Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: 1RCLluJ6uv1mzo+PtevTSFz+lRj/XNj48s1pTfPtgiU=
Subject key identifier: 14:58:2C:3C:AF:31:2A:BB:E7:27:33:08:55:1C:9E:67:C8:88:9B:A2
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0195116BE21D1D3DB1F32126052D24BDC0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 01:00:37 +0000
Manifest this update: Mon 17 Feb 2025 01:00:37 +0000
Manifest next update: Tue 18 Feb 2025 01:00:37 +0000
Files and hashes: 1: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: Y1NfqC4cdLaOxhWk+InK1luZyZ9lzKnPNd39D5pFA1Y=)
2: yqQz2IsKQ7pg4y2EENErlYnu65I.roa (hash: 3bFflKEwuUHPYtPrbotsuT6N+1ZC/V/hbgoTc6FAPLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e2:1d:1d:3d:b1:f3:21:26:05:2d:24:bd:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Feb 17 01:00:37 2025 GMT
Not After : Feb 18 01:00:37 2025 GMT
Subject: CN=14582c3caf312abbe7273308551c9e67c8889ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:db:d6:86:5c:5d:79:cb:b9:5a:f0:9c:fe:
ef:d6:0f:5b:b2:53:da:7e:c1:ef:d4:67:ed:98:5e:
12:2b:b9:e4:7a:cc:54:93:d4:5e:60:1e:4a:f1:ae:
59:04:9f:31:9c:75:c8:e8:2c:e6:25:38:b0:ed:23:
b2:c3:ce:2f:60:7c:eb:47:5a:88:23:24:30:c6:19:
1c:79:df:f9:01:2d:8f:96:2c:01:0a:c6:65:7e:28:
23:78:af:7c:8d:85:a2:df:73:53:ba:42:11:e7:81:
1d:d3:a1:b3:43:38:71:d6:75:b3:d4:31:48:21:e2:
43:96:24:09:36:ee:af:85:28:50:2c:21:f0:b7:53:
54:c9:54:84:c9:a0:9c:f4:0a:89:95:0a:01:cf:85:
1e:08:3a:1d:bb:7d:3d:c3:57:01:7d:3d:0e:fc:fb:
d3:ac:bf:27:99:b1:55:77:c6:82:2b:5d:fb:c6:c5:
ce:f6:0f:c2:74:c5:42:ad:33:d9:29:8c:4a:26:07:
3a:08:5c:35:d7:f5:1c:d7:83:fa:04:fd:76:24:2e:
aa:eb:66:a3:82:50:12:d9:40:51:2a:5c:5a:53:63:
f6:0e:30:07:47:cd:09:bf:ae:3e:d7:cd:f2:74:87:
86:b3:cd:37:10:c5:b2:e9:d4:76:d7:a4:82:f1:64:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:2C:3C:AF:31:2A:BB:E7:27:33:08:55:1C:9E:67:C8:88:9B:A2
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4b:3d:60:de:88:0f:ea:7e:3a:af:4f:87:39:b2:18:c3:57:
a4:e3:81:52:66:aa:b6:7d:94:f0:c1:63:3d:a9:4e:d0:69:8b:
3d:a4:bd:1f:4e:d7:52:30:1b:fb:38:b5:52:a3:ad:c6:54:40:
b7:7e:52:4a:a8:ca:32:f7:0c:51:6b:22:bf:8b:f8:02:58:e9:
5a:65:5a:d3:60:45:a4:42:7a:3a:3e:06:2d:cd:06:ea:20:6e:
c2:c0:9f:99:8e:d4:5d:91:78:53:11:52:75:ba:80:ce:06:7b:
9e:1f:9f:ff:e0:88:6c:24:07:29:a0:7c:a6:f2:82:24:1e:b9:
9c:77:2d:de:26:bd:a2:df:aa:3b:7e:36:59:cc:d9:e9:ab:db:
ae:e7:a9:ee:c6:eb:76:36:23:17:3a:fd:d6:e4:60:c8:88:a3:
1b:b1:c8:95:a8:2b:a9:55:7d:de:62:66:6d:3a:3d:db:45:af:
ea:c4:6f:38:91:73:a7:ee:03:d0:50:18:e6:85:3a:b1:e4:20:
1c:bf:69:e5:43:2f:c5:da:1c:cb:6a:67:30:5c:3a:bb:03:35:
11:21:ca:57:15:95:19:1e:54:35:84:2a:0f:46:69:a3:78:c8:
d0:cb:6e:8f:1f:b5:fe:26:b9:92:b5:94:eb:55:48:4d:94:9b:
ab:62:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:07 2025 by rpki-client