Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: S7FbgL3saT9JZkpAtDHY3Jp6IqEF4tXJDjfsi/pqxeE=
Subject key identifier: EB:56:A3:3C:23:34:17:2E:A4:A1:0C:95:F6:D7:AB:AF:98:D1:E9:7B
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0194BB5FF7D1654C1965E0BE344FE5870EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:16 +0000
Manifest this update: Fri 31 Jan 2025 08:00:16 +0000
Manifest next update: Sat 01 Feb 2025 08:00:16 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: ruheTFU2md7H4lRC93yf/akxfTVlGML+23xu7t4W+NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f7:d1:65:4c:19:65:e0:be:34:4f:e5:87:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jan 31 08:00:16 2025 GMT
Not After : Feb 1 08:00:16 2025 GMT
Subject: CN=eb56a33c2334172ea4a10c95f6d7abaf98d1e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:98:36:bf:31:e4:02:5c:4e:93:68:c1:f3:
40:5f:6e:29:6c:26:26:14:50:cf:65:c5:78:c7:5c:
be:94:8b:85:bb:14:12:a8:24:a1:aa:f5:55:4e:f7:
b9:cb:d6:39:0b:91:61:43:2e:a8:e6:75:f4:46:41:
1d:e9:d7:72:3e:19:0a:73:b0:69:e9:1a:d8:e3:be:
f6:8e:08:11:2a:41:c3:2d:74:24:59:89:d2:90:e2:
74:6b:c9:e1:0d:65:eb:e8:d9:b0:7a:bf:32:19:2c:
32:bf:90:b7:23:e4:8a:82:5f:cd:64:e6:d6:62:ab:
ea:b0:13:2c:ed:7d:d8:bc:01:79:a2:8c:47:a2:14:
d5:1a:e0:36:bc:7b:38:40:13:cd:ad:fd:ae:e0:03:
fe:8e:e6:b2:68:72:fd:1d:ad:5b:c8:25:2c:97:3f:
b9:f9:33:81:ad:dd:ff:94:d2:02:57:2d:59:ca:ec:
50:92:ac:ca:dc:f2:c9:02:1f:e8:90:d0:f1:16:eb:
7b:89:07:66:b6:82:17:75:5d:c6:4a:4c:d4:1d:bb:
e2:4a:5b:69:7d:ee:4c:41:06:f0:2f:f6:6a:41:30:
94:1d:d7:84:38:bc:02:0d:d2:60:88:47:7c:a5:e5:
e2:47:e0:3a:b8:46:da:d0:f3:8f:7e:e7:69:29:8b:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:A3:3C:23:34:17:2E:A4:A1:0C:95:F6:D7:AB:AF:98:D1:E9:7B
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:64:6c:4d:7e:75:d5:f3:36:d6:04:ce:03:37:d1:f1:e5:7a:
d4:27:83:84:34:e7:ba:34:bd:18:af:f3:f9:ed:8a:ff:60:a9:
8d:55:48:e4:59:e3:43:c0:f5:30:e7:75:bf:fc:56:b1:ff:ba:
87:e5:d4:e1:28:88:03:e9:59:f3:68:32:69:ae:82:fe:9d:5c:
37:d4:1c:d7:47:25:53:d4:25:b3:a4:27:bd:e8:b7:75:62:e9:
79:50:bb:87:97:db:c5:a5:30:4e:d9:04:83:3b:e4:18:6d:6d:
4f:d7:d5:59:a0:54:cd:dd:9b:cb:a2:da:03:3a:0a:f0:06:53:
dc:d1:f1:b4:fe:73:97:9e:15:9c:c9:5b:8d:33:2c:84:fa:e8:
58:03:4c:dd:2e:83:4d:2c:20:19:be:ae:db:6c:a9:0b:6b:2a:
e3:58:be:60:76:52:95:83:2c:f3:1b:0c:cd:ba:b1:b3:cf:37:
00:fb:e3:1b:22:7e:ef:91:b2:1a:f2:1b:7e:39:67:a0:a7:0a:
e5:f8:56:83:53:22:a1:df:fa:cc:04:3e:d2:89:28:df:99:a3:
8b:d6:34:cd:21:98:46:8b:a1:72:d5:0e:c5:a5:76:d3:ef:b6:
db:21:c9:b5:55:10:5c:4c:c7:d2:1d:2b:c5:8a:1b:ed:47:5b:
d6:20:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:27 2025 by rpki-client on console-fra.rpki-client.org