Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: vffSjRat79o/Ge3fLFrxRDl35Lw96HxdTWSQPoaLphE=
Subject key identifier: D4:88:5F:FE:22:A4:77:EA:FE:69:A1:01:26:AE:1F:4F:FE:62:3A:4A
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0194C3BE45B4A304BCCA6C6B714211157A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 23:00:14 +0000
Manifest this update: Sat 01 Feb 2025 23:00:14 +0000
Manifest next update: Sun 02 Feb 2025 23:00:14 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: +s1RuxVtICLqTjQWhw7kZnKNfZIAshgUEmsGON/k4g8=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:45:b4:a3:04:bc:ca:6c:6b:71:42:11:15:7a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Feb 1 23:00:14 2025 GMT
Not After : Feb 2 23:00:14 2025 GMT
Subject: CN=d4885ffe22a477eafe69a10126ae1f4ffe623a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:b4:e6:17:06:4a:d0:18:8b:90:33:50:fc:
9d:2c:df:b4:bf:83:ca:50:50:07:2e:93:23:20:44:
a1:29:d7:06:5e:47:d0:0e:45:a3:d7:5c:61:09:8c:
d4:06:40:d2:4c:a3:61:aa:07:d8:eb:bc:9b:5c:8d:
64:b3:55:b9:a7:b4:9f:d1:92:3e:49:c0:64:97:7f:
ab:1e:5a:6f:fa:9a:0e:6f:a7:f7:af:9c:f9:ee:75:
ba:77:de:cb:46:ef:f9:d4:a8:4b:c8:2d:a5:f9:27:
65:74:ec:4d:be:6b:8b:25:90:24:a3:c8:90:39:31:
d7:69:b3:29:4d:4a:d8:2c:ff:7b:1e:cd:c6:ea:a9:
1e:bb:26:67:80:4e:a6:1d:86:ac:bd:18:e7:46:e2:
47:1c:06:66:8b:b9:72:65:fd:72:e7:f6:47:10:ad:
c4:72:ea:23:86:dc:de:8a:f8:0d:0c:09:e8:11:17:
51:01:ba:4e:97:ae:2b:60:29:fa:f8:3c:67:bb:5c:
d7:76:89:7e:f4:d6:7b:a5:5c:a6:60:93:f4:ab:7a:
57:bc:6f:42:85:26:23:de:2c:47:98:50:3e:c8:bf:
7e:1a:29:d5:e0:ba:6c:3f:02:b6:51:15:55:5b:d7:
c5:43:d4:30:e5:6d:55:1c:db:39:b9:69:9a:48:4e:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:5F:FE:22:A4:77:EA:FE:69:A1:01:26:AE:1F:4F:FE:62:3A:4A
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:79:a4:e5:25:b2:5b:9f:77:10:6b:bc:da:77:ad:cf:e7:a6:
7d:a1:5e:0a:c2:bd:67:45:c4:02:ef:ce:37:00:fe:84:95:bd:
7a:cf:e7:13:6e:0c:59:ba:98:27:0b:ef:ce:60:2c:b8:d0:4f:
8e:fc:37:cd:72:cd:23:3c:3e:09:ad:c7:35:42:ef:d5:f3:ab:
87:f4:ce:5b:56:ff:64:b7:eb:1b:d2:04:e0:8f:b6:b4:93:b5:
0a:15:4d:c3:61:8b:d5:05:88:e3:0e:fa:f1:c4:ae:76:ec:0a:
cc:92:76:20:f4:11:6c:3f:35:78:13:f2:4b:d1:ca:da:35:4f:
b1:44:a3:cf:c2:35:4f:6b:b8:8e:1e:2c:cc:ee:13:c1:08:68:
8f:4d:df:3f:1e:ac:7a:ca:27:e8:be:d7:1d:9e:87:33:cc:45:
2e:50:ce:97:9c:70:fd:82:b8:ee:b7:1c:86:cf:bd:e8:7c:a0:
66:ff:f2:90:02:fd:80:fd:ba:21:49:1f:b3:b0:b0:68:53:d8:
42:3c:ec:bc:03:df:0b:1c:cf:02:73:26:71:bf:c5:02:97:ba:
67:9a:4e:43:af:19:02:0a:33:2b:5a:55:9c:f8:03:30:d2:e4:
ca:29:fb:7b:1e:80:e7:4c:35:74:e1:14:6a:c0:af:b8:b2:a3:
ef:02:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:31 2025 by rpki-client