Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: JznWmyAZcf8BtQp/paUdQuT4tGT7Te7Yv1mqRjFkVrU=
Subject key identifier: B3:E3:4F:1E:7B:E7:3F:98:7C:60:C0:8C:7A:00:F8:C9:1E:5F:8B:98
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 0194BB60089786539E59DCCB4AFDFA8DC4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 0DE9
Signing time: Fri 31 Jan 2025 08:00:20 +0000
Manifest this update: Fri 31 Jan 2025 08:00:20 +0000
Manifest next update: Sat 01 Feb 2025 08:00:20 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: vXpcnmbPP0nh7j/yntLg9GFQnCRtYh5KuFL8G2HmQYQ=)
2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:08:97:86:53:9e:59:dc:cb:4a:fd:fa:8d:c4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Jan 31 08:00:20 2025 GMT
Not After : Feb 1 08:00:20 2025 GMT
Subject: CN=b3e34f1e7be73f987c60c08c7a00f8c91e5f8b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:51:8e:d6:6f:f1:9e:a1:27:6f:e9:63:65:
e8:03:39:8e:d6:ea:9d:db:82:40:56:9d:61:c5:58:
72:90:12:a6:c4:69:53:a5:6c:f0:61:30:76:b6:38:
83:8e:cb:af:0a:f5:da:d0:0c:6b:f4:35:99:4c:87:
8a:b0:a4:4a:a2:2a:56:23:96:c7:30:d4:72:fe:10:
da:09:ad:be:70:43:e1:dc:32:77:48:f8:41:d9:1b:
40:e3:c6:6d:6c:b6:84:26:00:5e:59:7d:43:cc:c1:
b4:5d:f2:7c:15:8a:ac:8d:44:26:17:b9:dd:56:c8:
b5:be:c8:e7:c5:fb:86:3f:83:76:fa:aa:a3:e1:b6:
7d:95:f9:29:20:4a:2b:56:16:33:db:f2:61:aa:66:
9f:0e:da:97:95:f2:a2:7a:ee:f6:92:59:af:bf:f0:
69:47:c1:78:53:c7:f3:b8:d3:82:2b:ef:ca:2f:44:
e1:e2:a5:bc:c0:eb:b4:d7:c6:26:96:6d:08:17:03:
6d:60:5b:7b:c5:ff:db:e0:5b:39:bb:11:ff:be:cc:
a9:a0:dc:1d:2a:28:b3:07:3a:29:bb:11:e3:96:2a:
03:74:01:18:18:31:b8:4a:6b:ee:18:18:16:94:1e:
21:41:3b:52:10:70:c6:f6:e6:b1:a5:1a:ec:83:49:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:4F:1E:7B:E7:3F:98:7C:60:C0:8C:7A:00:F8:C9:1E:5F:8B:98
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:26:25:a6:e3:b4:75:fb:0c:ec:bd:19:fa:57:40:14:20:
67:29:02:85:a3:c8:8a:5b:d6:8c:e5:80:ea:0e:8b:e0:55:e3:
76:77:7d:c5:b5:71:98:69:ed:ba:a3:0a:a0:b4:45:15:f5:5e:
a2:25:7e:a7:21:ce:70:31:3a:5b:52:ff:71:7d:32:ce:01:6c:
ec:5d:23:d5:b5:23:e6:1a:e8:ff:5f:91:46:b2:46:c3:2d:e3:
20:91:55:b1:d1:1c:f9:61:03:be:35:8d:35:cd:04:ce:70:08:
ae:25:f2:d7:cc:99:f2:7d:80:2f:af:3d:8f:62:74:79:3c:ca:
eb:3c:17:16:a8:28:69:9b:19:79:75:b9:02:66:a1:d5:41:23:
d3:51:90:2e:2d:8c:ed:a4:40:33:e9:96:32:80:8d:70:9e:0e:
1b:51:84:d4:61:8b:db:b4:5e:7e:bc:64:cc:c1:c4:5d:57:3a:
d0:5e:cd:b2:6a:be:16:29:f0:b9:c4:25:4c:1b:98:73:e7:7a:
e4:63:51:94:00:a3:1b:e1:08:39:32:93:23:ad:47:7d:64:d4:
e9:f9:c4:ad:16:5d:c9:75:8b:15:fd:84:ed:c7:c2:e8:fb:ab:
bb:11:9c:94:10:c0:8d:9e:15:4b:48:0f:a5:ad:2c:69:42:0f:
5a:83:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:38 2025 by rpki-client on console-fra.rpki-client.org