Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: NE2SDt8xdhHnwk0dh3hk/OnmNm3tnqehkjqtmcpS80E=
Subject key identifier: 31:5F:05:A5:CC:DF:33:23:FA:3F:04:54:56:6F:9D:D2:A5:56:AF:FD
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0194BB2961F5FBDCE50C87C54D9FBC7723C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: sk6HeMKxvonNSbseypBwxqi8qwkn2q+L/mfyRQmwbpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:61:f5:fb:dc:e5:0c:87:c5:4d:9f:bc:77:23:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=315f05a5ccdf3323fa3f0454566f9dd2a556affd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:27:4e:55:fa:88:b3:f6:98:b0:e2:3f:20:
61:69:44:1e:c5:ad:18:4f:bf:2a:58:8f:79:18:3a:
72:33:34:49:e7:31:9d:18:d9:cc:28:ed:27:62:0d:
96:b6:7a:a5:cd:89:de:8a:ca:7c:29:87:df:85:42:
da:c8:13:6c:f9:55:8d:fd:2a:a1:0b:95:ec:3b:b5:
dc:d4:6a:43:04:c1:3c:d0:83:76:e1:2e:0c:c9:c1:
61:53:9e:0c:cb:7c:45:9a:ca:06:c7:6f:f3:35:89:
1d:12:60:ea:08:b3:a3:5d:72:81:34:c5:99:3c:ef:
00:9a:d0:4a:81:1f:0c:ea:bf:91:b5:84:91:09:80:
a0:38:fe:39:46:e6:68:f1:fd:11:dd:8c:7e:e1:c9:
9d:64:77:c3:f3:d4:13:1b:29:e6:31:52:86:85:9a:
c1:d9:f6:c1:b1:13:6b:b0:77:ac:9c:bc:c5:e2:76:
a4:a4:55:fa:fc:b3:0b:b1:e9:df:d1:23:fa:86:1c:
e0:2d:e2:1c:b0:2b:8b:85:3a:66:71:62:74:75:3b:
23:97:46:f9:20:eb:e0:90:6e:f3:75:a4:88:a7:e5:
a0:38:49:83:e3:64:94:e6:23:1f:2c:53:b9:3c:bb:
08:a5:b3:de:83:08:11:46:17:a6:82:7d:b1:e9:14:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:05:A5:CC:DF:33:23:FA:3F:04:54:56:6F:9D:D2:A5:56:AF:FD
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6a:72:8f:a0:6b:37:5a:98:0c:a1:53:f4:6c:5f:35:01:e8:
65:e2:73:d4:38:4c:08:4b:b7:ef:14:64:56:11:31:c3:ef:4e:
45:85:6e:14:7a:5e:d3:ac:9e:53:79:8c:c0:be:79:da:b9:e3:
11:5d:2b:77:94:7b:3f:62:30:75:bc:0d:08:13:29:ee:02:fa:
86:32:f7:02:a6:22:6a:d7:0d:77:bf:d0:4b:af:4f:a6:28:bb:
e1:9a:c3:4f:6f:2e:37:56:7d:c7:5d:52:44:f6:d9:e0:22:87:
4e:38:19:d7:2d:c3:61:dd:b5:1c:27:d4:4f:ce:60:fc:9c:6a:
86:72:9c:cc:b9:6d:5d:fc:c9:dd:7d:97:02:b3:dc:82:90:db:
b7:2a:b9:26:73:49:4f:02:1d:f0:57:f7:4e:0e:4b:95:07:2a:
91:35:7c:0d:ca:e9:f7:87:6f:0e:95:6a:4c:27:76:4a:5a:c6:
b2:73:8e:39:5c:10:2b:5a:85:91:73:1f:2f:26:b0:82:ca:c6:
3d:b1:ca:91:c0:d6:9b:44:c4:27:e7:81:b9:ac:00:57:65:ea:
cb:3b:52:12:4d:0d:48:1f:91:6e:87:f2:34:73:69:51:f8:d4:
19:c7:9f:88:45:22:4e:ff:e9:41:10:68:41:85:8b:e1:00:bb:
ed:95:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:59 2025 by rpki-client on console-fra.rpki-client.org