Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
File: miZlfmslRJQlt0hkXnQgx2rCs6Q.mft (raw, json)
Hash identifier: deYE76MyPKokmPwlzTMpddreNgmAI21aUoc+FnUaloU=
Subject key identifier: 73:A9:79:6C:31:B3:23:6C:BE:47:AA:04:A1:3D:DD:36:5C:D6:81:80
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 0194BA845268E1BF0002EFF5CB2A58FCFF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 04:00:21 +0000
Manifest this update: Fri 31 Jan 2025 04:00:21 +0000
Manifest next update: Sat 01 Feb 2025 04:00:21 +0000
Files and hashes: 1: 2V_JK6rjk2y5OzV-jGzfsnfR4RM.roa (hash: 01s7oF2QbdI5IMZDB8rKIwaE1speupoZ2KjAlI2OqvU=)
2: cbtDU2QhUAaEdfn79ud9d1retQE.roa (hash: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=)
3: miZlfmslRJQlt0hkXnQgx2rCs6Q.crl (hash: tGNEqF8b1l8bkkKleDB5buxexLHCtttPGhaMF6MFobM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:52:68:e1:bf:00:02:ef:f5:cb:2a:58:fc:ff:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jan 31 04:00:21 2025 GMT
Not After : Feb 1 04:00:21 2025 GMT
Subject: CN=73a9796c31b3236cbe47aa04a13ddd365cd68180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:24:c6:ac:ee:a4:37:8b:f4:4a:58:2e:45:
28:3d:88:57:bc:45:12:f4:8b:d1:24:ab:40:a3:46:
8a:6d:19:52:25:80:bd:2c:cb:10:01:db:f7:81:b4:
d6:9a:03:21:72:50:b4:d9:dd:ad:35:41:85:4a:ab:
9d:41:f2:4e:7e:d0:53:2d:8f:eb:2b:b0:93:6f:fb:
0a:9a:0c:8b:ad:b5:03:3d:31:43:30:7e:f7:43:f2:
83:a1:ae:05:b7:b0:56:03:24:97:5f:a3:f0:80:8f:
ac:54:54:4d:df:26:8b:2d:d8:66:62:c4:ac:20:05:
df:97:5d:ad:58:c3:fb:c9:59:be:79:34:cf:18:69:
90:af:c7:84:33:37:1a:35:11:3e:71:30:45:0d:b3:
16:5d:9e:20:14:4c:39:54:16:97:d6:88:47:dc:a4:
d5:b1:16:d8:51:ca:a4:7c:a2:fd:a4:b2:74:7c:b6:
b4:28:35:94:4a:73:70:c6:68:33:48:37:bc:19:a5:
03:06:8e:5b:14:61:47:8e:90:0f:a6:39:f5:e4:81:
49:59:0c:4b:63:ac:f2:61:7a:ee:49:ee:e8:9c:41:
d1:14:41:dd:ca:5a:67:7c:24:51:65:bd:3d:47:9f:
44:a9:8f:3a:14:9a:4f:2e:93:82:f9:c9:57:f3:04:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:79:6C:31:B3:23:6C:BE:47:AA:04:A1:3D:DD:36:5C:D6:81:80
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:d6:ad:19:dc:26:8c:f3:98:82:70:52:ed:d8:ad:ed:ee:
30:11:b4:69:f1:a5:bb:a5:2c:60:08:e1:ba:9c:42:66:56:4e:
a1:39:3a:e9:78:ae:27:e1:e9:51:79:e9:36:f7:55:2e:a7:23:
e5:04:1e:11:7c:1c:77:17:80:f0:df:81:bf:0d:26:27:c6:37:
33:a6:05:7a:a1:58:69:fb:e5:e6:f6:68:c2:c6:37:58:0c:22:
ce:ee:0b:ec:f6:be:68:12:fb:d5:a8:c7:8d:3b:ee:d9:47:4a:
9e:0d:85:72:b8:7f:48:98:8d:40:a1:ea:8f:cd:da:7a:55:ec:
3f:55:b7:c7:12:3c:94:03:7f:f6:79:b9:81:e2:85:61:f7:f6:
07:c7:45:d5:87:d4:04:ae:75:55:aa:c9:66:ff:e5:3b:57:b7:
0b:61:85:fd:09:74:5e:ee:bc:ce:09:a9:94:03:9f:c1:f6:4c:
b1:a6:c2:f7:c6:66:7b:7f:99:c6:3e:25:92:8c:8a:33:85:fd:
a1:e0:d1:75:d5:b6:67:d5:17:db:dc:56:fb:aa:29:05:fc:b2:
0c:47:b2:98:e1:28:35:25:ea:2b:c0:66:b3:b5:79:6d:06:bd:
cc:03:5d:90:9c:df:7b:0f:b1:76:bd:b8:ca:ec:d1:1e:96:d3:
a9:63:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:27 2025 by rpki-client on console-fra.rpki-client.org