Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: sxRZ52o9M5+JSmUYhQlPre/EpPNOlowHEIUbco81/2c=
Subject key identifier: 2F:54:DC:8E:19:0E:D5:D8:BF:1C:B7:18:01:72:A7:C9:81:84:0E:9B
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 0194BABB7E1E9CA8A2A4A016471F9BB34A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: kGqB55VYNKIu4/KSUCO9RhidMqIWqRy8ovn2Wy0RWww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:7e:1e:9c:a8:a2:a4:a0:16:47:1f:9b:b3:4a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=2f54dc8e190ed5d8bf1cb7180172a7c981840e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:9a:2f:0e:3e:5b:6d:9e:91:8d:85:49:a5:
e5:e9:48:d7:02:10:ab:72:b9:9e:a2:e6:14:95:80:
36:f4:2f:2a:d3:b3:00:02:34:fa:cf:e1:66:1a:56:
ff:59:ba:d0:7d:a7:5a:2e:45:bf:18:3d:7d:d9:70:
25:b5:52:1a:35:89:ca:6f:fd:fd:2f:d9:16:45:44:
0e:82:8c:81:27:8f:7a:d2:6e:31:d8:d9:14:8b:10:
3e:38:2e:73:aa:dc:dd:c8:f6:6c:4e:7b:9c:31:ef:
ea:54:6a:0a:65:ac:5a:49:8c:35:fc:68:8d:10:0c:
df:80:07:e9:b0:4e:d5:12:42:8f:96:11:ac:d2:f0:
0d:7e:fc:91:b9:de:c5:4a:aa:0d:26:40:f1:ac:74:
1d:0e:90:6f:24:e5:93:0f:03:99:2e:fc:d2:d5:4b:
a3:9e:dd:6c:44:4b:99:d5:a0:5d:35:90:4f:96:5c:
69:16:0c:b6:3d:ab:88:f1:c2:61:2d:69:43:b1:42:
1d:81:98:17:6a:a7:0b:fb:49:1b:fc:70:5d:e7:2a:
8f:43:db:62:84:39:72:04:b1:58:73:7d:1d:08:b3:
c1:50:98:01:5d:5d:47:a0:5f:1e:7b:bf:e4:7b:65:
71:f0:b2:39:f5:0a:77:12:37:8f:b4:35:37:6f:f4:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:DC:8E:19:0E:D5:D8:BF:1C:B7:18:01:72:A7:C9:81:84:0E:9B
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:00:32:03:72:0b:01:35:51:73:19:de:7f:0c:ef:fe:db:36:
a8:66:8d:30:e7:6d:db:79:ef:2f:9c:bd:d2:fa:0f:b1:ff:c8:
e9:1f:7a:20:5f:a5:1b:89:e1:44:53:34:74:52:16:57:4e:f1:
dd:1c:cd:cc:e9:4f:d8:55:9d:ae:38:1c:cf:01:ec:d4:e5:e0:
99:a3:fc:87:91:b3:33:c4:0d:32:b8:94:4d:6f:fe:97:74:fb:
46:bc:90:e9:b5:3c:4b:8d:4a:b9:fc:e3:b0:54:20:e0:e3:fc:
0d:62:88:9c:83:62:90:3e:8f:b8:7a:37:fd:3e:33:9a:49:42:
fe:5d:bf:ce:73:fe:28:20:eb:6d:7f:b0:30:6c:30:c6:5f:bd:
1d:70:c7:74:da:5a:cb:ec:76:23:d5:02:ab:f4:1c:b9:91:6d:
d6:70:43:b8:d1:25:f1:d8:15:1b:c6:ee:58:a3:44:02:5c:3d:
00:d6:b7:4b:a1:21:f2:83:cb:bc:79:14:40:3e:7a:47:f1:9a:
53:dd:f7:b6:c1:6b:9f:3a:11:b7:f9:55:f6:df:0a:4b:7f:f1:
6e:d2:a9:61:bc:a6:a2:dc:65:94:0f:5b:11:15:99:2f:60:78:
c0:5f:d8:1a:29:e8:15:c5:be:d1:f3:da:12:cd:74:7b:db:b8:
a5:9c:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:28 2025 by rpki-client on console-fra.rpki-client.org