Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: tU9ZdWqSU4l/IDfkDG6AcJT48x2uYu+6doL5oZTWfzM=
Subject key identifier: 1F:4A:71:5A:BC:0C:4D:58:00:E0:21:6B:C2:68:0C:77:09:A0:63:2C
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019511A2FF307D32890F31231E071BDCBF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:49 +0000
Manifest this update: Mon 17 Feb 2025 02:00:49 +0000
Manifest next update: Tue 18 Feb 2025 02:00:49 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: +ioUi1EghOwRvYoZcZRkdyOgOpcIF40hke/xL8cnFp0=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ff:30:7d:32:89:0f:31:23:1e:07:1b:dc:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Feb 17 02:00:49 2025 GMT
Not After : Feb 18 02:00:49 2025 GMT
Subject: CN=1f4a715abc0c4d5800e0216bc2680c7709a0632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:5d:ac:47:27:fc:63:e4:81:86:04:d7:1d:
87:3f:66:d8:48:3a:38:2b:59:b4:ee:5c:ca:f9:d0:
5e:25:70:6b:aa:84:49:f1:a1:98:83:32:58:02:57:
c8:ca:0c:f1:1d:b9:ed:e0:91:77:d8:5d:96:a8:0f:
c1:07:fa:55:98:0d:65:2d:75:c4:bf:f6:d5:06:60:
f3:36:53:d2:38:c4:b5:d1:f9:27:ad:f3:a6:ef:06:
51:0a:03:af:03:ff:39:44:b4:2a:52:b7:51:d1:f6:
8b:48:ff:45:1d:4a:34:e0:4f:14:90:32:e9:ad:b8:
42:52:eb:32:ed:b8:d9:9a:d4:e6:8c:a2:10:73:e0:
b9:81:2e:e1:5b:22:a2:e7:98:1c:1b:75:e0:eb:d8:
fb:3d:3b:b2:04:9e:5e:d5:a6:db:1c:f2:01:1d:c4:
dc:6a:ec:90:12:0d:7b:11:38:50:07:ab:f6:6c:4d:
6d:7f:f5:72:1c:fa:6d:d7:31:4d:d7:f3:4f:06:11:
a9:f5:26:36:d0:ea:e5:e0:25:c5:53:60:c4:a7:25:
a8:a8:14:00:88:db:7c:03:97:be:f7:7b:35:59:8e:
dc:32:8d:20:55:35:0c:52:a6:11:b5:ef:04:ce:54:
fe:44:67:3f:47:a1:bb:b3:28:5c:03:df:cc:9a:d6:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:71:5A:BC:0C:4D:58:00:E0:21:6B:C2:68:0C:77:09:A0:63:2C
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:7a:19:8e:c6:b4:d3:6a:35:24:14:63:aa:7f:b9:36:6b:
aa:7e:7d:14:c1:e4:78:18:37:b5:25:6e:f3:28:0b:ca:c6:45:
e0:f5:83:f0:82:37:7a:a6:0c:4d:dd:b3:69:80:03:dc:d3:3f:
d5:19:62:87:5c:3e:07:9f:33:19:60:4b:a5:00:61:86:54:11:
af:03:4e:76:74:fd:4b:b9:86:e5:71:47:ae:e6:f8:ed:b4:6c:
97:05:c4:9d:82:26:4e:a0:09:60:d7:6c:f7:92:22:bb:31:2a:
8e:97:c3:6b:4f:17:a6:ed:18:16:55:ad:6e:20:d7:e2:fc:a3:
88:71:4f:54:fe:11:61:6b:aa:6c:ec:a9:3e:1f:0e:03:ed:67:
15:40:d8:56:f6:bb:de:6c:6e:1c:56:67:0b:4e:21:84:6a:87:
60:fa:83:7b:eb:61:23:d6:79:b6:8b:f1:97:13:db:87:38:ad:
a0:0b:52:c9:45:eb:27:0a:e6:2c:dd:3c:e8:5e:1e:e1:84:5b:
18:ad:11:8d:c7:cc:00:22:2f:47:62:f4:5e:4a:21:df:09:fa:
d5:f5:aa:8c:c0:4c:89:20:86:dd:fe:37:82:52:91:36:cf:06:
ad:1d:59:bb:98:a9:fc:c3:28:af:0f:5b:15:bb:41:d0:f7:8c:
a7:49:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:26 2025 by rpki-client