Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: PTE3cW9DhCvqmmkYGlWIAM7cc8j7XAaoERCXv/ilHNU=
Subject key identifier: 92:7B:A5:98:B3:8A:CC:5A:93:41:61:33:3D:84:5B:2A:C4:4B:BE:1E
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0194C3BEACBC39E0EE650BBA85902E332E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 0E
Signing time: Sat 01 Feb 2025 23:00:40 +0000
Manifest this update: Sat 01 Feb 2025 23:00:40 +0000
Manifest next update: Sun 02 Feb 2025 23:00:40 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: zqikTtQV6Lsw1gYY70o+5SUqcd4jBZ9OxaaZjnmwefA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:ac:bc:39:e0:ee:65:0b:ba:85:90:2e:33:2e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Feb 1 23:00:40 2025 GMT
Not After : Feb 2 23:00:40 2025 GMT
Subject: CN=927ba598b38acc5a934161333d845b2ac44bbe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:9d:7d:2f:26:8e:17:91:83:9b:38:56:e5:
28:b9:da:19:7e:a2:49:e5:b0:6c:c1:db:d5:2c:f7:
ce:c6:56:e7:93:f5:b8:e1:ab:0f:b4:32:18:70:7f:
5a:3e:81:33:a9:a6:4d:fa:0d:50:14:4e:66:cf:ac:
53:b3:15:05:91:b8:b6:9f:9c:03:b7:0f:d3:d1:35:
84:46:69:a4:2a:17:a6:6f:e9:ef:b9:fd:98:c6:f6:
4a:76:c0:d1:85:23:b4:8e:96:bb:28:bc:91:27:85:
15:15:82:5e:e4:fb:fe:47:a7:9e:5c:5d:39:bd:3a:
da:80:a4:e1:be:38:c3:e9:f6:a2:da:f7:7b:8d:b2:
67:ef:d8:94:4f:54:ab:a6:fd:38:cd:d9:bc:3c:f6:
09:76:77:c3:25:b5:ba:ab:1a:1f:81:63:ee:ff:df:
7f:25:0a:5a:86:9e:e9:7b:94:d1:a9:28:45:2c:46:
69:26:0d:b8:e2:70:b6:87:c9:25:c3:86:a3:9e:37:
41:13:8c:e1:fd:fe:94:d4:55:07:53:1a:14:21:3e:
ce:78:99:32:d2:82:0d:0a:9c:c9:9c:16:48:61:66:
48:7d:7e:f4:17:0d:92:0b:19:a1:e5:22:27:83:b6:
f3:3d:91:01:ac:bf:f8:81:41:73:07:23:ff:77:d7:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:A5:98:B3:8A:CC:5A:93:41:61:33:3D:84:5B:2A:C4:4B:BE:1E
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5f:99:e3:4a:aa:cd:e4:f0:cd:8f:3e:fd:93:94:72:2c:5a:
63:9b:57:f5:47:7b:bb:47:d7:2b:0b:fc:c6:55:ff:34:17:d9:
de:b3:35:8e:71:78:fd:d3:32:1c:03:20:87:98:eb:7e:5b:f6:
b7:6d:f8:43:1a:bb:a8:ee:17:0d:e1:d1:6e:ac:ae:44:4e:f5:
e3:bb:a2:a6:a0:7e:fd:42:ad:2f:12:97:40:25:65:8b:a6:d5:
6e:a0:8b:b7:c7:d3:29:55:fc:27:92:f1:be:ff:26:23:9c:62:
7c:ac:9d:ac:6d:c7:e1:08:68:61:48:4b:40:e9:36:45:06:8d:
c9:ae:8c:34:16:56:22:61:92:bc:cf:d2:8a:12:cf:3a:4f:04:
f0:32:39:ed:c1:c6:e2:bd:e2:30:7d:e5:f1:8b:73:f1:2d:49:
a6:a9:96:8b:c6:ed:71:dd:9b:5e:11:91:b7:0d:39:3f:e9:a4:
bb:23:2e:3d:fe:1a:ac:b3:c3:ac:3a:0d:9a:19:f7:26:b9:04:
fa:fa:68:41:25:d9:db:1a:ea:94:51:8d:6f:55:39:4e:7e:2d:
80:6b:72:79:a9:92:24:5c:6d:84:a3:87:67:de:35:18:e9:66:
5a:67:6a:79:87:f6:e4:41:1d:d6:af:2e:fd:fd:8f:e6:21:ef:
ee:8f:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:21 2025 by rpki-client