Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: QWn+S1jQgeRtkCo9/b2O3rA0qDsPDd74WH8rSEvqvDU=
Subject key identifier: 35:75:EC:0A:12:A8:A3:E6:10:F8:72:FB:A5:62:EE:2C:1F:F4:EF:2C
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 0194BB2984651E035BADE4EB1460ABC74BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0931
Signing time: Fri 31 Jan 2025 07:00:47 +0000
Manifest this update: Fri 31 Jan 2025 07:00:47 +0000
Manifest next update: Sat 01 Feb 2025 07:00:47 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: 67RkbX53XPPAjuGUKFPzV/Cf9CgZ4y3zb8hBOhssgpA=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:84:65:1e:03:5b:ad:e4:eb:14:60:ab:c7:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Jan 31 07:00:47 2025 GMT
Not After : Feb 1 07:00:47 2025 GMT
Subject: CN=3575ec0a12a8a3e610f872fba562ee2c1ff4ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:c6:b5:8e:9f:07:bb:5a:ff:bd:71:c1:27:
a0:67:8c:8c:34:1c:37:ba:18:8a:3d:63:1d:cf:b6:
c9:be:91:9b:7d:64:ab:ee:c1:e2:ac:ce:b1:7f:71:
1f:88:7b:ce:ad:b2:51:26:84:91:fa:b2:6b:25:c0:
4f:6f:85:57:df:c5:97:f3:49:d6:77:2f:d9:6c:de:
73:30:1f:1a:24:d8:47:67:b2:f9:d3:49:f3:09:56:
81:23:58:c7:3e:82:48:bc:27:58:6f:98:87:49:c1:
8a:71:c4:b3:2b:6a:69:c1:d3:3e:15:83:ef:bb:cb:
47:cf:88:10:a7:16:28:0d:50:70:4d:e9:71:0f:80:
a3:dc:d1:22:e4:1a:78:e5:47:a6:ce:7b:8a:f3:2d:
fc:a5:44:e4:53:ed:79:5e:79:43:25:f1:c7:77:bf:
b0:72:d5:19:a7:cf:30:85:ae:db:0c:91:2f:e5:b3:
a5:a0:72:4a:c8:f9:9e:14:c9:52:31:7d:15:c1:87:
91:18:1d:23:98:52:a6:40:78:d5:39:3b:32:ef:e1:
cb:50:0a:7a:9a:14:96:a0:49:bf:df:c3:67:c7:cf:
3e:ad:e0:73:91:52:93:bb:d5:83:e9:b4:f0:da:1b:
85:77:0a:0d:ca:56:5c:3a:51:9d:10:c5:d1:50:0b:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:EC:0A:12:A8:A3:E6:10:F8:72:FB:A5:62:EE:2C:1F:F4:EF:2C
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5d:5a:82:ef:96:74:04:68:25:58:09:f0:e6:84:cc:0a:b4:
99:08:97:1b:c8:d2:e5:9e:9f:6b:68:ec:b5:72:b0:cf:7e:a8:
90:6d:2c:fd:c5:a7:a9:42:75:5d:93:10:e2:a6:ec:1b:f0:ba:
bd:ec:53:30:c4:9e:bc:bc:df:47:f2:c5:33:a4:57:b9:81:ff:
98:21:91:db:07:eb:25:2c:51:25:d0:ff:3d:ab:c6:e3:4a:16:
21:3d:93:0d:04:a5:2d:b0:ce:2e:d9:19:52:b3:1a:5d:94:c2:
c7:8d:2a:5c:9f:46:62:e6:f2:91:8c:66:8c:52:44:6c:3f:55:
14:ba:e3:4e:69:5b:1a:7a:2e:8f:39:78:c3:01:16:f9:f0:7c:
fd:37:01:97:f4:4e:05:0b:61:1e:ce:6c:37:d7:46:a5:b1:21:
42:ea:aa:59:79:d4:3e:a8:c8:e5:54:96:60:f4:09:95:2b:35:
c0:4f:ac:29:5d:9d:5a:29:af:a7:2b:41:05:b6:10:be:50:ae:
d9:79:46:4c:51:94:f4:b6:f1:30:9b:f2:6e:ac:af:e7:4d:43:
11:c9:11:a7:1f:4b:ab:5b:ec:2e:9b:75:e0:e6:d1:97:8a:97:
42:8b:c4:68:5f:1a:01:1e:a7:54:3a:6e:12:9a:55:4a:24:f8:
ec:ec:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:58 2025 by rpki-client on console-fra.rpki-client.org