Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: W0484ZmY6RDbsXY3X1sf1GbRuTsqHYIBizyRXlvl1rE=
Subject key identifier: E1:FA:CB:31:4F:98:57:FF:84:0B:35:AB:4A:20:28:37:21:81:EC:12
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 0194BB296AAEA7E8900BBABAAD1E83DA0FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 08D3
Signing time: Fri 31 Jan 2025 07:00:41 +0000
Manifest this update: Fri 31 Jan 2025 07:00:41 +0000
Manifest next update: Sat 01 Feb 2025 07:00:41 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: 30gn0fBaOR1I9FzzmVWnkOUEG/53V+NiyVdUW/T/v0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6a:ae:a7:e8:90:0b:ba:ba:ad:1e:83:da:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Jan 31 07:00:41 2025 GMT
Not After : Feb 1 07:00:41 2025 GMT
Subject: CN=e1facb314f9857ff840b35ab4a2028372181ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:6e:40:fe:71:2c:8d:5d:43:eb:28:4b:38:
3e:50:9b:4f:c0:ad:df:93:a1:87:34:f2:9d:71:85:
5e:e3:c0:09:89:6a:69:37:0c:96:2d:17:7a:c1:f0:
e4:8f:30:5d:f9:d8:26:0b:b9:61:a9:26:04:58:b5:
8f:64:94:ef:31:52:8b:aa:37:0b:a0:2b:69:e7:ea:
97:32:d1:e2:9b:91:2d:54:68:c8:f6:cc:cd:6b:65:
49:9c:ed:fb:c9:9f:d4:b9:09:65:62:76:0a:94:9c:
48:ef:52:2c:ab:1a:77:16:92:68:46:03:44:52:20:
e0:78:33:c0:db:60:ff:5a:de:ae:74:85:f5:67:5f:
8f:9a:74:84:3a:31:af:b1:ee:fe:16:19:f6:62:f5:
b0:32:2f:1a:dc:f2:3e:7d:f8:7c:58:b5:57:4c:6d:
bf:41:da:34:6a:a6:ab:e3:06:c7:7f:4c:ca:9a:d6:
f5:6a:2b:1e:45:cb:dc:67:bc:03:ff:cf:1c:db:18:
d6:41:59:c1:ca:c5:6c:b3:90:90:8c:ba:c4:35:90:
05:a2:7b:51:fc:73:d9:36:83:a2:78:e8:ea:05:af:
36:ec:38:21:4a:72:72:7e:ab:79:6c:ee:db:b9:e1:
fb:48:52:dc:ba:79:db:e6:32:e9:e9:4b:8c:1a:8e:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:CB:31:4F:98:57:FF:84:0B:35:AB:4A:20:28:37:21:81:EC:12
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:0a:c4:2a:37:c5:2f:8d:ff:70:5f:98:7f:2d:15:ce:82:
3e:5f:e9:85:d7:56:0b:1f:16:2f:b1:f5:06:7c:35:79:2e:ad:
14:ac:33:38:e3:93:4c:19:32:89:ae:d0:58:f1:d5:c0:c6:48:
53:50:b4:63:5d:c0:92:ea:fd:4e:84:e6:d3:3e:32:53:89:0d:
5f:cb:98:c8:57:45:ab:54:e3:f2:29:e8:58:80:2a:c5:3b:e4:
5c:bb:f7:34:a2:6d:fe:9b:b8:b7:b1:1e:69:81:35:99:14:90:
50:02:b8:0b:aa:e2:f9:62:fb:23:a6:37:d6:44:1f:35:f2:af:
d3:c3:b7:c0:2b:18:a4:9b:f2:dc:c5:14:f6:7a:eb:c4:59:bd:
9a:a8:2d:2e:ab:59:1e:99:36:cc:96:a8:0d:22:d6:ef:51:75:
4f:e2:2e:78:04:1c:b5:a5:3e:34:58:25:01:7d:a5:a3:05:0d:
dc:f8:82:e7:fc:01:e6:20:90:ba:24:6e:93:d3:a2:6b:50:41:
51:83:67:98:3e:48:fd:60:8f:b4:b4:db:1a:07:b7:6e:af:f9:
a9:54:8e:44:f1:56:88:9e:10:02:22:be:5f:9e:d9:cc:b0:19:
33:b9:d8:c8:ff:d0:14:49:59:d8:0c:fe:7f:43:a4:e1:36:c0:
64:4a:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:04 2025 by rpki-client on console-fra.rpki-client.org