Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: VsnHq2yq3qQInzXnGKMKJnsxPU4SW1bRG+yjEzPej6A=
Subject key identifier: DF:4B:65:CF:12:31:D1:01:DB:79:86:DF:1C:C1:A6:D1:53:B3:F8:5C
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 0194BB6010C23EC888E8FF418FE319116876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:22 +0000
Manifest this update: Fri 31 Jan 2025 08:00:22 +0000
Manifest next update: Sat 01 Feb 2025 08:00:22 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: +lOsrE1GZ5la2L8Yym5G3v0jo6Xrxusj/BJJ2AUczy8=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:10:c2:3e:c8:88:e8:ff:41:8f:e3:19:11:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jan 31 08:00:22 2025 GMT
Not After : Feb 1 08:00:22 2025 GMT
Subject: CN=df4b65cf1231d101db7986df1cc1a6d153b3f85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:ff:98:0b:14:b2:47:6c:10:63:af:46:1f:
60:97:dd:df:0b:a7:af:02:61:cf:6b:2e:32:ea:af:
e3:57:8f:91:07:0b:71:39:f9:4f:ad:3c:15:1f:e2:
41:94:57:f5:d8:d1:f3:58:1e:16:24:4e:33:99:c5:
6f:c9:51:68:b4:29:d1:a7:26:34:0a:d6:60:a2:4b:
9c:f2:ec:98:b9:12:3f:a5:a0:22:76:37:db:d7:77:
08:0c:88:2c:c1:6d:62:16:c4:ba:19:2f:bc:d1:d3:
dd:2b:28:6f:42:65:ed:66:ca:16:ec:96:9c:f7:1c:
fa:0f:fe:2a:e7:1c:32:0e:68:94:11:3a:f0:e4:c8:
b6:22:0c:08:cb:a5:4c:e8:d4:e8:3b:c5:7f:24:12:
99:d9:f0:22:92:db:ed:f9:a0:01:d5:bb:fd:1f:86:
7d:f2:35:f4:2f:94:1c:4c:8d:23:b7:5a:6c:34:13:
a8:50:3d:91:96:26:89:c7:90:df:34:bc:f1:82:85:
98:1f:02:a7:fc:b1:38:65:f1:31:ff:1b:0d:7b:31:
99:87:18:c4:c3:0a:d9:57:84:47:7f:bf:c2:3e:34:
35:1b:36:a9:dd:b0:aa:ed:d9:77:db:72:aa:53:21:
5e:1a:f9:aa:a8:16:65:88:8f:b2:60:73:69:fb:da:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:65:CF:12:31:D1:01:DB:79:86:DF:1C:C1:A6:D1:53:B3:F8:5C
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:ac:7d:0b:57:6b:44:9f:8d:3f:ac:90:9f:64:a2:82:ef:
e7:c2:ec:76:be:7f:d4:6a:09:34:d8:69:68:e9:39:99:a5:a4:
fa:59:b1:1d:7d:ef:c6:47:d3:ad:bf:49:a1:b9:36:f6:2e:8b:
d6:3a:e1:d6:6e:d6:bd:a1:51:d0:0a:a9:4a:2a:28:01:48:55:
ce:78:c9:cb:e7:41:ef:13:2e:f6:e1:69:62:58:46:5e:da:57:
c7:3f:18:57:ca:cb:c4:ef:86:99:70:62:3d:c6:22:26:98:5d:
9b:e6:a8:d5:c8:0c:62:8e:3f:d5:57:c0:87:ce:40:d6:ca:81:
09:cc:a2:d9:ea:83:c8:83:d7:0d:0c:00:40:21:5c:ff:62:e0:
c4:1f:fc:c8:02:37:ff:cb:3e:ed:7c:76:31:c6:0c:b0:8a:99:
52:6e:d1:78:8d:3e:48:6e:2e:07:49:e9:86:5f:2e:ca:31:bc:
61:ce:eb:a3:27:9f:e8:e2:53:ca:c1:d3:c5:34:00:9e:17:58:
ac:73:70:99:57:81:b4:4b:75:3a:f6:53:57:d4:6d:a3:ac:32:
6c:93:11:38:47:fc:ab:17:e9:e9:4b:0d:95:3b:f4:f1:f7:b0:
ff:4e:94:1b:96:b4:b3:ac:34:00:cc:ce:4d:ca:cd:b4:60:87:
19:ed:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:48 2025 by rpki-client on console-fra.rpki-client.org