Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: nYRhyOYTVwxnFTA08ouPEnWXp9rGqnrP9zqqAB54JcQ=
Subject key identifier: 28:80:A5:51:A9:24:E4:3B:B3:1E:39:7E:52:EB:E1:F4:5B:78:13:B1
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0194C350A31A8DAFDECFADE51347A5A7206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0408
Signing time: Sat 01 Feb 2025 21:00:29 +0000
Manifest this update: Sat 01 Feb 2025 21:00:29 +0000
Manifest next update: Sun 02 Feb 2025 21:00:29 +0000
Files and hashes: 1: 2Kr-1XLrgROhbD1jcsbK-FilLdY.roa (hash: 5GfsQOtJA+CgwxuKGKTuCz73LK7pVElXz0y95QkCQq0=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: puSNMzKH9OOxRzG/Sk+d3MOOi8vwOLbOIGQK2InlBFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:a3:1a:8d:af:de:cf:ad:e5:13:47:a5:a7:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Feb 1 21:00:29 2025 GMT
Not After : Feb 2 21:00:29 2025 GMT
Subject: CN=2880a551a924e43bb31e397e52ebe1f45b7813b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:65:c3:da:81:e2:cc:56:3b:da:c1:44:71:
7d:6e:01:39:38:44:94:d3:a5:81:18:76:11:40:4b:
f2:d4:ae:24:da:d9:ad:80:31:df:b7:fd:0a:a3:76:
58:8a:8d:5b:a5:bd:70:d2:5b:ea:dd:1c:44:7d:0b:
3f:95:12:1a:f5:6c:a9:3e:b1:70:b0:2b:34:48:0d:
8a:8e:7d:45:95:76:06:1b:b5:3a:d1:4f:f3:43:dd:
b0:31:e9:3c:a1:6b:3e:37:d2:06:3b:13:27:47:88:
a3:fd:3e:e8:08:03:00:59:02:0c:55:dd:9d:df:ec:
b6:c6:a8:80:01:14:56:c2:7c:56:3f:90:93:3e:b8:
10:27:62:c1:d0:d4:3b:66:af:a5:fd:55:0e:2a:69:
69:01:69:16:0a:c7:71:7e:6e:9b:70:f5:d7:c3:8a:
9e:66:c6:47:ed:1d:50:5e:69:54:79:2e:33:12:26:
f1:47:4f:ba:cc:a3:f2:54:1a:91:8b:7a:f0:b8:47:
55:f5:cf:a6:9b:1d:cf:8b:cf:83:ab:7e:29:69:c6:
a6:fb:b1:6c:ba:9c:0d:30:11:1d:59:b6:1e:63:8d:
9c:a6:3b:aa:16:91:7e:4b:d1:b2:46:7e:2b:13:d7:
37:a9:a7:98:3b:b6:4c:61:71:7a:50:b7:a7:7a:c9:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:A5:51:A9:24:E4:3B:B3:1E:39:7E:52:EB:E1:F4:5B:78:13:B1
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:9c:17:45:a0:15:c3:08:62:5d:07:8c:42:eb:65:96:49:
b6:b5:fc:8e:32:bb:b6:19:c9:74:4b:75:dc:c5:22:64:57:ce:
2f:49:8f:81:6e:1c:50:bd:32:f8:cc:06:0b:8e:1c:4c:c9:4e:
8a:0f:68:2c:b5:3e:8f:44:95:40:bc:84:a5:d1:e5:14:c6:cd:
d5:33:12:75:3f:60:04:ee:f0:ae:65:da:60:02:4b:56:bf:ad:
d1:16:9f:60:4d:55:31:43:a9:ac:39:12:63:36:82:a5:0b:24:
38:8a:00:f8:e6:5a:ab:be:94:fb:f9:a6:36:11:7f:63:d6:cf:
0b:03:23:b1:b8:ec:57:90:8d:90:2f:11:66:6c:42:a7:2b:32:
54:2d:99:57:de:89:8d:5a:54:af:0c:6f:c0:4d:dd:f4:35:37:
e5:6b:3c:7a:b4:19:21:5a:d8:af:c8:d0:53:22:4d:5c:f0:64:
c8:b5:59:4a:81:b3:ca:c8:d4:3e:51:c2:9e:01:5a:31:bf:e0:
d4:fe:54:71:a8:64:79:fe:aa:8d:6b:d1:97:f0:43:aa:36:5b:
c0:59:d7:a5:80:cd:d0:b0:84:76:b3:fa:c0:89:6b:3f:1a:a3:
fd:5d:5d:9c:35:24:23:08:1a:18:63:5d:df:91:91:94:ef:5f:
35:4d:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:04 2025 by rpki-client