Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: vHZFFP4X/gvA40ikYPRwwdPaM2L1mhlZdfKs06V796o=
Subject key identifier: 28:B8:D8:9F:2D:AE:F2:EE:66:FD:2C:F0:D3:BD:AC:02:A5:A8:86:B0
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 0194BA84B1B601503B4AF913F4FE98CCF164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 04A0
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:45 +0000
Manifest next update: Sat 01 Feb 2025 04:00:45 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: CKuJz1Rnu+aZoquEiYL7jR7ajbEF99iE2XdX/bVGoFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b1:b6:01:50:3b:4a:f9:13:f4:fe:98:cc:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jan 31 04:00:45 2025 GMT
Not After : Feb 1 04:00:45 2025 GMT
Subject: CN=28b8d89f2daef2ee66fd2cf0d3bdac02a5a886b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:02:46:a2:07:52:35:6c:4e:29:eb:1c:42:
f6:65:14:62:b2:e4:88:fc:77:f1:59:f4:cf:49:68:
d5:54:68:a8:cc:c4:ea:92:d5:a8:ba:c5:57:33:23:
6d:1e:ec:72:01:58:44:4e:a7:4f:05:47:4a:ed:ee:
89:d8:94:1b:10:f5:01:ea:f0:2c:28:98:d5:05:8a:
bf:ff:e2:ed:97:b9:33:95:45:89:6c:be:7c:1c:87:
df:a1:ce:d2:15:44:69:4d:b5:db:d9:60:d6:3d:2b:
ea:1c:32:7a:fe:e7:35:09:1f:5d:06:2d:f2:df:01:
5d:4e:0a:f3:f6:07:4e:bc:f3:9d:1b:e3:68:15:47:
25:77:01:b0:3c:d6:7e:11:f8:a3:12:02:5a:3d:51:
d2:5c:40:ee:4d:67:9a:6a:39:b4:74:00:db:06:fb:
b9:03:18:f6:28:12:6a:d6:a6:f2:5a:76:aa:0b:cd:
17:41:66:67:e7:8b:84:74:37:ab:ab:a6:14:ac:4d:
fb:4a:0f:cb:80:ca:a6:5a:f5:0b:77:83:b7:40:46:
bd:78:1b:c2:a4:01:aa:49:24:9b:ef:4d:41:c2:aa:
e1:f5:8e:e6:bf:d0:1e:d4:76:d5:98:91:de:4b:cb:
e3:67:1b:48:7c:41:6a:87:86:de:74:2f:00:4f:55:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:D8:9F:2D:AE:F2:EE:66:FD:2C:F0:D3:BD:AC:02:A5:A8:86:B0
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:66:98:d5:ff:33:c7:ea:8e:d1:e4:c1:96:a0:7c:3a:91:
dd:99:f9:e4:4b:57:60:bd:0d:ce:52:b6:ea:f9:71:b9:8c:60:
14:9e:70:51:50:78:35:c1:f1:6f:b4:74:62:92:26:65:a7:00:
d4:8f:5e:37:7e:c6:51:59:5a:a7:17:04:aa:99:9b:ed:2b:1e:
57:0a:39:99:fb:a8:5d:36:12:4c:99:69:70:c6:fe:68:37:ee:
79:91:07:d5:c3:01:a5:49:cd:45:ce:8f:07:d9:1b:26:66:00:
7c:1c:29:70:82:23:c1:9a:0f:dc:cf:81:2c:81:4d:1f:49:15:
f3:2c:4b:d4:b2:38:bb:30:62:16:c2:54:95:41:93:08:23:eb:
a3:b9:a6:e0:5d:e9:31:fd:ce:04:78:bf:39:a6:6f:42:a1:c1:
de:d4:1c:bb:8d:7d:1f:00:c7:2b:a1:b7:3f:45:3c:d2:56:dd:
cd:75:87:4a:6b:2b:ca:74:d6:cb:42:4c:ec:d0:d7:c9:35:0a:
2d:9b:71:b2:72:07:b5:fd:96:89:13:75:d1:b5:21:5f:90:30:
7a:94:85:d6:40:2c:85:ee:2f:c6:ac:d9:cb:80:1f:2e:b2:cb:
6d:47:ee:fb:90:51:33:f0:b2:37:fa:0d:b1:f8:58:69:ac:69:
41:6a:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:39 2025 by rpki-client on console-fra.rpki-client.org