Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: k7/iOffbQEXjXRyKjYybQU2f5mRmy2lEaDWzmThmzx8=
Subject key identifier: BF:49:F7:0A:40:F2:D3:A9:FB:5B:26:5D:B7:9A:1D:08:93:6A:9C:F6
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0195116BE7A8BA3CE0B546370F1D797F3869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:39 +0000
Manifest this update: Mon 17 Feb 2025 01:00:39 +0000
Manifest next update: Tue 18 Feb 2025 01:00:39 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: xAWwSZZsU0dtvtDho1kNHIWZ0dr1uaMWekXATwPeqig=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e7:a8:ba:3c:e0:b5:46:37:0f:1d:79:7f:38:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Feb 17 01:00:39 2025 GMT
Not After : Feb 18 01:00:39 2025 GMT
Subject: CN=bf49f70a40f2d3a9fb5b265db79a1d08936a9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:ad:72:ba:0a:20:95:6f:85:e6:34:77:27:
b2:5e:ac:71:f8:b9:79:f0:fa:b4:fe:54:6e:8f:36:
a0:30:3b:e6:cf:39:dc:99:82:fb:9a:fa:ee:c0:d0:
c3:5a:8d:3f:77:c3:fb:3f:61:fe:d5:6c:e8:66:3c:
4f:e8:eb:f4:c0:7a:80:8c:3f:90:61:e5:65:a2:68:
2a:60:5e:26:7f:09:ad:df:50:f3:cf:b0:ea:98:ad:
d7:92:6d:a9:42:52:06:1b:dc:db:c3:6f:eb:c1:f9:
19:cd:29:84:71:24:5b:04:23:a6:bd:9f:e2:80:34:
71:91:1a:97:2c:8f:29:d5:e1:b4:e4:83:14:cf:cf:
aa:f6:65:d7:f8:18:08:3f:77:01:5a:90:6d:28:b3:
e2:73:d4:96:93:2b:7b:d2:de:44:f7:80:e8:9a:b0:
31:76:f7:de:06:e7:03:ef:08:f5:f4:52:fe:22:76:
c0:c8:bd:1f:88:f2:ab:4c:10:4a:69:2c:32:2f:8e:
d9:58:f9:a7:96:ea:b8:bc:84:1f:c1:75:82:3c:6d:
7f:69:a3:e5:0e:5e:c8:50:1e:83:fc:0d:67:1d:0b:
f6:15:5a:c9:33:95:97:60:9e:4f:31:48:8f:24:2e:
5a:48:b1:4d:45:15:3c:30:13:06:51:0c:d1:83:ba:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:F7:0A:40:F2:D3:A9:FB:5B:26:5D:B7:9A:1D:08:93:6A:9C:F6
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:c5:50:3a:38:71:a9:6f:00:dd:e4:b9:95:14:ff:2b:e9:
8e:ec:a2:59:02:c1:13:97:d4:2d:7a:fe:6a:e8:31:4b:68:30:
02:0f:10:2e:63:cd:70:dd:e0:90:0f:0f:a6:3b:8d:d4:4b:dd:
f9:0c:af:55:68:5d:9e:fe:b3:01:71:29:1a:90:dc:a3:43:70:
54:c5:fb:62:69:ed:6b:db:49:d8:34:57:af:98:33:eb:ae:71:
26:e8:1d:9a:2d:7c:c7:6e:6c:5e:82:97:f7:51:52:ac:6f:f0:
49:48:9d:08:f2:ca:e5:bf:b8:02:46:89:41:92:aa:11:20:1e:
80:aa:9e:9e:3f:c6:8d:b0:d7:23:72:dd:0b:93:59:22:54:a9:
db:06:f8:40:cc:42:d3:6a:a7:d6:46:2d:ae:a4:14:1e:68:0b:
6d:f2:1c:8b:77:11:cc:45:87:2c:85:11:97:12:14:8f:b2:d2:
c0:68:c3:ce:ba:0e:87:6d:e8:3f:94:4b:de:7d:42:c9:02:b9:
64:21:a3:d8:43:45:c3:b4:c2:e3:62:5d:24:4e:47:76:68:cc:
62:4b:9d:81:a3:60:25:a2:b7:c0:72:ae:d4:b8:01:93:83:65:
d5:77:d3:77:35:4f:94:d7:7d:d8:4c:14:68:cf:91:35:b3:3d:
ac:a7:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:06 2025 by rpki-client