Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier: jnKJejS81ysUbMT9q8BVQ5diRSAWwgSu8A7pvWW5Xrc=
Subject key identifier: 40:47:5E:F3:24:26:AC:48:44:11:FC:37:CB:3B:14:CC:D3:31:8C:B4
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial: 0194BB29300F9A159B6E5C76D637D547C41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 07:00:26 +0000
Manifest this update: Fri 31 Jan 2025 07:00:26 +0000
Manifest next update: Sat 01 Feb 2025 07:00:26 +0000
Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: ZeixCTbJx17LDn5Ko8qZXKwLrs82EOzuDejPQ/KIKMc=)
2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:30:0f:9a:15:9b:6e:5c:76:d6:37:d5:47:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Validity
Not Before: Jan 31 07:00:26 2025 GMT
Not After : Feb 1 07:00:26 2025 GMT
Subject: CN=40475ef32426ac484411fc37cb3b14ccd3318cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:e1:e9:40:cb:fc:f9:57:48:35:af:a7:31:
2a:f9:ad:e9:21:31:36:e6:14:fc:35:80:39:af:20:
09:fd:a8:39:b2:4a:63:9d:1f:a9:ed:32:10:14:d9:
92:05:9b:b6:1f:ed:40:cc:82:62:0e:d1:42:7e:e3:
90:5e:75:35:a2:5c:a5:9d:4e:ff:40:73:2c:fa:a3:
61:10:ce:46:8b:d1:6c:07:0a:87:21:17:94:c3:b5:
7e:e9:97:88:48:8e:ea:2b:0e:fa:eb:54:d7:27:df:
ae:cd:f8:d3:8d:e6:d8:c2:2c:3d:a7:0b:4a:de:d9:
09:07:40:58:d2:da:e3:97:e7:92:a5:c5:65:65:ab:
fa:f2:eb:ee:12:81:7c:a0:8e:f8:5b:6a:b3:a6:4e:
57:08:7d:f9:93:0b:0c:84:09:ca:f4:47:1a:c9:b8:
11:b1:33:31:79:31:e4:8e:88:75:de:ca:f1:c7:10:
ff:4e:8c:10:8d:a5:f6:2f:4c:70:b8:0c:5c:0a:e8:
83:5d:39:f8:e8:5a:26:19:be:9a:8d:43:98:38:a8:
14:c4:35:b4:f9:7b:df:13:ac:2e:d0:41:13:2a:86:
48:be:f4:cc:c8:3d:21:e9:27:3b:11:7b:ae:4a:ff:
8e:bf:9c:ad:3b:d1:13:5f:b5:80:c4:17:88:5a:cd:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:5E:F3:24:26:AC:48:44:11:FC:37:CB:3B:14:CC:D3:31:8C:B4
X509v3 Authority Key Identifier:
keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b1:c3:f2:b1:f0:a1:5b:7c:de:83:7c:dc:40:27:36:0d:86:
2c:91:1c:f9:ea:c6:02:40:48:7c:5a:81:87:68:00:ca:9f:79:
9a:2b:2d:96:e9:db:6d:ba:95:03:67:db:d2:82:bc:cd:13:ff:
9e:18:fa:f9:cc:89:19:16:1d:31:51:53:5c:ae:15:f0:b7:04:
4b:b1:89:39:e1:21:3a:4f:45:08:7e:9c:7e:43:2c:ca:92:f9:
c5:ab:0f:12:9b:85:4e:a9:bf:d5:21:11:1b:fb:dd:91:ea:af:
b1:0b:85:38:60:74:2e:29:44:3d:94:7e:60:87:e4:38:5f:b9:
3b:01:77:fc:d1:e1:a0:e2:8d:5c:d5:3f:71:e6:fe:8f:52:f2:
c9:54:e8:23:3e:57:54:9b:dd:45:bd:7c:c7:d3:bb:87:40:45:
80:69:58:97:67:a2:f2:3a:88:9e:5c:78:fe:b7:62:13:d1:d5:
7b:e5:f9:b8:76:e7:cf:f7:b3:c6:c2:8c:93:fe:20:25:14:b8:
11:f5:c2:c8:46:0c:9b:28:e2:3d:26:4b:10:ba:84:66:b9:ce:
fa:9a:24:a7:52:3c:09:9e:ce:0f:d9:8d:f9:93:bd:9d:0b:90:
87:d1:cc:02:73:3f:65:78:1c:51:1f:87:f5:c9:f9:80:a4:1a:
9d:52:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:20 2025 by rpki-client on console-fra.rpki-client.org