Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier: 7MX1N6CyvrDz9AvwOyiG4q77ieg9KJhXwdVkTlu0Cr0=
Subject key identifier: 48:37:E0:DE:04:0E:1E:D8:13:E6:C9:86:0A:83:A1:66:6B:6F:FB:28
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 0194BABBD33F476EB136D4FA0B54527AC836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: TW6w2+9pBLDbqSAZOiiZrFLg91ynLkDAhwMRo+eI2EQ=)
2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d3:3f:47:6e:b1:36:d4:fa:0b:54:52:7a:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=4837e0de040e1ed813e6c9860a83a1666b6ffb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:d5:20:cf:6a:90:68:53:98:fd:06:6b:44:
c7:4b:06:65:89:f0:03:bc:36:1a:ba:8b:03:84:52:
f6:e6:65:fb:10:91:3b:2c:f9:37:ec:70:72:ef:a8:
f2:da:f8:a2:81:99:e5:00:4c:03:64:df:42:e6:2e:
7d:ac:f3:c3:3a:6d:49:b2:77:35:cb:b7:7f:5e:4b:
4d:e9:a7:ba:84:fa:6c:b7:4a:c7:d0:e5:c6:fc:8e:
41:7c:6c:21:ce:ad:a5:04:94:1c:43:71:6d:99:fb:
26:b2:77:d1:15:48:fb:fe:dc:77:4c:5d:12:52:d6:
68:41:8d:b7:21:28:06:4a:95:d8:8a:a1:15:e0:d7:
20:b7:17:ee:87:99:55:6c:7c:e3:7b:96:be:02:54:
1c:df:41:48:19:20:01:4f:89:bf:ac:de:a0:c0:bf:
d7:74:c8:52:20:04:49:fd:1a:2b:3f:6c:cf:16:f5:
d8:ee:d3:64:14:b1:89:68:39:fa:6b:f2:92:d8:58:
16:77:17:41:24:f5:d3:3a:a0:cc:70:dc:58:09:5a:
7b:7a:22:61:38:9e:95:e0:ac:8f:27:80:17:75:4c:
21:3f:9d:07:28:23:f2:c9:29:95:4f:64:7b:5f:21:
f0:28:84:75:c5:a5:2c:bc:c0:6c:3a:a5:ec:2f:a7:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:E0:DE:04:0E:1E:D8:13:E6:C9:86:0A:83:A1:66:6B:6F:FB:28
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:ad:aa:be:15:91:6d:e9:35:a5:13:9c:27:5b:58:e8:e0:
1c:79:55:21:a3:f2:84:e7:60:5a:91:6d:de:8a:4d:4e:40:af:
cd:e6:05:e1:c8:3a:dd:a2:15:cd:7c:c8:c0:77:c1:32:f0:01:
7f:4f:6c:ef:d4:fb:cd:b4:a9:b4:8c:1c:6d:59:9d:58:12:ee:
ae:32:8d:08:39:b1:66:93:ff:97:65:11:3c:c7:04:e7:53:a5:
21:ef:c4:b4:fc:1f:55:00:ee:fd:a2:25:a6:c4:ff:0e:19:be:
92:98:1f:1d:19:e2:92:99:3e:93:91:54:03:ef:fc:64:f6:9e:
20:94:27:30:6e:6c:12:14:26:8e:a5:89:51:75:55:a0:25:6b:
86:d1:c8:ca:3b:39:86:16:95:65:bc:ad:ef:24:79:3d:b5:a4:
0c:af:d7:1c:6b:2e:81:35:0e:6f:4e:3d:87:69:82:ae:ec:a6:
66:6a:0b:1f:bc:85:b7:6b:e8:c5:d3:a6:67:3f:45:a3:d4:4e:
9b:71:a5:b8:ce:71:9e:76:dd:09:49:af:46:95:d7:3e:8b:65:
3f:01:8e:0e:d4:eb:61:87:2e:ad:bf:50:f4:25:70:d0:18:cc:
1d:db:69:ce:08:17:d1:cc:78:13:40:2d:ec:e8:9b:46:73:e6:
a7:7b:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:08 2025 by rpki-client on console-fra.rpki-client.org