Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: VjlUmtAXp34Qn29drZ0CfVTdI+rCy+jviXjRtxhH/Ds=
Subject key identifier: F1:F9:92:5E:F8:9D:4C:B6:52:C2:99:06:E4:B4:64:1C:91:27:D1:E1
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 0194C3F604D529A47A822E7A7A84C766ABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 1145
Signing time: Sun 02 Feb 2025 00:01:07 +0000
Manifest this update: Sun 02 Feb 2025 00:01:07 +0000
Manifest next update: Mon 03 Feb 2025 00:01:07 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: MRHZHPlQhe6RB0PUQRdqMcgIzz8tqf07IbZK54T8ZvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:04:d5:29:a4:7a:82:2e:7a:7a:84:c7:66:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Feb 2 00:01:07 2025 GMT
Not After : Feb 3 00:01:07 2025 GMT
Subject: CN=f1f9925ef89d4cb652c29906e4b4641c9127d1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:85:c2:97:ee:ac:2a:d6:68:32:a6:ba:92:
ac:61:49:31:c5:2e:30:1d:56:6b:1e:b2:15:bc:50:
f1:36:02:b1:ad:33:bb:95:5b:bc:64:7f:76:05:10:
2e:dd:8a:67:cb:52:db:24:cb:fe:f3:e8:28:d5:d0:
14:c9:13:fd:6d:12:c3:92:20:54:28:9d:c1:4b:95:
e7:be:20:74:85:b9:48:4f:b1:07:3c:44:27:f5:de:
fb:e9:5c:c4:f9:ed:d0:0f:76:17:a5:54:31:13:0b:
4d:db:9f:56:17:5a:86:ee:5c:37:35:ef:5b:46:68:
3c:fa:c6:59:12:0c:a5:02:15:a5:d3:9f:3d:7e:3f:
0f:77:94:6c:58:eb:cf:19:d7:84:85:91:a6:73:1c:
0a:a7:04:90:38:03:d0:55:ba:37:c4:5c:9b:dd:56:
81:32:23:75:7b:dd:17:a6:61:57:55:f6:ec:a7:d9:
76:93:58:8d:21:29:c5:72:40:e8:a7:05:ce:30:05:
2e:46:3f:ae:57:1a:92:94:9e:cd:57:b8:1a:13:57:
8b:54:81:a0:6f:8f:90:32:64:9d:8a:0a:99:a8:90:
30:4e:77:e7:f7:d5:2f:a1:c4:d6:62:05:f2:23:1e:
c8:60:61:b6:fb:b9:fd:a7:20:51:cb:60:94:49:5c:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:92:5E:F8:9D:4C:B6:52:C2:99:06:E4:B4:64:1C:91:27:D1:E1
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:32:cd:ed:65:46:7d:4f:1f:30:b6:69:1a:ac:b6:d2:a8:
18:9c:ed:f3:8f:7d:ce:80:b0:02:f2:78:6a:0f:5d:51:03:bb:
54:d5:d4:c4:85:26:20:f9:a9:7f:ff:0c:ad:af:eb:e3:d6:5f:
24:21:90:81:0a:ae:25:84:a2:85:7e:ab:8b:2b:5c:a4:03:d9:
95:06:06:d3:1f:37:95:a4:a8:63:9c:27:d6:28:b2:da:2c:a5:
58:1a:b8:9a:88:63:96:5e:71:bf:0e:0d:5d:4b:8d:7d:58:f5:
9f:80:09:45:98:a9:c4:99:60:c4:10:72:7f:4f:01:17:58:c6:
a3:87:64:68:a0:63:1d:cc:fa:67:dc:ef:1c:21:72:d8:f5:a1:
81:1f:6f:d5:41:5c:e0:06:69:5c:3c:be:a8:f1:3d:0d:9c:63:
60:e2:b8:80:9c:1a:7c:41:58:07:4f:de:80:8d:f7:b5:b2:cc:
a5:e0:a8:ff:ca:83:c7:3c:f0:7f:a7:83:12:66:df:a5:df:b8:
a7:91:67:49:7e:c8:ee:50:67:30:80:83:f9:02:5d:50:88:a7:
53:59:9b:75:b5:61:00:82:2a:74:ce:a7:df:82:e6:5b:8e:d0:
d7:43:39:47:22:00:1f:a8:43:c6:36:ab:e9:12:8d:a4:dd:6f:
21:64:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:22 2025 by rpki-client