Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 9r9d9vnIrFupHRrT4CBtR4nfN+N9hE+7pX64SDv1MBQ=
Subject key identifier: 54:5D:02:0B:F2:D1:5B:72:3B:C9:84:2E:B0:79:FD:C0:0C:3B:FF:5A
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0194BABB6293C6A20D7B842B1F3E4DD4E256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 05:00:30 +0000
Manifest this update: Fri 31 Jan 2025 05:00:30 +0000
Manifest next update: Sat 01 Feb 2025 05:00:30 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: qeZlLJLVGKDZubOn89WFjBKijQCtfapU76tG6o9wI9k=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:62:93:c6:a2:0d:7b:84:2b:1f:3e:4d:d4:e2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jan 31 05:00:30 2025 GMT
Not After : Feb 1 05:00:30 2025 GMT
Subject: CN=545d020bf2d15b723bc9842eb079fdc00c3bff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:d0:ed:99:85:88:0f:98:b5:ce:8e:91:51:
0e:ee:3b:6c:9c:14:e3:5b:e3:7d:16:06:2d:bf:54:
6e:f8:48:6f:f3:2c:cf:6e:7c:d1:35:8a:0a:7d:fd:
ab:5b:c1:50:01:db:e3:57:e9:cc:9e:36:f3:ea:66:
9f:90:4d:78:36:c2:49:95:7c:38:f4:d4:bd:c0:c5:
df:c1:88:ec:34:f0:d0:e6:21:66:38:40:73:b2:c9:
d4:51:0b:8c:75:97:35:e7:de:28:d7:75:8a:90:42:
d2:dd:75:68:9f:8f:a6:c2:b4:3f:db:77:30:8b:8e:
cd:95:fb:8a:80:d9:48:7e:7c:10:97:7a:c6:f8:bd:
d7:b2:27:dd:43:65:ec:89:b3:11:80:c4:db:14:a5:
81:96:83:db:d7:c9:56:ed:dd:8a:f5:be:84:5d:6f:
ce:86:65:54:b2:67:9f:c4:28:96:07:08:0c:3c:22:
aa:f6:32:8a:90:69:83:94:98:63:b0:96:ba:a1:6f:
25:e8:97:67:a8:52:d6:bc:4a:d3:f4:da:a2:b6:06:
4e:6a:e8:2b:ae:07:fa:3f:81:e3:66:28:76:9b:38:
54:1b:c5:4a:6b:71:4d:76:bc:ff:63:cb:43:e6:52:
7e:05:48:df:40:38:69:9d:73:86:50:dd:a3:a4:cd:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:02:0B:F2:D1:5B:72:3B:C9:84:2E:B0:79:FD:C0:0C:3B:FF:5A
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:1a:59:4b:19:c3:5e:05:21:9e:64:45:eb:73:f5:46:f1:
6c:77:70:57:50:a4:ba:f8:1b:a7:44:61:bf:2c:47:c5:59:39:
e2:63:e6:da:29:5a:91:a5:53:dc:7a:42:fd:ea:14:15:6c:d0:
ed:68:d8:a6:22:97:2d:00:aa:d2:bf:fb:8b:85:5e:9a:e2:7e:
c7:52:70:c9:19:c3:87:98:b3:f0:ea:b4:04:03:2f:d0:31:94:
3b:94:e7:a0:79:0d:1b:da:2f:5d:58:31:80:41:ef:3e:4d:84:
49:fc:3b:e9:77:68:41:42:96:99:72:3e:20:1e:8c:54:8a:30:
3b:45:da:bb:23:be:bd:18:31:e7:e4:8b:20:f8:0c:d8:9d:74:
8f:18:06:46:d1:c2:5a:45:d2:70:a2:c7:c4:c5:20:52:63:a7:
09:25:ac:f3:aa:8d:0d:64:5b:2b:64:0e:1f:20:e9:23:46:d0:
e5:4d:9f:d6:16:cb:c3:7e:bc:b0:55:81:70:56:d6:7f:52:91:
f6:45:e1:0e:20:81:2d:f2:f5:34:6a:11:d1:06:05:ec:53:4d:
37:6d:9c:0b:34:af:76:1e:07:0f:7c:22:4a:2d:94:c6:60:f8:
6c:30:ee:5c:47:de:ef:09:98:ab:cb:9b:5e:be:be:3d:8d:95:
24:0c:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:33 2025 by rpki-client on console-fra.rpki-client.org