Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: ipixs93/OuZkisqKTujivLhDPwAjBxRzeUgxE7jW2cw=
Subject key identifier: 4B:B2:94:A4:5B:B3:8C:8B:CA:39:CE:E2:28:91:E8:58:11:61:86:EF
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0194BB60227DA06248D2EC4E5F4A34587DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:27 +0000
Manifest this update: Fri 31 Jan 2025 08:00:27 +0000
Manifest next update: Sat 01 Feb 2025 08:00:27 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: q/UKjEGw7sgOtnuUFUxDq7RbTmGvq4JMnQpaFQyUXAI=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:22:7d:a0:62:48:d2:ec:4e:5f:4a:34:58:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Jan 31 08:00:27 2025 GMT
Not After : Feb 1 08:00:27 2025 GMT
Subject: CN=4bb294a45bb38c8bca39cee22891e858116186ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:83:be:cf:41:f6:15:73:d8:33:e4:e5:46:
23:11:e3:40:d3:33:a5:28:c4:80:d9:5b:96:82:b9:
87:b2:63:a3:e2:8a:56:97:b4:08:9b:84:bd:33:c1:
20:fc:62:78:a9:69:8f:c5:c8:f5:a9:05:0c:ea:d7:
46:5c:38:16:23:e5:1b:4b:72:fc:2a:1c:19:5e:1d:
60:77:ff:7f:84:af:9e:fd:d5:8a:fe:3d:c4:a8:9b:
bd:5d:b9:da:8e:4e:23:a0:9c:2f:06:ce:a5:52:c2:
9f:ec:26:a7:2d:bd:cb:92:25:e5:93:e6:45:01:93:
9b:00:1f:12:d6:4e:a9:84:97:16:7a:a3:7d:90:c7:
16:dc:61:0d:41:14:11:63:26:3f:82:ee:1e:26:28:
f1:10:5f:30:fa:8b:29:9d:69:c2:4b:82:36:74:52:
04:83:c4:94:c7:2e:36:e5:35:ca:0f:e5:34:c4:ae:
dc:31:cc:b7:fd:dd:2d:07:c6:05:45:9f:52:d1:c0:
7a:ef:19:df:7e:3f:5d:6f:5a:c4:37:c0:6c:f1:ce:
b4:7f:73:ab:32:4b:21:2b:fc:1f:e1:ee:0c:e0:d4:
81:fe:f3:34:62:1b:d7:8d:8c:d9:ba:9e:11:c7:b5:
cb:fb:9f:5e:01:cf:28:6e:0b:06:fe:a5:de:85:91:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:94:A4:5B:B3:8C:8B:CA:39:CE:E2:28:91:E8:58:11:61:86:EF
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:04:6b:55:9b:8f:ec:6d:02:a2:ac:a3:5f:b9:13:ef:67:
cc:00:a2:e1:fd:69:92:35:2e:b6:ac:f7:c1:a4:02:f9:5b:9e:
d2:7b:8c:52:18:19:07:55:2d:ce:cb:d9:32:bb:83:4d:e5:9f:
55:02:de:0d:38:9f:36:63:f8:98:56:ff:d6:28:2c:c0:3b:32:
cd:e4:50:15:96:81:0a:18:59:a4:42:56:1c:0c:df:a4:0f:43:
95:43:e6:42:7a:f0:b0:cc:f9:4b:70:6a:f9:13:2e:98:79:8c:
43:ec:34:39:77:a4:a0:81:81:e6:d4:fd:49:66:86:a4:4b:76:
25:a4:30:59:1d:89:8d:1f:7b:58:5f:bb:79:58:c8:8d:ae:fc:
72:0d:59:ed:09:48:19:be:17:c7:01:f6:e3:18:51:88:46:39:
61:09:e7:b0:25:8c:89:05:76:f2:f7:16:04:8b:14:6f:61:74:
37:3b:88:47:58:e7:f3:a7:aa:0c:a8:bf:7f:20:41:15:28:bb:
9e:e5:6d:1c:ed:0c:1f:16:a9:54:4c:2b:93:24:c4:4c:fa:b7:
8e:a1:8a:19:da:09:22:02:91:e1:2e:96:13:b4:f3:ff:0c:b8:
06:23:f7:e9:65:02:f0:21:a3:1a:e0:f1:2c:6e:10:db:0a:e2:
ff:7b:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:32 2025 by rpki-client on console-fra.rpki-client.org