Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: nBpHOKWKsbPpJ6IdcV8PWLXUT+epRVjj7uvzwkH4QvQ=
Subject key identifier: A5:5F:F6:76:87:47:07:82:7C:5A:09:D0:E4:E6:78:9D:FE:DD:97:10
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 0194C463955192570B9332A0D86255773D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 6F
Signing time: Sun 02 Feb 2025 02:00:48 +0000
Manifest this update: Sun 02 Feb 2025 02:00:48 +0000
Manifest next update: Mon 03 Feb 2025 02:00:48 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: A0LGFy5O5Tnul9wYMnz38+jrQXdwUnvb3QSmG08/jX8=)
2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:95:51:92:57:0b:93:32:a0:d8:62:55:77:3d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Feb 2 02:00:48 2025 GMT
Not After : Feb 3 02:00:48 2025 GMT
Subject: CN=a55ff676874707827c5a09d0e4e6789dfedd9710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:18:79:21:1b:ce:39:24:3a:b9:4c:5a:bc:
c5:ec:ce:d6:bc:05:54:fa:5e:f2:c7:ff:62:7e:3a:
38:83:ea:ef:c0:2d:19:49:6a:a7:26:74:a0:a9:53:
7b:f9:dc:5b:1c:25:e5:d1:14:b3:96:23:34:f5:24:
92:1f:e3:71:40:0c:72:27:4d:66:db:ec:8f:c1:e7:
94:53:eb:be:3d:fd:4c:04:85:f8:a2:0c:49:6a:f7:
61:d0:42:35:5d:00:2a:e6:52:f5:c3:88:ce:f8:dd:
3e:44:e9:b2:30:49:64:15:73:bc:e5:6a:f4:37:8c:
37:0d:18:06:fd:74:c7:e2:5d:4b:2f:e5:c0:ba:fa:
a1:2c:25:d0:9f:41:db:54:0d:0b:9c:f1:b1:15:dd:
99:05:89:22:6a:79:20:4c:aa:31:b4:80:53:36:16:
f8:5e:2d:62:a8:1f:41:a0:0b:ba:4c:77:ff:9c:be:
fc:d3:a7:76:d7:eb:c2:df:e3:71:a1:78:24:93:aa:
67:75:11:17:15:85:9b:3e:84:71:3a:3b:87:19:05:
51:a6:ef:96:2a:4c:65:9b:b6:1f:c7:45:9c:16:8c:
ac:d1:34:42:90:6f:ae:fe:15:28:f0:50:1f:e9:fc:
05:c9:2b:fb:46:d3:bd:b1:73:97:8a:44:c8:aa:22:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:F6:76:87:47:07:82:7C:5A:09:D0:E4:E6:78:9D:FE:DD:97:10
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:8c:80:f9:28:54:a7:21:9a:64:11:c1:77:5b:d6:35:c8:
7e:5f:bb:a3:79:68:83:2f:42:20:ae:e5:17:0a:49:a8:49:b0:
6a:14:68:ad:8c:7a:2a:c4:a3:ee:95:dd:c6:88:43:a6:37:9a:
3c:22:16:94:05:c3:26:c6:1a:0d:ac:9f:0a:c3:7c:d9:8e:b9:
da:e1:40:68:27:0a:58:61:45:43:3f:a0:40:6b:fc:7f:4c:64:
9b:ab:65:73:02:1f:95:8a:44:cf:7d:a2:f6:05:26:5e:bd:35:
04:d4:27:92:bf:b6:64:d9:0f:be:8d:26:ed:ab:67:81:7a:24:
ee:aa:9c:4f:4f:82:0d:b1:fd:d1:ef:a5:ac:c2:fa:33:d3:d9:
75:a5:2f:2a:cd:ff:a8:31:74:ad:c1:01:6d:b2:56:e9:9a:71:
a1:fe:09:3c:8a:ea:6d:62:b7:e3:a6:dc:ca:41:2f:29:9b:05:
e6:d9:bd:55:3b:0f:ab:62:0b:4b:11:62:6c:b5:77:55:cf:92:
42:77:e2:16:4b:80:64:22:e5:4b:0b:ab:63:5c:5c:8d:27:39:
66:fb:89:5f:fd:dc:a7:80:5a:b5:15:cd:e7:5f:87:83:58:42:
67:4a:2f:7c:61:2d:33:ea:47:b6:4f:93:85:2f:36:13:a0:29:
1d:74:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:12 2025 by rpki-client