Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: gNuxmSQvqzQ70+qPptF7DpQzfedI2AY9+3au34YDjvw=
Subject key identifier: 1D:BA:6E:1F:15:9B:DA:4F:85:44:B6:AE:E4:36:5B:B7:A0:9C:2E:B1
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0194C388447B1EAD2FCB903F3F8A60302BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 22:01:15 +0000
Manifest this update: Sat 01 Feb 2025 22:01:15 +0000
Manifest next update: Sun 02 Feb 2025 22:01:15 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: ZSkBCCeX+GQ3dQCORor5ABMLnzSu4WQIfPgLKIe0CuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:44:7b:1e:ad:2f:cb:90:3f:3f:8a:60:30:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Feb 1 22:01:15 2025 GMT
Not After : Feb 2 22:01:15 2025 GMT
Subject: CN=1dba6e1f159bda4f8544b6aee4365bb7a09c2eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:5f:98:09:15:ec:e0:8b:8c:8b:ed:a1:91:
da:3b:fb:0e:8f:60:85:d6:b9:bd:91:fe:cd:92:b6:
c1:6f:86:a1:5c:3c:11:bd:00:3f:cf:c9:ed:c0:65:
fe:10:94:50:80:c8:75:73:95:04:f9:44:bc:eb:44:
8c:4e:a0:99:63:bd:8b:75:2e:91:b3:ce:c1:03:ce:
aa:47:11:ea:4a:6c:68:45:71:96:2a:4d:06:af:1e:
67:65:41:96:47:f4:ef:14:15:7f:a4:65:66:fd:f1:
82:c1:96:e2:9e:19:ac:d0:45:fe:7f:20:49:1e:80:
32:d2:e7:88:1d:bd:c1:02:b6:06:db:a3:7f:cb:92:
a1:f9:33:65:01:92:b2:b1:3e:7b:19:13:02:33:83:
a7:38:cf:78:a5:1f:2e:fd:55:2b:a4:37:4d:5e:85:
2e:69:c2:21:07:3c:38:54:bb:92:d0:8d:66:6b:64:
03:a7:f1:c6:b4:17:7e:22:14:e9:77:c3:e0:c9:60:
fd:fb:fa:be:9b:f6:b7:8b:6f:01:ab:db:ee:4e:e7:
6c:32:6f:72:8d:b8:67:b9:d1:49:ba:90:1a:56:4c:
de:e0:d3:ff:32:81:cd:ff:7a:19:bd:15:91:17:7c:
5f:a1:cf:af:16:5f:0d:50:b6:b0:c7:bb:88:8d:d1:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:6E:1F:15:9B:DA:4F:85:44:B6:AE:E4:36:5B:B7:A0:9C:2E:B1
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:cb:2d:fb:51:20:ad:99:98:7a:bc:11:9f:70:e0:b3:2f:
11:35:5d:e1:d0:25:2a:3b:bb:90:1e:47:27:b1:29:d7:fb:b2:
0e:f2:a1:69:3b:5a:a1:68:78:97:7f:33:fc:62:b0:92:74:8c:
73:d1:ab:94:27:8c:41:9b:f8:8b:ad:23:d9:59:be:8c:36:b9:
b3:ae:7a:3b:81:4b:cb:86:ba:6f:dd:24:70:d8:32:09:8f:f7:
de:3c:b0:2e:42:cd:73:d4:8d:a6:d8:55:f0:af:28:66:05:d3:
e1:f1:ad:f1:01:e5:20:2a:ea:74:ba:95:5e:c6:79:97:04:1a:
59:7b:a7:c8:84:07:ec:20:e7:ad:e0:2a:d7:58:93:1e:bb:98:
43:8e:5c:ce:c6:cb:b6:54:8f:d1:38:61:89:49:06:ee:93:d9:
2d:b9:8f:b0:f6:95:e3:77:87:0d:7b:f2:79:66:59:69:67:a7:
0d:bc:54:71:7a:82:95:97:4a:da:e3:48:fa:2e:4e:6e:02:04:
b7:0e:f3:0b:ff:28:09:e3:3f:54:55:86:18:29:07:37:5c:98:
74:78:53:f1:83:1b:9f:ff:d6:92:a4:b1:91:3f:cd:30:7d:46:
0c:4e:fb:c6:e2:02:66:d6:57:47:24:a9:6a:ea:69:41:8c:7e:
66:6b:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:53 2025 by rpki-client