Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: s4vPmwz4JODkTDD1RRYYDMAGfPitM3nrbDWeXogPG2o=
Subject key identifier: F0:70:01:00:BE:D9:E8:D3:9C:02:33:B1:D3:DF:FC:B5:69:E1:83:D6
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0194BA849B4CEE27179C746C336C5A407964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:40 +0000
Manifest this update: Fri 31 Jan 2025 04:00:40 +0000
Manifest next update: Sat 01 Feb 2025 04:00:40 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: rasHa8iSzEhCRRP/v0VCNSWdDMDaY4DZaFvniiZSPs4=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:9b:4c:ee:27:17:9c:74:6c:33:6c:5a:40:79:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jan 31 04:00:40 2025 GMT
Not After : Feb 1 04:00:40 2025 GMT
Subject: CN=f0700100bed9e8d39c0233b1d3dffcb569e183d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:7f:2f:08:20:d4:ae:62:1b:35:63:2a:99:
1c:1c:69:35:cc:d4:73:e1:f5:35:83:ea:15:1e:07:
e2:4c:a2:ef:da:c9:e6:9e:79:7c:63:6a:2c:b1:cf:
b9:15:0c:29:8a:78:7d:14:38:24:98:24:92:9d:98:
eb:eb:37:d4:d6:ca:89:f1:15:0c:23:5f:3d:37:7f:
48:d2:b8:07:a9:5e:e2:8d:36:e7:1b:21:ce:6d:8a:
f8:b8:91:fe:b5:24:a6:a2:ad:64:4f:1d:bc:b5:9b:
81:d6:52:b5:b5:df:d0:b7:68:a6:d7:b9:98:e0:ba:
4c:a7:23:00:3e:d1:e7:ee:a7:e6:3a:25:f3:ba:49:
3e:dd:89:26:3f:c1:b7:8f:94:5c:70:b3:aa:00:3e:
82:9a:63:6a:d4:08:cb:67:ed:b5:b7:07:96:51:51:
fc:c3:cc:86:ab:fe:00:c8:60:39:ae:1f:0b:9d:f9:
d4:45:40:8f:8f:b3:8c:8c:e6:19:63:e2:ca:7e:4e:
7f:ce:ec:47:20:37:f9:43:46:b4:5c:37:83:b3:ef:
88:c3:24:50:96:2d:6d:f2:27:93:e3:db:19:19:62:
db:5f:df:4a:8e:dd:87:d8:d1:37:a9:cb:66:e5:ca:
b8:94:46:df:11:fb:13:ef:5b:5e:ef:ab:27:ed:7a:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:01:00:BE:D9:E8:D3:9C:02:33:B1:D3:DF:FC:B5:69:E1:83:D6
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d4:d8:49:50:0f:1a:59:cc:51:68:ff:6a:2d:59:35:ed:4d:
1f:d9:32:3a:15:1d:14:2c:c3:55:db:82:f3:9e:30:a6:1b:97:
2f:0f:ec:e5:9e:1e:7d:83:f1:ea:70:95:3d:26:bc:75:cc:cb:
32:3a:c7:84:c4:a7:f1:96:aa:56:92:a8:e6:ee:a0:3d:3c:0c:
b3:f1:66:12:d8:48:42:73:d2:80:ed:06:b1:f4:3d:1c:c1:f2:
1e:1b:1a:f3:aa:d9:9e:16:55:9d:f4:6e:61:8c:39:34:61:73:
b6:37:b3:2c:48:db:25:42:ef:58:5c:f9:57:f1:75:ea:a1:d3:
48:e4:e0:37:73:b6:61:da:91:3c:8a:d3:97:3c:fa:4a:27:5e:
16:06:e7:f5:2e:a4:9e:d6:69:b2:70:40:8a:62:55:03:f5:f0:
7b:39:c6:7b:53:95:de:50:89:df:e7:4a:55:fa:21:30:74:26:
e9:c2:c8:78:34:dc:3f:c1:f1:8c:cd:03:1c:38:af:a8:41:bc:
81:45:5d:3c:10:62:ab:70:a5:fd:5b:36:67:68:14:35:3c:de:
3e:16:2a:4f:7c:e7:82:c2:1f:89:5f:c0:4b:a0:3c:88:4c:3e:
de:89:6b:f6:be:73:23:09:8b:ef:f5:03:77:c0:24:b2:be:87:
09:c4:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:41 2025 by rpki-client on console-fra.rpki-client.org