Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: ghrSpgbh9/1HMG8TWsTEue1zUrtfRS3lS9LO/fE/B5U=
Subject key identifier: 15:A6:F6:8D:3C:5D:1D:2E:8D:90:5B:7F:9D:0F:E9:21:48:BE:ED:47
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0194BA841E91B4DA5F95438DEFE3DEF9B076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:08 +0000
Manifest this update: Fri 31 Jan 2025 04:00:08 +0000
Manifest next update: Sat 01 Feb 2025 04:00:08 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: 3TuIuiRAarxm1knw8tMSY+Bl3WWQdmu0Q58H+gM3O7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1e:91:b4:da:5f:95:43:8d:ef:e3:de:f9:b0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jan 31 04:00:08 2025 GMT
Not After : Feb 1 04:00:08 2025 GMT
Subject: CN=15a6f68d3c5d1d2e8d905b7f9d0fe92148beed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:ae:1e:34:73:0f:12:54:f3:15:bb:fc:de:
2d:6a:51:16:db:2c:89:e8:0c:f2:ab:0b:ed:4d:18:
1f:76:1a:3d:4b:2f:a6:7a:eb:95:89:4c:80:84:a4:
a1:35:2d:a2:6d:7b:14:40:21:94:01:72:f8:9e:ec:
d0:af:0d:2b:4c:af:e6:c4:61:8e:15:d0:9d:b7:be:
62:d1:03:9c:f2:e7:68:b3:e2:45:53:3c:a9:35:af:
87:d5:6f:48:5f:64:12:97:18:5a:06:70:ae:44:58:
52:f3:d5:97:19:3f:bd:bb:e5:8c:a6:7b:c7:3f:fe:
ee:a3:c4:03:19:6e:8d:3b:a9:a8:89:8a:53:e1:80:
9c:9f:01:7a:d8:db:7d:ef:20:22:bf:a3:bf:ed:84:
03:4f:49:e6:73:30:c3:6a:87:6f:bc:a4:d6:29:0c:
4c:d1:7a:d0:b9:52:d3:08:f4:d8:4e:72:f8:1d:71:
a6:ae:fa:01:25:7b:fb:86:73:6f:ed:c4:d2:cc:ce:
c5:ba:72:14:d7:52:2e:93:0d:45:c9:05:60:0f:a2:
ce:bb:f9:c0:5f:81:29:31:8d:53:73:ac:56:93:5d:
6c:41:b8:3a:a1:49:f1:7b:22:c3:e7:74:95:d6:05:
82:84:a8:0b:9a:1c:d6:3a:fa:3c:14:7b:82:82:53:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:F6:8D:3C:5D:1D:2E:8D:90:5B:7F:9D:0F:E9:21:48:BE:ED:47
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:6a:81:e0:0b:77:52:f6:79:19:62:8c:6a:60:43:8e:99:
5a:78:99:47:af:50:19:68:85:51:9d:9f:1c:e1:67:4e:91:ae:
f2:ec:58:14:37:c8:d2:89:d8:85:64:26:45:66:6e:d8:a0:5f:
b9:4f:ed:b6:54:9a:84:ef:36:cb:c9:f7:8b:08:cb:5a:b9:d2:
a7:53:3b:f9:f9:dc:dc:df:8b:38:9b:b1:ce:9a:2b:30:25:14:
8d:ad:4d:7d:5f:e6:14:af:e0:e4:41:a4:29:08:39:be:e1:28:
ce:25:9f:3b:bb:fd:43:16:27:26:6d:e0:b2:af:7f:93:2c:5f:
0f:63:e8:1f:11:9b:8c:9c:5a:14:85:4c:79:86:be:98:15:cf:
8b:46:e3:02:f9:6f:c6:3f:8f:83:0c:6d:36:74:f2:bb:ad:6f:
ac:02:95:ca:f4:0b:25:ae:eb:d5:83:74:4c:e4:45:c6:e0:1a:
79:66:d7:6d:55:f7:e8:ac:88:74:74:cc:3a:49:7e:49:7f:69:
7f:8f:c9:b2:94:76:f1:a0:d6:ff:30:f9:4e:cd:f9:3c:88:46:
5d:34:80:9e:f2:68:c8:8e:19:ee:9d:93:5c:79:d0:6b:2e:1b:
4c:a1:c6:02:43:d6:de:7c:ea:55:d4:65:3d:ea:c7:45:a0:0c:
84:98:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:36 2025 by rpki-client on console-fra.rpki-client.org