Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: rSfVdFK6SbLaPWaUnf+qVO9OSyr3dmUk1DCyKJ4G75M=
Subject key identifier: BA:FB:67:A9:32:35:45:2C:83:F2:93:DD:09:A9:3A:46:74:8F:71:86
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0194BB5FE0F785D7CC3275B013B25609CCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: OBZbdYjImVTNS1iqu7N1kxhQ2s84pXizsM1D4OEA02M=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e0:f7:85:d7:cc:32:75:b0:13:b2:56:09:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=bafb67a93235452c83f293dd09a93a46748f7186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:ea:7f:42:50:e0:9c:a0:52:aa:dd:24:5d:
e9:3c:8a:f0:f3:cb:de:6d:5e:17:cf:f8:07:ec:e2:
93:8f:87:87:ee:aa:cd:25:ac:74:a4:7c:74:dc:89:
a2:31:2c:08:a9:ab:16:da:c5:03:a1:dd:be:33:c0:
0f:68:8b:53:2a:c3:14:c1:8b:74:61:f1:fe:93:84:
3b:a3:54:13:f7:c5:55:2b:2c:8f:02:57:e4:9e:98:
b4:78:5b:4c:eb:a8:bb:6c:80:91:4c:91:0f:9b:b3:
17:8c:28:f6:23:5b:52:19:11:8e:d9:04:74:2b:2a:
ef:ce:f4:5b:78:cd:4c:0a:cb:24:02:24:98:bf:ae:
7e:9b:eb:0a:4d:7d:fc:a9:c7:0a:fa:b2:c0:80:97:
26:84:7e:98:04:2e:30:c6:13:e9:f8:34:f6:cb:21:
84:06:fd:52:8c:18:64:f9:d5:d9:4f:74:c4:e2:3a:
98:18:b2:c2:5b:20:be:3e:50:db:72:3f:c0:8c:ea:
8f:e4:da:c9:1f:4c:20:1d:40:dc:fd:ea:ad:1c:e7:
9c:e2:b4:45:7a:5c:31:d5:9d:19:86:e9:6c:76:35:
b7:64:01:50:5c:da:5d:72:98:dc:42:fe:2f:7f:64:
1d:5b:a7:af:a4:e1:1a:3f:d7:98:7f:98:8f:c6:83:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:67:A9:32:35:45:2C:83:F2:93:DD:09:A9:3A:46:74:8F:71:86
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:21:7f:5a:f5:d9:01:ee:1d:fb:af:ab:4c:0b:3a:9b:f9:f5:
8d:b5:e7:5f:f2:2c:50:46:af:05:63:ac:b9:c4:8e:8a:16:96:
1c:d3:bc:9f:d5:3e:e6:2d:49:e8:6b:b5:da:2b:00:25:f4:5c:
32:c2:36:cb:23:88:dc:f6:d9:2b:53:be:a4:cf:a8:a2:ac:e0:
80:58:38:eb:ee:ab:0e:1d:52:1b:a1:64:67:9a:26:ec:a1:08:
89:21:65:6e:c0:87:5a:3c:d8:e0:a1:b5:79:ae:07:9c:dc:41:
a9:33:8a:4e:28:0b:d5:2f:bf:d1:27:eb:d5:c1:cb:31:19:36:
49:35:7d:95:71:a4:52:e0:56:d7:5b:49:6b:6e:69:ab:df:ca:
e8:44:e2:46:7b:4f:fd:86:47:82:b9:d2:e4:c5:f3:6b:ee:1a:
86:6d:50:c6:c8:be:bb:fa:c8:e8:27:2e:87:76:c4:a2:15:81:
5b:bd:c3:37:00:17:8e:e0:ff:85:26:2e:69:ce:48:a1:be:8f:
90:2b:af:18:f3:50:96:f3:8e:d3:68:41:d0:73:a2:37:e9:17:
c2:89:72:25:d3:63:7c:f5:bf:ae:7f:52:e0:78:1f:b6:d5:a3:
9d:4f:a6:2b:1c:3f:25:60:6e:22:4e:fd:6a:7e:96:90:2b:36:
0d:29:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:05 2025 by rpki-client on console-fra.rpki-client.org