Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: sFESdZWMn8BwKPuEzWdBBDmfIPgxhjAlQOcs6O/xbS0=
Subject key identifier: A4:28:0F:65:40:16:DC:FD:26:76:82:C1:49:3A:04:C5:BA:0D:A9:B6
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0194BA843A6EAAAE6D243B05C73D60264E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:15 +0000
Manifest this update: Fri 31 Jan 2025 04:00:15 +0000
Manifest next update: Sat 01 Feb 2025 04:00:15 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: cZxkimt/A2sEiTv80hMA3292z4baOdM3Fk6zPwPZD7w=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:3a:6e:aa:ae:6d:24:3b:05:c7:3d:60:26:4e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 31 04:00:15 2025 GMT
Not After : Feb 1 04:00:15 2025 GMT
Subject: CN=a4280f654016dcfd267682c1493a04c5ba0da9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:53:6e:d1:43:ed:9d:bf:b7:11:15:21:dc:
8d:b8:11:e4:49:8b:0c:d5:9f:1f:83:63:b9:be:c4:
0c:a3:0b:78:c0:83:53:9e:a3:28:28:cd:a5:cc:9a:
2e:68:e1:eb:4e:e8:bd:0d:75:80:b6:24:be:49:3b:
08:3c:26:fb:3a:78:8e:19:99:ed:00:4c:5f:a0:d7:
25:52:f4:63:ef:c5:ac:df:3c:f1:83:5c:d4:7e:b0:
08:fd:68:32:16:df:36:5f:5e:5a:f9:64:50:33:63:
1c:c0:53:fd:20:9b:df:90:cc:ca:dc:ab:52:58:39:
f0:f6:da:a2:be:7a:6a:ca:b3:84:fb:0a:3b:84:f1:
55:91:b1:17:d7:74:ce:ea:0e:dc:32:6e:af:12:6b:
94:32:ad:a9:d7:92:66:73:ce:a0:46:bf:fd:a3:a1:
f1:b9:67:6d:17:aa:6e:37:96:59:8d:af:81:55:fb:
7c:10:9b:5d:21:cf:98:9d:6c:4a:4a:e8:9e:2c:a6:
db:62:94:55:3d:94:b7:59:5d:be:b7:fe:9f:41:08:
0e:ed:cd:f6:13:73:c6:73:b4:9f:50:d1:4d:f8:61:
92:64:7b:62:35:ec:d1:f6:c9:fc:9a:a2:17:05:d1:
ae:31:ed:d8:89:ba:7a:36:0f:86:b4:a5:4d:e7:5f:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:0F:65:40:16:DC:FD:26:76:82:C1:49:3A:04:C5:BA:0D:A9:B6
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:e8:4c:34:0c:07:70:53:44:d3:05:b0:97:4c:af:e3:8c:
1f:07:e5:fb:aa:7f:17:4a:59:ed:d3:cf:3b:ca:27:5b:ba:07:
c7:f4:15:49:f0:eb:a4:e9:b2:79:d3:0a:75:77:60:8e:b2:10:
c1:63:c8:4c:b1:25:82:a0:c7:b9:f1:ff:9b:9a:be:fd:51:9d:
1a:d9:8a:60:b6:4c:18:f1:ee:a5:ca:6d:6d:41:e9:a6:41:ec:
aa:ad:32:0f:8b:ab:71:d1:42:1b:0c:f1:93:ae:82:a9:6e:a9:
b1:62:36:fc:54:c8:4b:fb:16:56:59:b6:a2:3d:a3:74:17:e4:
8e:bb:d0:25:00:b2:b6:98:6c:37:3b:4a:07:ec:88:bc:99:1e:
75:d1:85:94:54:68:9d:12:ae:67:47:6f:2e:6e:cb:f1:a1:d7:
d4:eb:ad:e4:e2:9e:e3:bb:e6:e3:ff:fd:ed:4a:3e:b8:07:20:
c1:70:88:92:bd:a3:6e:89:dc:54:bd:49:61:5b:6c:5e:61:67:
1f:41:e5:b0:80:1a:e8:b7:4d:02:40:38:94:46:25:90:0a:28:
ec:23:20:35:33:57:09:b3:58:21:7b:a6:63:91:41:37:bb:cd:
b1:38:48:6f:af:4e:b9:66:af:a2:2f:34:ee:78:af:4a:38:ec:
d8:52:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:13 2025 by rpki-client on console-fra.rpki-client.org