Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: CSbAQBWDkYn2jLT5n29JWlOg7brIVENoCDva+QF+5vk=
Subject key identifier: AF:42:3E:BB:D0:43:D2:9A:CC:46:A4:65:68:87:57:75:40:76:AC:7E
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0194BA84748CF4048D384CF6871350B6E89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 05D4
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: LxbrddtK9pjIptJuTQ9jT6DlZec738O3tqa2rgnOmpc=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:74:8c:f4:04:8d:38:4c:f6:87:13:50:b6:e8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=af423ebbd043d29acc46a465688757754076ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:e9:48:d4:24:db:70:10:9a:19:60:e3:d7:
f5:6a:fc:f9:27:ac:c9:3f:97:46:5f:2c:06:48:76:
65:7a:65:5e:62:55:a2:6e:13:b1:df:9c:7a:75:81:
3e:05:0e:f3:7f:65:a8:82:21:ec:49:59:61:ea:07:
b3:96:18:75:84:56:11:d4:0e:10:6e:ee:13:ec:95:
70:7e:0f:99:c6:29:30:13:2b:6b:b2:cc:73:7f:87:
35:62:5a:a4:c2:17:89:40:d7:ba:f5:9c:30:5b:cf:
b5:e8:db:d0:eb:18:80:58:0b:75:8d:a4:bf:85:91:
8a:0c:b4:ea:69:28:de:62:e2:7c:18:af:28:88:8e:
b9:89:22:70:fa:0c:4f:14:9b:e2:54:4d:2d:d2:0c:
e3:16:9f:94:48:03:d6:81:66:4c:ed:6a:e3:c6:60:
3a:21:a8:a2:39:f5:3d:2a:97:75:4d:63:c3:1a:5f:
e8:7e:ba:d8:77:c2:a3:57:c5:b7:6e:0c:06:7e:71:
a0:56:99:06:ff:a0:d6:5d:26:78:c4:62:e4:66:72:
2d:a7:07:c7:09:f3:ad:c0:11:01:b4:22:ef:51:92:
45:35:27:2d:cb:99:17:8a:be:35:be:6a:63:f0:98:
1d:10:e6:ce:e1:15:3e:3f:9b:1f:1b:80:d9:d8:0d:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:3E:BB:D0:43:D2:9A:CC:46:A4:65:68:87:57:75:40:76:AC:7E
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7c:72:1e:dd:b6:97:b6:e9:08:7c:c7:ce:47:e2:27:29:25:
e8:6f:80:a2:f4:9b:be:a6:70:a9:c7:28:2f:47:0d:cc:ff:7d:
ca:6c:a4:d8:00:b8:95:e0:30:86:2d:73:62:d9:95:9c:68:e9:
52:9d:a8:f0:3c:73:74:bc:17:b9:8b:64:f8:85:d6:38:1d:56:
08:95:32:9b:14:d5:53:03:59:86:c5:81:41:19:b2:24:03:06:
09:33:a1:65:89:c5:84:3f:0f:27:f0:9a:b2:83:df:6c:6e:7a:
3b:34:08:88:eb:b0:75:68:6e:7c:e1:f4:a2:93:79:4d:be:78:
ed:47:af:8e:97:95:35:3e:56:be:3d:71:bd:8d:11:84:b4:39:
0a:0b:c0:43:59:59:96:be:88:f8:65:0a:06:d1:46:ec:1f:e7:
13:43:cd:14:09:86:6d:35:7a:f5:fe:0e:69:0a:87:56:6d:41:
a8:e9:fe:32:a4:f3:6f:c1:ab:0d:ee:6a:ca:73:b7:bd:25:be:
f0:75:b4:8e:ff:35:8c:27:7a:45:fa:53:31:0f:50:5d:dd:10:
2c:ff:a2:f4:f7:50:4e:1c:5d:8d:89:d6:e5:8a:98:d8:2d:96:
fb:84:b6:80:f1:62:ed:98:8c:e7:b1:3a:e4:04:75:41:83:ba:
c0:9d:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:51 2025 by rpki-client on console-fra.rpki-client.org