Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
File: SkB8o6avRpoxu1IDD82RHJHmbBs.mft (raw, json)
Hash identifier: DR10KWF6OPSYkVmj1mxefm2Bor7WDB5coytxD9zMHCI=
Subject key identifier: 4D:90:A6:31:32:BB:DB:C5:D3:5A:D4:DC:F0:09:40:06:B1:A0:0D:13
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Certificate issuer: /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial: 0194C4D126EFBF702E8352AD6C0EBF1B4E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
Manifest number: 1023
Signing time: Sun 02 Feb 2025 04:00:28 +0000
Manifest this update: Sun 02 Feb 2025 04:00:28 +0000
Manifest next update: Mon 03 Feb 2025 04:00:28 +0000
Files and hashes: 1: J61Fkm6j7PE3MBvtv4g6n6biSSo.roa (hash: 8K7fCj5TQmFNg/C8KSxNqmWTR8finmCcI4+gE6ORWAo=)
2: SkB8o6avRpoxu1IDD82RHJHmbBs.crl (hash: gR6fwm6PIiyzzEzh0unLiMAIM9RgYNvl0Ar4/5AKGwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:26:ef:bf:70:2e:83:52:ad:6c:0e:bf:1b:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Validity
Not Before: Feb 2 04:00:28 2025 GMT
Not After : Feb 3 04:00:28 2025 GMT
Subject: CN=4d90a63132bbdbc5d35ad4dcf0094006b1a00d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:a7:20:9a:73:b7:09:75:3e:9d:48:be:ce:
2e:55:ec:22:e6:04:2f:bb:f8:53:b6:d2:d3:d2:d3:
e4:c2:45:b4:8e:f3:97:1a:39:b3:33:3b:f6:c4:7d:
fc:2c:cf:e6:96:69:b0:40:af:39:1d:62:a7:f2:f9:
fe:29:63:ca:4d:ad:50:6e:a1:3d:64:e0:7e:e4:b4:
2c:af:39:5d:7e:fb:7b:9f:14:ea:55:b3:43:b4:41:
14:c7:4b:8a:f2:02:2b:61:11:7e:57:dc:1e:47:c9:
d7:0d:17:90:c3:e4:ae:1d:d9:ce:e3:26:b1:30:16:
9d:13:eb:2e:cf:8a:6a:ee:7e:69:df:91:fb:2c:d4:
f2:7c:69:ca:99:b4:a9:9a:a7:3b:80:18:c9:8b:c5:
20:97:c6:2e:8b:78:42:ce:d0:5e:f8:e7:08:7c:71:
b1:ed:f6:17:97:51:22:dc:f9:da:6e:cc:91:cf:05:
b1:b7:90:57:63:d1:e7:53:ce:96:10:c9:a7:1a:22:
1b:23:60:a9:aa:73:2e:cf:36:05:82:5f:e9:3f:27:
ad:5f:1f:2a:25:e0:fc:e6:a5:c6:46:54:62:13:f4:
21:c9:f6:e8:b5:44:55:2f:c3:05:da:0f:e5:0c:0d:
44:f7:3d:2d:aa:bd:3d:10:e8:f4:29:ac:83:21:fd:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:A6:31:32:BB:DB:C5:D3:5A:D4:DC:F0:09:40:06:B1:A0:0D:13
X509v3 Authority Key Identifier:
keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:79:89:0b:27:54:b6:80:23:44:20:7e:6c:ce:04:5f:57:ff:
75:0d:a4:82:79:94:9c:4f:e5:9c:b8:9b:d4:15:68:c5:26:c3:
dc:5e:ea:6a:01:97:05:f3:ae:a3:6d:1c:26:82:1b:53:46:ea:
2f:a3:24:33:d9:92:62:9b:27:45:60:bf:05:73:e6:ad:5f:4d:
ec:43:9d:d9:84:fd:99:4b:b8:26:b5:85:b1:97:56:16:d1:c2:
ef:44:ba:c4:55:81:d4:f3:b9:7e:31:81:62:78:90:d3:c8:90:
45:9a:9c:c2:16:2c:2d:9e:b2:3d:50:fc:88:1a:7c:bc:ce:9d:
73:88:53:4d:8d:8b:42:ed:14:da:48:aa:14:ae:09:60:a0:3d:
60:b8:86:9e:cf:98:cf:bb:62:11:e6:66:8f:63:3d:15:65:ea:
f9:ba:24:0e:c7:68:db:09:ac:a0:be:1c:78:78:a1:12:0f:2b:
1d:b7:1e:00:e4:69:3b:86:2b:10:a7:28:6f:04:dc:f8:64:27:
ed:be:99:2a:b1:7f:6d:93:0f:79:8d:ac:b2:80:a0:5f:d7:d5:
6c:29:3b:11:ac:c1:3e:0a:39:3c:cf:fd:ab:64:27:68:f1:41:
df:5a:a1:ed:c3:83:d6:10:36:2f:d1:19:69:19:c7:e0:89:c6:
fa:75:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:18 2025 by rpki-client