Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: l2djNwgWQKKfd2uGJPk7Cs9T8s4H066jFS/tQvZpqTk=
Subject key identifier: 73:AC:41:A7:43:00:A7:D6:73:65:85:3B:CF:99:2F:14:BF:CC:30:BC
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0194C42C1B2F7738C26741ED89429540428E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1225
Signing time: Sun 02 Feb 2025 01:00:12 +0000
Manifest this update: Sun 02 Feb 2025 01:00:12 +0000
Manifest next update: Mon 03 Feb 2025 01:00:12 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: LkzVzrpcTXQETuDY3KLB6axgEqVJFDdxH3DNyZhCWYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1b:2f:77:38:c2:67:41:ed:89:42:95:40:42:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Feb 2 01:00:12 2025 GMT
Not After : Feb 3 01:00:12 2025 GMT
Subject: CN=73ac41a74300a7d67365853bcf992f14bfcc30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:71:53:65:d1:5e:d5:73:3a:29:e3:73:bd:
18:97:db:5b:19:ce:35:e6:3f:34:35:29:2a:64:38:
35:c5:07:3b:4d:08:87:5b:8e:0e:cb:54:27:db:4f:
4a:35:4b:db:7f:84:55:91:a6:4b:0c:8d:dd:c9:a2:
15:aa:a0:dd:91:c8:c9:11:63:77:cf:63:5b:b3:f8:
1f:2f:d9:b3:24:0e:b2:81:96:64:a0:86:db:f9:40:
d1:06:87:8f:46:be:90:b5:99:5d:90:66:e7:4a:eb:
b5:0d:80:e4:79:09:7e:85:fa:97:58:cc:3e:40:cf:
ea:44:cc:b1:3d:25:da:01:24:67:b7:48:6f:04:2e:
a6:81:81:90:0c:6a:c4:94:4e:14:16:aa:eb:df:a6:
b0:81:6e:f6:fb:59:8e:c9:2d:31:02:59:71:dd:f5:
8d:00:5e:1b:d0:4d:df:d6:82:12:66:a6:21:f8:81:
65:b7:eb:96:e0:14:c1:90:cd:81:9c:e4:4d:25:fb:
c5:39:dd:63:18:67:d8:eb:6f:08:ba:78:2a:12:c1:
f6:75:fe:fe:c5:16:03:67:0a:24:94:b2:b7:7d:61:
d9:a1:11:e6:33:9e:55:db:09:06:5e:75:36:27:76:
e3:e4:9a:c3:f5:31:6a:f7:81:7f:8a:c1:7d:09:ff:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:41:A7:43:00:A7:D6:73:65:85:3B:CF:99:2F:14:BF:CC:30:BC
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:c9:5e:33:cb:60:f0:ad:b1:89:0d:8c:d7:cb:73:7e:19:
54:20:0f:3d:e7:06:7c:96:9d:c5:ac:4e:54:cb:cb:8a:39:fe:
15:e5:b7:18:5d:06:1a:1a:39:fe:dc:67:d9:4c:bd:5c:8b:10:
c9:44:c4:89:8f:13:87:e8:42:de:a3:12:a6:a5:30:26:1e:de:
53:ea:3e:69:38:ea:1e:c6:ab:15:44:33:d4:9d:d1:88:ca:9c:
40:ea:e6:64:cf:3e:3d:4f:03:16:a1:9a:dd:74:62:00:37:56:
d7:77:c1:56:3c:5e:25:cb:4a:b9:be:d1:be:82:34:a1:fe:8d:
b0:3c:38:28:11:6d:b5:ea:75:16:9c:8d:95:43:04:f7:75:5a:
a2:33:02:cc:69:61:a5:70:25:b9:29:ec:01:e6:dd:56:e5:e8:
c6:28:84:ef:bd:b0:7c:2c:4b:46:1b:3a:01:c9:09:14:b0:c5:
42:4c:a8:55:19:a0:9f:0a:fc:e4:70:83:51:21:3c:33:eb:5a:
55:d3:6f:8a:e5:ff:2b:0b:8e:d0:d5:34:0f:ed:01:d5:ca:0a:
38:65:f2:cc:f7:22:40:ba:af:ef:f4:b3:5f:f9:a7:cc:c6:b1:
4d:c4:44:72:57:fd:ff:3b:5d:3e:30:8a:06:2c:96:dd:4f:a7:
ce:b8:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:07 2025 by rpki-client