Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier: ptoKFOJmyeXftxJ+tgnivabcNGoyzB3FJm5Hc1/1IpQ=
Subject key identifier: B0:F8:B1:99:14:3C:6B:08:6F:97:29:59:0C:B5:87:78:52:DD:2E:0A
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 0194BA847AFE74898CDAAA6AA91EF469FD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 04:00:31 +0000
Manifest this update: Fri 31 Jan 2025 04:00:31 +0000
Manifest next update: Sat 01 Feb 2025 04:00:31 +0000
Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=)
2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=)
3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=)
4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=)
5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=)
6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=)
7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=)
8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: 6tJ1VqBlbKjt5DVhsbji5aMu4M5FtygOFsYKOSyX80E=)
9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=)
10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7a:fe:74:89:8c:da:aa:6a:a9:1e:f4:69:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 31 04:00:31 2025 GMT
Not After : Feb 1 04:00:31 2025 GMT
Subject: CN=b0f8b199143c6b086f9729590cb5877852dd2e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:12:7b:71:09:7d:f9:38:ba:4d:32:e4:86:
f3:16:5e:68:d5:94:43:f7:ca:b4:ca:ad:61:d1:a4:
58:5b:80:5b:77:dd:e9:4f:3b:65:ce:6b:42:1a:be:
c2:bd:f2:0e:21:a8:7f:e5:4c:ba:1b:55:0e:25:cd:
69:99:db:4c:0b:4d:ae:31:2f:ad:5e:56:20:de:8d:
11:b0:6c:0b:8c:5f:06:bf:4e:47:dd:3f:6c:62:04:
0b:cc:34:f1:5f:e7:1e:27:f7:09:ef:80:d2:4a:b7:
6d:e3:a4:7c:9c:88:0c:39:fa:b4:e4:5e:75:ff:a5:
48:e4:48:2d:14:ad:b0:a5:4b:bf:fc:0c:b6:f8:99:
6b:a1:26:e4:3b:c0:69:15:6f:8c:59:8a:6d:98:2a:
cd:e4:78:a1:39:bc:7a:ba:3d:dd:43:5d:eb:f0:20:
78:10:32:4a:4a:11:78:e2:7e:ab:f6:27:6a:36:30:
f5:3d:1c:10:c3:a8:17:91:e6:22:02:7e:c0:0b:fe:
fa:a2:c8:43:a4:d0:6d:ab:be:1c:52:91:6a:26:c8:
93:c4:03:42:68:b7:cc:f7:97:db:8d:10:05:19:82:
87:57:79:e3:b1:ef:b3:15:d9:ac:6e:d5:9f:0b:ce:
ad:7b:96:d4:26:9d:b8:01:dd:7d:b8:73:ec:a1:a9:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:B1:99:14:3C:6B:08:6F:97:29:59:0C:B5:87:78:52:DD:2E:0A
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:bc:e0:bd:58:bd:ad:ab:00:f1:0d:45:58:54:fd:1a:d9:
fc:dd:3f:4b:29:1a:38:87:68:2d:1f:5c:9a:c9:a1:2d:71:eb:
c5:a4:c5:7d:c5:8b:8a:29:6d:17:34:7f:d4:08:a2:3a:8f:24:
d8:07:8c:d0:c6:f4:cd:36:2b:83:da:b9:2a:ab:04:e1:f9:8d:
5c:c9:07:e3:9c:a8:5c:04:4e:5d:cb:83:9a:82:72:c5:13:81:
ef:a6:fd:07:4f:8c:1b:ee:7e:36:50:90:62:53:66:ec:29:8b:
aa:96:20:5a:2f:63:49:f6:e3:29:44:34:e1:03:65:46:19:8e:
42:6a:e8:a1:88:ee:af:bf:56:7f:3e:3c:fa:55:08:97:47:08:
3c:c1:aa:aa:85:54:8c:c0:a0:cd:35:d1:01:37:45:46:6a:51:
89:40:37:f6:53:1e:44:29:5e:41:f9:1c:ad:82:c0:7e:29:8e:
be:6b:c4:cf:09:46:09:6f:b5:74:68:14:fd:57:4d:7c:88:90:
83:fb:ad:09:7b:84:9c:77:b1:8a:59:9f:5e:e9:51:bc:34:73:
ba:e2:f7:ab:4c:b1:35:3c:25:4f:1e:3d:06:82:6f:1c:83:e1:
be:f3:7a:d1:ee:05:18:14:ec:17:6e:ae:1e:89:44:9d:0c:77:
3c:a5:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:15 2025 by rpki-client on console-fra.rpki-client.org