Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: PYReYrOyluMhmnl29VGRyA/7upLA6xzkKKlztzbYsqg=
Subject key identifier: 31:5F:93:42:84:CC:B8:CB:E0:10:A9:13:D6:26:B6:22:11:98:81:B9
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 0194BB296607304A60D4A7C3D2CF53759D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 07:00:39 +0000
Manifest this update: Fri 31 Jan 2025 07:00:39 +0000
Manifest next update: Sat 01 Feb 2025 07:00:39 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: j+PEVsTWCeTAfbFiEkg8BD3imsZ+xFp7l3lUq5PGxdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:66:07:30:4a:60:d4:a7:c3:d2:cf:53:75:9d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Jan 31 07:00:39 2025 GMT
Not After : Feb 1 07:00:39 2025 GMT
Subject: CN=315f934284ccb8cbe010a913d626b622119881b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:d6:01:d1:61:24:8a:46:91:e7:1b:f8:5e:
12:61:c5:fa:3f:0e:47:11:fe:d5:29:ae:b3:0a:d8:
c0:31:50:e0:8d:ae:4f:21:2e:12:33:3c:bb:76:75:
9c:d3:a4:c1:52:aa:8e:5b:a9:e0:00:53:86:c3:e9:
87:74:8a:0a:62:ce:f5:34:72:f0:68:82:0b:44:59:
42:bb:3c:30:9e:00:7d:84:11:62:31:59:e0:31:a3:
45:7b:47:ec:11:17:07:74:cb:61:89:a4:49:18:51:
04:a4:bc:42:75:7a:33:7e:13:ba:a3:82:4e:2b:29:
66:af:a5:c9:f9:ed:58:5a:dd:0b:2b:58:cf:0f:50:
11:08:fa:72:d7:4a:2e:d1:7e:ca:b3:28:f1:dc:d2:
06:2f:44:44:72:7f:fc:15:17:19:71:82:11:2b:4b:
8d:50:93:12:83:9b:53:1a:3f:3c:bd:d7:5c:ea:0c:
b1:7a:af:8a:c4:44:9c:1e:fe:fb:54:9f:67:f1:c5:
98:79:7d:8e:c7:8a:29:9e:96:a0:f1:5d:5a:0a:74:
fe:e3:68:d1:d1:05:a4:8c:fd:50:e5:41:57:36:d8:
0d:42:cb:41:7e:02:24:a6:bc:5d:9f:cf:df:57:2e:
2c:e1:d6:22:a0:fa:b7:b3:9e:32:99:f3:17:10:69:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:93:42:84:CC:B8:CB:E0:10:A9:13:D6:26:B6:22:11:98:81:B9
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:47:c8:13:60:00:2c:55:2c:aa:f7:da:de:14:c4:a0:74:9f:
39:1e:31:aa:9d:6f:e1:ba:fd:a7:4a:a6:ad:e7:e2:fb:f3:4f:
a5:71:59:00:fc:f0:89:30:25:71:5f:49:08:6d:7a:36:c2:36:
3e:ee:56:9d:6a:04:ce:c8:65:e4:20:c7:3a:b7:c5:86:2d:3f:
b8:23:d1:49:2c:d6:11:06:14:bc:e9:df:34:b6:9f:55:d3:4c:
fe:0c:7f:30:ad:b7:df:cc:78:49:d9:a9:14:f2:f4:90:cd:59:
4a:d2:0f:37:09:6d:91:90:0b:8e:86:f9:6d:c6:b5:49:d8:a0:
06:bf:a7:65:e4:a7:5f:23:83:f6:d6:09:07:ea:5d:74:f3:73:
0c:02:3c:0e:5c:20:06:08:e2:15:f1:1d:b5:6b:a2:fc:38:49:
e4:1c:48:39:a8:cc:72:58:90:67:99:4f:8b:53:59:70:b0:8b:
3a:51:55:a6:07:0d:f0:74:a4:1d:f2:f9:4c:5d:9b:dd:1e:ba:
14:58:07:5f:1d:0b:7e:17:38:af:b5:7b:75:8d:74:7f:23:17:
29:19:f3:3e:a2:0b:49:48:ad:5a:05:50:40:c4:77:af:0c:41:
77:d8:7c:0d:dd:c5:b4:c9:9b:3e:37:b7:0f:6b:8d:e6:60:36:
7f:5b:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:29 2025 by rpki-client on console-fra.rpki-client.org