Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: HfTMLVAH66P8DtF2y9NoiVo7+VxEBAe1tftQK6M18C0=
Subject key identifier: 1E:05:8A:52:71:B2:58:07:0F:5A:1B:62:47:E3:74:03:CD:1B:AC:DB
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0194BA84A49F72B2A0A36EE410DE7B15A3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1136
Signing time: Fri 31 Jan 2025 04:00:42 +0000
Manifest this update: Fri 31 Jan 2025 04:00:42 +0000
Manifest next update: Sat 01 Feb 2025 04:00:42 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: XKDnrJyNlA6PBPCwgok1bfOem3ghUPbGLgfN6UZtEYw=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a4:9f:72:b2:a0:a3:6e:e4:10:de:7b:15:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 31 04:00:42 2025 GMT
Not After : Feb 1 04:00:42 2025 GMT
Subject: CN=1e058a5271b258070f5a1b6247e37403cd1bacdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:5f:8e:81:4e:e1:78:30:40:73:26:56:37:
16:d7:56:88:55:b6:65:23:b5:13:36:86:39:fb:b6:
ea:bf:b4:46:9e:07:e5:40:82:a7:58:5a:73:63:fc:
06:60:bf:0e:4f:b7:5b:99:cf:8d:56:f7:b1:e9:a8:
7a:b2:06:e4:29:34:2d:43:89:7a:11:e9:46:1b:e2:
bb:d7:0d:5a:d2:23:22:fa:7a:f8:92:dc:54:37:1e:
21:51:15:17:de:b9:55:b4:86:dd:ce:eb:70:67:a3:
b9:a9:14:d3:0f:09:a9:39:13:e3:8a:c1:07:56:d1:
b1:8e:44:6e:38:d8:01:77:99:3f:1b:30:c2:22:d4:
4d:eb:d9:14:ab:45:d2:8e:b6:04:81:73:df:13:08:
e4:39:33:ef:24:cf:d0:ce:6e:61:23:94:2a:75:e0:
23:a2:71:03:83:ca:bd:34:8e:74:11:3f:a4:8a:99:
d8:d7:55:9d:e5:80:df:7b:2a:1d:48:8f:21:48:8b:
df:12:ee:1b:2f:e4:43:cd:95:35:45:1b:3d:83:11:
7c:7d:73:0f:9d:29:4f:3e:50:6d:8c:c9:ee:95:c8:
02:19:70:9e:22:4f:33:9e:33:1a:9f:b7:4a:a8:79:
da:81:dc:9f:4e:73:93:7a:66:1c:4a:07:25:04:93:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:8A:52:71:B2:58:07:0F:5A:1B:62:47:E3:74:03:CD:1B:AC:DB
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:7b:52:41:13:1e:ba:f0:be:38:94:30:d2:a3:d1:bd:83:
ea:98:e5:8a:47:df:f3:1a:23:07:b5:7d:37:3c:22:37:54:8f:
52:b1:52:5e:4e:27:0c:73:d5:c1:c1:e7:b9:09:99:db:c8:a0:
bb:d3:24:e1:a5:2e:9c:7f:83:56:86:d1:80:c3:b0:f0:c1:b3:
c2:87:cf:24:8a:34:9b:17:a0:fe:34:6c:6a:55:a9:25:a2:a6:
23:74:7d:b6:de:79:68:7f:8f:1b:d9:e9:52:21:81:94:12:8d:
b1:35:28:7c:ec:53:e5:e5:7c:a7:1f:ab:d0:26:7c:93:7b:da:
9e:88:77:ed:82:07:5c:66:ab:4e:9f:62:03:26:6e:37:dd:10:
72:9f:f3:ae:93:bc:34:39:0e:fc:91:2d:76:8d:5f:d0:29:c3:
fc:37:73:4b:b9:87:f4:bc:bd:33:fd:fa:ed:a4:ac:24:e4:cb:
c0:a7:2f:a4:96:47:a3:b1:84:66:7d:8b:18:6a:a9:01:38:e2:
a3:38:c7:f0:13:a2:60:f2:a3:35:61:f0:73:ba:ab:3b:fe:2c:
16:a5:2a:28:1a:da:82:d2:39:c0:93:c7:73:92:4f:06:ad:41:
ed:53:23:ec:99:0e:22:20:90:8b:1b:a2:91:32:df:11:3e:c7:
ff:6b:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:13 2025 by rpki-client on console-fra.rpki-client.org