Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: HClWnyiAJ3TRoedQPRPPuJ0aN9cqLdxiRK/gkKXCEuM=
Subject key identifier: 49:94:74:B7:23:42:01:AB:29:66:69:9E:1D:C6:5E:D3:33:8D:1B:44
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 0194C4D0F2358FC7F2D15954BACC57E6F205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 0FD5
Signing time: Sun 02 Feb 2025 04:00:15 +0000
Manifest this update: Sun 02 Feb 2025 04:00:15 +0000
Manifest next update: Mon 03 Feb 2025 04:00:15 +0000
Files and hashes: 1: KSItTKLuFX190tCd6bc2fdUOW70.roa (hash: 1weGkaA0gywc6E/5RozsskcFkH9K8y0MKO+pixoaT7s=)
2: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: X6CyUxhTkdYrXI86a8p3V+8+4uXd3pK+87DhCfP3MiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f2:35:8f:c7:f2:d1:59:54:ba:cc:57:e6:f2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Feb 2 04:00:15 2025 GMT
Not After : Feb 3 04:00:15 2025 GMT
Subject: CN=499474b7234201ab2966699e1dc65ed3338d1b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:f0:e1:34:d5:dd:d7:4f:09:0b:c1:2e:23:
d6:dc:d4:d8:7d:d7:31:53:ad:56:79:6d:95:1e:44:
e4:43:b5:8b:39:b4:82:e1:ba:03:72:22:fc:83:ea:
28:91:fa:87:f3:03:9f:72:99:84:54:21:db:26:2f:
7e:c0:93:f0:3f:da:a2:ae:12:2e:84:74:25:ec:6c:
56:13:d5:97:32:b5:5f:f2:3c:4e:a0:2d:07:c4:55:
16:3b:d5:7f:bc:7a:bb:0c:13:6c:bd:16:8b:4a:7f:
47:bd:e5:61:2e:90:fd:f7:ad:98:65:55:a4:85:7d:
18:5f:2c:f6:6f:96:c3:42:88:c4:66:ad:00:04:7b:
3a:f8:e6:ce:57:c8:ab:1a:ee:55:9b:1b:77:c5:ec:
f0:07:f8:b6:c9:86:60:89:68:1f:f0:79:4c:75:7d:
d4:63:86:dc:26:d0:84:29:07:69:61:d6:cb:a9:24:
53:40:1f:20:49:2b:1d:38:89:6a:6b:a8:73:bd:89:
8a:78:f1:6e:92:07:bb:4d:00:b7:02:dd:5f:e4:b6:
41:d3:6f:17:ef:5d:b9:fb:03:b4:e4:d5:2d:e8:71:
0f:b5:11:f2:88:a1:e7:d2:72:e0:ab:16:f3:a4:87:
28:fd:0e:12:db:02:7d:1b:c1:c1:df:d0:26:55:58:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:74:B7:23:42:01:AB:29:66:69:9E:1D:C6:5E:D3:33:8D:1B:44
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:a7:3c:e3:c0:c8:f1:0d:b1:37:a9:0f:a0:44:17:75:2d:
b1:19:62:cd:9e:40:4c:4f:be:af:9c:d1:9e:eb:a2:5f:74:86:
8b:4e:80:40:0a:d8:4b:d1:75:5a:4c:ed:18:cf:d8:fb:43:2c:
c4:0f:c1:96:e3:5d:77:e1:17:ea:cf:e1:a4:87:31:16:2f:e5:
8d:68:33:42:bc:02:2a:0a:54:3a:0f:a9:49:8f:4d:a1:f3:54:
21:c1:44:d0:65:03:9b:71:51:9f:52:be:50:f2:ee:45:1f:3c:
42:b9:80:32:7c:42:c5:7b:88:6e:c5:bc:ae:70:81:d4:27:8b:
7e:6f:9a:e6:4b:2b:a9:13:87:05:2c:ab:7d:28:15:21:c2:0b:
ac:82:8f:83:c3:fc:49:fa:de:72:af:ad:ea:b4:86:0a:3a:8a:
5a:b1:aa:44:b5:f1:dc:a9:14:2b:b2:4d:ca:18:79:54:95:5f:
09:ee:78:38:c1:f4:21:35:3c:9b:4c:2d:62:87:d9:56:80:bc:
9b:7c:a8:d3:7b:78:4f:07:be:25:1c:46:a5:b2:ba:f4:0d:e4:
b0:d4:86:5c:e0:4f:f6:44:27:ef:32:f0:3f:20:87:bd:bb:de:
7d:9b:b0:9a:12:54:10:17:58:49:db:b0:0a:3c:f9:b7:12:f5:
ba:f3:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:29 2025 by rpki-client