Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: wFjP7PNl6p/sNjFU3SydwRza2BfxDcw4MPAvk4m3AQ4=
Subject key identifier: 40:60:23:CE:22:9A:89:9D:D5:27:9E:E4:6C:DA:9F:47:8D:96:7D:28
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 0194BA845AD221D9AD274CF46B5BF0ED4772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: PPTUsTLEiBV2jQP8CH6CtaX7JBUOPLpEexv5ZnAFihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5a:d2:21:d9:ad:27:4c:f4:6b:5b:f0:ed:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=406023ce229a899dd5279ee46cda9f478d967d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:52:e3:5b:88:28:8b:20:26:b9:b3:43:ba:
b7:98:b2:11:76:b7:ab:b6:d0:cf:dc:42:8a:b9:78:
60:5e:9c:d3:2c:60:2e:b2:52:57:8a:5a:c6:0b:99:
8d:0b:ec:cd:3c:54:69:c4:b2:90:3e:ce:64:4f:21:
e5:ba:88:0d:5a:70:6a:9c:f1:a6:0d:2a:84:48:23:
c0:b6:bc:71:f1:4a:01:d9:1a:89:a2:85:1a:c1:17:
4a:55:10:8c:54:f6:14:5d:97:79:38:fe:dc:5d:5d:
ba:62:ed:e7:6e:aa:95:4c:cf:64:9a:ae:19:bf:61:
ad:8b:1a:ee:b8:cf:22:dc:f9:77:90:70:be:f6:03:
73:9f:b1:0b:42:63:01:cd:31:e1:b3:89:1b:5d:7f:
7f:44:af:33:2f:47:2c:43:45:89:b4:ee:29:02:29:
40:d1:af:79:f7:f5:58:61:4f:be:16:a2:b5:ee:4e:
98:45:1a:c4:3b:c9:a5:72:bf:fa:5f:b9:b7:a0:91:
43:45:66:e9:fa:92:0e:97:aa:53:35:6d:c8:f8:b8:
1e:1d:a8:2e:de:14:7e:fb:7c:b1:5b:ed:a9:ad:b5:
df:f8:39:f5:55:e5:d1:03:82:87:2d:cf:82:a1:ea:
53:93:e5:59:c4:06:03:74:64:ff:80:5c:4a:9c:ad:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:23:CE:22:9A:89:9D:D5:27:9E:E4:6C:DA:9F:47:8D:96:7D:28
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2d:81:67:20:1c:26:a8:97:c5:d0:dd:2e:25:7e:69:31:48:
2b:11:8d:07:ce:09:5b:90:ff:a9:f3:e5:f5:23:97:0b:0c:1a:
18:4e:55:a9:39:7f:36:13:00:f5:ed:da:f3:14:de:1a:be:6b:
78:81:e8:33:40:71:25:3f:4d:54:b2:a6:ce:33:4a:31:8a:74:
7b:f9:9f:eb:de:14:c9:ab:05:43:d1:64:76:fc:ab:a1:d9:d2:
10:59:49:09:70:8e:22:83:78:90:ba:e1:95:e7:84:98:89:d4:
6c:c1:cd:13:40:6e:78:36:4d:ec:da:a1:b1:77:ea:25:33:ab:
99:95:50:31:f8:63:11:a0:47:4b:ee:7a:44:5e:a2:ba:bb:cd:
c0:9b:c0:30:ea:89:c0:e5:15:a4:cf:46:07:02:a7:06:0b:e8:
7d:42:d9:45:da:d0:95:90:c8:32:e7:27:27:ef:1b:79:fe:00:
36:0c:e9:87:bb:8d:0a:fe:3e:11:d4:b3:a5:d8:50:a1:45:99:
2c:9f:29:a1:5f:b9:ac:46:90:b6:9a:9c:8b:e3:e7:fe:15:c4:
b1:22:a0:dd:aa:26:3e:e5:ad:40:03:e8:d3:d5:ba:67:08:00:
12:e8:51:1b:d9:bf:99:44:f1:a8:41:0c:b0:48:d8:f3:92:a6:
8b:d3:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:09 2025 by rpki-client on console-fra.rpki-client.org