Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: ri7otPxYgeo1CNceT3vvBNcNtlTsybCLbgjfVpQBymQ=
Subject key identifier: 8E:B4:E0:15:05:08:33:C5:CE:15:99:C6:EC:68:18:43:9B:8C:5A:9C
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0194BB297E336C3E6BE19E13D1415BC0C425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 07:00:45 +0000
Manifest this update: Fri 31 Jan 2025 07:00:45 +0000
Manifest next update: Sat 01 Feb 2025 07:00:45 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: f685pfsehuAMEfW69ragZl31PGZqcMYH/tLW/glK5c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:7e:33:6c:3e:6b:e1:9e:13:d1:41:5b:c0:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jan 31 07:00:45 2025 GMT
Not After : Feb 1 07:00:45 2025 GMT
Subject: CN=8eb4e015050833c5ce1599c6ec6818439b8c5a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:3a:d7:aa:f2:83:fa:6c:46:62:47:fd:ad:
00:56:bc:2f:41:e4:46:33:5f:6c:21:c2:66:a4:e7:
bb:81:04:81:a7:3a:7c:d8:2b:db:2e:79:08:37:75:
ad:ff:46:f2:b3:11:06:08:0b:06:d3:27:ab:b7:8f:
00:84:f3:d2:1f:d8:74:1b:50:e7:8e:67:a9:18:89:
f6:c2:98:e5:94:8c:ef:13:2e:37:4f:3a:d1:3c:ca:
db:2c:e1:a8:f5:7a:73:89:8f:30:36:6b:41:72:54:
cf:fc:21:0a:71:c0:d1:a5:0a:f6:34:7a:97:9e:0f:
4c:5c:4a:86:9c:2a:93:a5:d8:5c:af:25:b1:f0:5e:
4b:5e:3e:5d:35:70:82:f6:aa:73:a8:2b:0e:d8:fc:
82:58:7c:02:1e:2b:99:a0:ec:65:d8:39:1f:32:14:
99:89:85:58:12:6c:8c:5c:13:7b:69:02:77:17:04:
86:9f:14:5c:2e:66:d6:f9:3f:fe:25:78:2c:f7:ce:
c9:1f:1c:2a:ae:3a:a9:f0:c8:23:b8:1e:19:17:86:
2b:8d:ae:33:57:93:9e:5f:7a:35:ec:23:2b:43:3f:
77:49:94:1e:f4:30:84:39:2a:4c:98:3e:df:db:42:
85:63:0f:b6:39:cc:33:50:b2:8d:3e:cc:bd:a6:17:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:E0:15:05:08:33:C5:CE:15:99:C6:EC:68:18:43:9B:8C:5A:9C
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:1e:bd:84:b7:31:73:16:92:d6:79:c3:f8:d4:40:58:7a:
e2:86:2e:33:a7:f0:5f:53:a3:6b:db:ff:e8:a1:c8:d4:d6:98:
13:0a:b0:78:0b:13:4d:8c:c2:d8:4d:6c:05:06:28:fc:c3:f5:
cb:48:6c:c8:5d:f9:b8:fd:63:db:07:99:61:e9:bb:bc:84:c5:
e4:d2:bf:d4:e6:35:d4:62:d6:c3:86:81:e8:a9:26:76:d9:3f:
8a:af:26:5e:78:29:7f:7a:cc:2a:bb:0f:e2:e1:dc:05:a5:a9:
53:6b:61:18:21:5a:dc:dc:79:38:29:fb:40:a3:22:b3:38:87:
04:df:9b:51:58:08:a2:3d:63:6f:7c:75:51:1e:f7:97:2b:a5:
5d:cd:6d:a9:8e:15:43:37:df:74:8d:cd:33:88:ed:36:f5:7b:
aa:50:0f:80:df:24:1b:13:c5:bb:df:1e:92:67:ff:f7:2b:75:
6f:f9:ed:9e:e2:f0:33:03:61:2a:41:68:e3:c2:7d:f6:13:6f:
d7:3b:c3:e5:19:09:0d:18:5a:c8:a7:17:bf:71:84:f4:23:22:
46:8b:79:07:64:71:96:dd:4f:63:82:24:01:dd:e4:dc:70:63:
d1:fe:de:1b:b9:91:a9:3f:08:ba:c4:0a:73:ed:d1:e5:4d:cf:
f1:e2:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:01 2025 by rpki-client on console-fra.rpki-client.org