b6:c5:24:f3:cd:85:e4:98:68:7d:
6a:27:44:c8:f6:d4:f5:12:08:10:4e:57:a4:9a:a5:e2:dc:c7:
6b:f0:5d:15:15:cc:e4:a1:f7:d4:08:55:b2:27:17:78:3b:d6:
1e:55:21:58:ca:03:76:80:d5:68:2b:f1:fb:27:09:02:7a:d9:
3f:d0:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:16 2025 by rpki-client