Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: mFmqBQ1FUi8P5cgJDUk3GuuqZB1DHD4/3j9ZWMso+/w=
Subject key identifier: AA:A4:5A:12:4E:86:65:A7:E3:D6:C1:EA:16:C1:1A:96:2C:8D:FC:45
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 0194BABB98B0DA5C51F365EC938F4C89B15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:44 +0000
Manifest this update: Fri 31 Jan 2025 05:00:44 +0000
Manifest next update: Sat 01 Feb 2025 05:00:44 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: QHUs+sN8q09u2M5VPQSJwnpufleBqbmQl/KC+vQ2LVY=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:98:b0:da:5c:51:f3:65:ec:93:8f:4c:89:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Jan 31 05:00:44 2025 GMT
Not After : Feb 1 05:00:44 2025 GMT
Subject: CN=aaa45a124e8665a7e3d6c1ea16c11a962c8dfc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:b3:81:59:5c:aa:d2:38:75:e6:60:14:2b:
73:64:09:c0:07:e4:a9:5e:5f:b7:fe:43:93:2e:a7:
92:c5:07:4e:fa:f9:49:08:4f:87:98:3f:79:41:f1:
42:95:a2:b2:87:72:16:e8:13:fe:79:7c:81:fe:ac:
f2:2e:55:ec:1a:29:ee:e2:06:57:7c:7c:cd:8d:7b:
6b:df:92:f7:7f:7b:c9:a3:ee:d8:b2:5d:dc:ef:3b:
30:30:7f:cd:53:83:e8:cc:bd:c2:ea:0b:21:51:94:
c5:3c:88:e8:12:b7:56:2c:60:b0:48:e9:e0:8d:62:
63:81:80:2e:70:b2:72:f9:6b:90:79:7a:3a:e2:bf:
aa:f0:5c:12:c6:27:ec:95:3d:44:62:52:50:e8:d8:
2b:7f:9e:04:79:21:76:34:6c:18:df:5d:3d:09:30:
9a:78:93:25:6d:3f:84:82:e8:f3:ab:43:db:32:7c:
21:c7:fa:62:ad:16:47:90:60:14:78:f5:14:cf:7a:
c3:41:81:6f:26:bf:88:51:c6:01:90:b6:f8:39:da:
d2:eb:0e:a2:24:e2:8d:74:7c:31:1a:91:31:41:0a:
f9:31:22:3b:46:fc:f5:35:bb:9f:ba:97:e2:43:44:
8f:10:91:b2:dc:30:78:ec:c0:bf:85:e6:7e:85:0f:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:5A:12:4E:86:65:A7:E3:D6:C1:EA:16:C1:1A:96:2C:8D:FC:45
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f9:f3:0d:1e:a3:12:ab:d2:ce:f9:8f:e7:62:2f:f5:31:f1:
f5:05:1c:82:36:f8:73:b2:1f:0a:85:47:2c:cd:38:94:a9:13:
78:72:c1:c1:66:af:a1:4a:2e:96:c8:b7:a6:cc:08:2d:25:50:
c3:7e:03:75:ff:3f:6d:6e:4d:31:d8:31:9a:1c:bb:5c:04:fd:
30:b5:e0:d3:04:06:ca:ec:00:8d:e2:f3:8a:86:30:7c:0e:47:
27:a6:61:9c:6f:34:17:27:dd:db:e4:a9:c9:47:1c:e9:02:60:
d7:d4:f4:31:e9:1a:b1:d3:85:13:3d:fa:d5:dd:ce:22:1d:1a:
d7:53:f7:b1:5d:c9:6c:fc:99:52:05:5b:c5:1c:01:ef:9f:d6:
10:66:f1:82:de:4c:14:38:15:c1:a3:5d:08:8b:a1:30:8a:af:
17:e1:de:e9:e7:25:3c:f2:06:9a:e6:f0:6f:95:a9:2c:ca:4d:
93:c8:29:97:5d:5b:3b:d2:fa:0a:b5:f7:b1:56:01:e1:e3:41:
00:d6:6f:af:7d:21:b8:70:db:b5:c3:0c:c4:58:27:e7:00:42:
fa:32:fd:73:1d:6f:5d:e5:78:4b:7e:59:b0:9f:7f:37:13:50:
4b:fb:63:75:73:3f:ed:e1:32:71:c4:62:39:fe:91:d2:fc:44:
d9:50:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:03 2025 by rpki-client on console-fra.rpki-client.org