Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: xz0zUycXbiEvUFOUHPM7UmVMK3GNNHYpdwJ2LFmOaLM=
Subject key identifier: 8C:6B:E2:26:F6:52:5C:C6:DC:63:09:B8:A2:51:87:19:75:0F:E2:B8
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0194BABB36C53C5B0EBC1CB88BF3E9FC9C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:18 +0000
Manifest this update: Fri 31 Jan 2025 05:00:18 +0000
Manifest next update: Sat 01 Feb 2025 05:00:18 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: 4temsSiSu07VXnYyS3uL8G/7JZYmHCHFi3QWRD20edo=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:36:c5:3c:5b:0e:bc:1c:b8:8b:f3:e9:fc:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jan 31 05:00:18 2025 GMT
Not After : Feb 1 05:00:18 2025 GMT
Subject: CN=8c6be226f6525cc6dc6309b8a2518719750fe2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:1f:0d:d9:a8:9c:35:fc:0b:d3:6b:c5:ac:
b5:5f:72:13:3a:d1:bb:1c:a8:cd:17:0f:42:6d:ec:
5b:85:e2:44:8c:1d:dc:2d:e9:e2:7a:88:d8:da:27:
1b:9f:97:7b:c6:2d:9e:b9:c7:ea:39:91:f1:93:cd:
2f:97:74:65:54:df:a7:d0:8a:45:65:bd:dd:eb:27:
66:92:b7:60:d8:ef:92:24:4a:6b:51:82:07:90:51:
64:d8:47:2a:fb:ba:01:73:8b:2b:00:c6:7e:03:c1:
f3:0f:5e:a5:88:a6:b4:1b:ef:ca:08:b3:65:79:48:
48:90:9d:d0:f8:41:54:8e:71:1a:6e:10:d3:8c:6f:
e2:f9:0e:15:5a:db:21:36:b1:21:5c:ce:ae:9b:66:
06:2c:aa:47:3b:dd:44:81:72:60:e9:09:f9:85:2c:
c5:20:a8:b5:46:04:61:e4:a6:c4:dd:0c:f0:b1:be:
d0:28:8a:31:7f:4d:71:ef:5d:ac:8f:a3:f2:e8:39:
00:e3:35:50:d1:20:dc:7c:e0:ad:5f:97:28:d6:8b:
bd:f1:aa:48:f6:4a:07:af:0b:36:f3:b5:33:e8:7b:
e4:bb:9f:4b:51:5b:3c:9b:ca:b0:74:87:c0:51:c7:
b7:95:b7:f1:95:25:4c:c0:c9:8d:77:7d:52:0b:14:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:E2:26:F6:52:5C:C6:DC:63:09:B8:A2:51:87:19:75:0F:E2:B8
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:24:09:be:9d:5b:d1:19:d8:ba:c2:f5:16:1a:bd:ba:46:d9:
dc:f5:e4:17:f7:49:5e:a3:e6:ff:a9:64:a5:94:73:4f:47:4b:
3c:73:e1:c5:2a:cd:34:84:f8:4c:6a:31:70:53:34:38:c2:5b:
0b:c1:3b:90:b9:b1:27:9c:43:b9:81:17:d9:d0:b7:38:4f:a7:
21:1a:67:2a:db:17:ae:89:76:e6:4a:09:d5:a3:0f:9b:ec:e4:
0e:fc:13:11:69:f5:4e:2a:23:b2:37:68:e8:a1:93:11:62:eb:
a7:fb:35:65:70:c8:c2:57:05:d8:03:d9:c2:e5:4f:45:f6:9a:
48:f8:88:d9:7c:69:37:50:a1:69:c1:fe:8c:22:09:02:99:92:
75:54:39:42:70:c1:73:f3:1d:46:cb:1b:06:76:05:a7:10:3e:
74:d4:44:d6:6f:16:1e:8a:a3:29:cb:03:0b:cd:f3:47:af:bc:
06:97:88:53:91:b8:3d:ac:33:83:02:51:1b:65:20:46:f2:1b:
43:a4:e5:43:94:35:4c:42:ac:8e:48:8c:69:20:36:c9:bb:9d:
31:5e:b9:ea:74:03:73:d7:74:6e:dc:b7:ed:02:4c:6e:3e:ad:
7d:37:9a:cb:b1:c0:61:fe:e4:2d:20:9d:d1:79:f3:05:1e:2d:
1e:bd:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:09 2025 by rpki-client on console-fra.rpki-client.org