Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: kMQkKX5FT6bbWmoim+UW7kz6nAkgT6DoNiZcscIqpVM=
Subject key identifier: 92:97:2B:1A:7C:1F:4C:9B:5A:26:C0:6C:4C:77:52:87:41:CD:7B:98
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0194C42C11B2B514533FFDDF9022427E3A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 01:00:09 +0000
Manifest this update: Sun 02 Feb 2025 01:00:09 +0000
Manifest next update: Mon 03 Feb 2025 01:00:09 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: ISBWNAyOTvpsjwtgIpr0Rk525UJcYgyBobXFQWuz0O0=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:11:b2:b5:14:53:3f:fd:df:90:22:42:7e:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Feb 2 01:00:09 2025 GMT
Not After : Feb 3 01:00:09 2025 GMT
Subject: CN=92972b1a7c1f4c9b5a26c06c4c77528741cd7b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:9f:a9:68:39:49:9c:ff:ca:34:9f:da:8d:
36:8f:28:40:9d:6c:70:f5:48:ef:fb:f4:a7:04:e3:
2f:87:24:9e:ec:77:1a:c1:ab:0e:63:94:7e:f5:a5:
9d:da:b8:f4:6c:9d:6d:1d:a9:e4:a2:9c:46:9f:e6:
d5:26:55:c7:27:af:d9:2a:f1:5f:d3:f5:98:7d:4a:
c9:d5:39:ce:62:8b:6c:d5:ca:22:32:c0:68:54:2e:
0f:2e:08:ed:36:e8:6e:d8:cb:30:14:25:4e:92:f1:
52:97:bb:14:ff:6c:43:13:3c:39:9d:98:f1:e7:cd:
b2:ef:ec:c4:67:66:55:ef:77:3e:82:4f:bb:d8:78:
5d:88:6d:dc:54:b2:25:46:bc:d7:ed:30:50:96:18:
fd:21:41:c9:a7:90:b5:86:82:5e:48:d4:24:7d:cf:
bd:51:ab:4b:e5:e4:aa:b5:de:5b:f8:8a:44:97:f1:
ce:b5:8b:fd:11:f2:c3:be:c1:63:11:0a:e4:2e:f8:
4f:f7:0a:2e:22:22:e0:35:cb:cb:6f:d9:99:75:c6:
66:f7:01:07:6b:e9:3e:80:51:79:02:b8:fd:75:b6:
24:78:a2:e7:ce:ef:32:39:d5:e0:df:dc:97:18:af:
f5:d7:e4:7a:c2:53:2d:68:49:40:61:5b:40:f6:e1:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:97:2B:1A:7C:1F:4C:9B:5A:26:C0:6C:4C:77:52:87:41:CD:7B:98
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:7a:cd:32:57:db:a5:0f:75:87:ab:32:d2:79:da:2c:45:
da:26:c5:7d:7f:e2:6c:30:80:35:2c:28:35:7e:d5:43:79:1c:
b4:79:25:18:c0:63:34:04:fd:f5:77:f1:9c:a2:fb:8a:d2:ab:
bf:15:c5:03:6c:10:22:49:2a:ab:80:aa:f8:73:7d:aa:9b:73:
c5:4c:48:80:e9:32:00:3f:8f:a6:43:4b:3e:92:10:c7:c1:79:
56:a7:3f:09:ae:de:30:11:8b:61:60:6d:c6:e0:9a:cc:f3:dd:
37:1d:4f:f8:42:6f:c9:72:59:26:de:d8:44:9c:70:44:2c:e1:
75:84:fc:fa:8a:82:3b:02:e7:01:ed:71:5d:16:d3:1c:62:d6:
37:a1:5b:0f:04:4a:71:f9:21:4c:d0:bd:e8:50:b1:78:d9:e8:
fa:67:45:08:0f:9a:c6:91:24:22:99:72:aa:f5:e0:44:98:2c:
3d:6d:6f:f9:83:7e:70:cd:af:c4:cb:49:b8:47:93:86:a0:33:
86:c0:98:4c:dd:c7:d4:01:aa:fa:bb:b1:39:a7:3a:2f:f8:e4:
56:d7:ce:71:8c:e5:0f:40:27:70:39:91:24:da:9e:e8:d1:7e:
60:63:7c:af:9e:ac:0b:2b:fe:ea:64:20:3a:25:18:75:b4:6c:
1e:43:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:28 2025 by rpki-client