Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: k256dCb3dfno+Q1tL+SjoaICEB2Lt18nuDghAED2llE=
Subject key identifier: 3C:14:3F:AF:89:05:0A:34:E4:D9:07:23:E9:EE:AC:BB:16:35:E7:81
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0195124725D1E38EFAA82622E1D589CF4C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 08CB
Signing time: Mon 17 Feb 2025 05:00:07 +0000
Manifest this update: Mon 17 Feb 2025 05:00:07 +0000
Manifest next update: Tue 18 Feb 2025 05:00:07 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: Vp8pYiKkM2M1Hhhzftx3DUiSrS3KmH4vz8UhF6kFykY=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:25:d1:e3:8e:fa:a8:26:22:e1:d5:89:cf:4c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Feb 17 05:00:07 2025 GMT
Not After : Feb 18 05:00:07 2025 GMT
Subject: CN=3c143faf89050a34e4d90723e9eeacbb1635e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:b4:65:4e:c2:04:20:bc:cc:8e:aa:9a:74:
36:cb:1d:5b:ef:23:84:fb:98:08:13:6e:b3:cf:72:
fb:35:28:2a:23:ab:e6:e2:81:df:a8:8f:4d:46:2a:
5b:1f:b9:de:5b:8d:b7:4c:8c:b7:47:51:fe:02:b5:
a0:41:51:b1:18:d3:9d:63:30:8b:1d:d4:c7:cc:cd:
11:bc:fd:f6:4e:a6:94:ee:f5:a1:bf:06:4a:02:90:
23:3a:58:42:f2:5a:45:2b:37:1a:e4:49:65:78:e5:
26:7e:c3:b6:00:0d:2f:5b:11:a6:13:d0:c5:12:56:
00:7c:2c:7a:89:f5:79:07:e9:59:45:d8:9c:d0:6c:
8f:f7:20:04:31:37:f2:26:d8:fb:a8:e9:bb:02:ec:
74:de:e8:03:2e:8f:a0:9f:60:68:2e:15:46:2f:1c:
f9:53:af:ea:36:ce:8f:61:ef:bc:aa:21:e0:64:1c:
02:fc:58:94:61:c4:30:d5:df:47:5c:97:8c:eb:a6:
96:d1:d3:af:a3:12:58:7b:6d:82:df:26:a9:5b:b4:
bf:0c:19:46:b7:cf:8f:16:0e:e3:a3:ce:8e:49:14:
f9:94:21:aa:eb:c2:c4:fb:32:0c:7d:37:3b:ea:77:
4a:18:97:4d:03:86:bf:8e:bd:76:a1:17:d1:cd:71:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:3F:AF:89:05:0A:34:E4:D9:07:23:E9:EE:AC:BB:16:35:E7:81
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:39:d4:3c:d7:72:44:17:53:83:2a:52:4a:e6:65:5e:cc:
a5:0c:1b:1b:3c:80:06:6f:99:28:3c:7d:79:a6:7d:e4:95:0b:
7f:43:4a:e2:a7:30:39:4e:9b:9a:f5:35:b7:65:5b:91:a4:f5:
98:13:e3:24:e5:bc:3a:ff:4e:55:de:0e:bc:7c:bc:29:7c:a2:
4a:98:e1:7d:67:fd:a3:99:f7:4c:a3:65:2f:88:31:d9:25:86:
ed:27:6e:00:08:0a:b7:02:4f:c0:85:e9:68:78:0e:b2:99:46:
83:a2:d3:f7:0d:76:9e:40:68:6d:d3:59:55:a1:68:a7:ed:24:
6e:0c:36:18:69:a7:8e:f4:9c:45:45:d9:ef:fb:16:50:fa:71:
11:f8:13:d6:e7:56:5c:51:b5:88:ed:81:ba:d5:b0:0d:85:85:
aa:3a:bc:56:5c:0a:ee:d9:a1:e1:2c:dd:83:38:27:66:f4:eb:
94:a7:50:51:b2:4d:b3:ed:da:35:d3:0b:ac:82:7e:28:0e:95:
f1:b2:b3:af:31:76:a3:a7:90:a3:cf:cf:9a:76:2d:17:cb:55:
3a:57:7b:70:2a:4d:9e:47:c3:2e:97:d9:4a:65:31:3f:5c:54:
7b:e3:23:f3:a8:0e:90:8f:12:4e:3b:83:c1:c4:16:93:f0:f9:
17:c3:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:01 2025 by rpki-client