Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: RDUG4dgqHu5nqAWxz8XDEZOWG/1Ile0vPpS7dhiICZY=
Subject key identifier: D5:3C:64:09:CF:8A:1B:39:01:2A:8A:45:33:EF:AE:B0:FB:7A:88:FF
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 0194BB96F8906584D2A0DE5CF45EBA653FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 100B
Signing time: Fri 31 Jan 2025 09:00:20 +0000
Manifest this update: Fri 31 Jan 2025 09:00:20 +0000
Manifest next update: Sat 01 Feb 2025 09:00:20 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: TaLwq6nsmQpZaHuEKAOFr7FZGjJBbgrTER9Ev0N1FGk=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f8:90:65:84:d2:a0:de:5c:f4:5e:ba:65:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Jan 31 09:00:20 2025 GMT
Not After : Feb 1 09:00:20 2025 GMT
Subject: CN=d53c6409cf8a1b39012a8a4533efaeb0fb7a88ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:3e:ad:0a:f6:64:31:13:13:a6:62:83:3f:
5f:61:db:08:a2:2a:1a:c7:f2:44:24:5f:24:bc:f8:
d2:60:fb:3b:bf:84:99:14:16:10:f1:d4:31:cf:c8:
5b:8b:2d:27:5d:74:07:ef:d7:60:cb:d7:70:db:91:
38:16:79:f0:bc:98:b6:5d:da:86:5c:4c:fc:22:07:
a5:fb:e5:2f:fc:2d:46:73:94:6b:d5:df:95:dd:60:
54:af:a1:f0:3c:1e:fd:f8:90:2e:f5:68:ca:26:9a:
14:a8:cb:c2:54:80:97:58:3f:81:6a:83:01:2e:59:
00:ee:db:4f:c8:80:c8:8e:06:21:cb:56:e5:dc:83:
6d:9e:12:b4:fc:07:31:77:fb:5b:59:d1:1b:1f:ae:
62:f6:e6:05:dd:12:5e:4b:c7:09:e6:ab:1c:a0:d5:
54:e1:82:15:82:e5:c5:33:06:85:67:7e:1d:23:98:
97:7d:c6:fa:cf:e6:d6:6f:6b:5e:6a:cf:89:36:49:
0e:ce:7d:ce:40:54:fd:bf:fc:d7:60:a9:72:55:18:
95:46:34:9f:d9:c6:bd:80:48:26:63:c0:0c:3b:f0:
32:dd:6f:4d:3d:c9:86:c9:fc:d6:bf:97:00:8a:3e:
41:91:d2:3a:be:4b:21:55:9a:17:a2:3e:c6:91:41:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:64:09:CF:8A:1B:39:01:2A:8A:45:33:EF:AE:B0:FB:7A:88:FF
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:af:b1:5b:99:4a:49:62:67:8f:e3:05:e7:e1:3d:ee:da:
a1:5b:b9:2b:70:28:d6:d2:e9:c3:c3:11:32:49:fb:19:47:fd:
31:5c:87:e8:02:dc:7c:0d:28:d0:f7:04:9e:94:8e:69:0a:82:
1a:7f:20:3c:94:ff:bd:98:1f:a9:32:09:cd:d3:38:a1:63:e3:
d9:97:64:02:5c:0f:30:09:d5:52:62:da:8e:be:ac:3f:a9:26:
46:fb:9e:3b:ad:e4:00:33:0b:e3:da:44:34:cb:6d:91:8f:71:
70:54:c0:00:3c:71:32:eb:5c:6f:81:8b:50:5c:5b:eb:a9:37:
22:7e:96:cf:84:3f:eb:37:67:f2:cb:dd:0c:83:5f:9c:a2:4f:
57:58:96:45:30:af:fd:84:50:da:66:d8:a3:55:7a:56:73:e3:
6d:5b:39:87:17:c9:08:47:27:f7:eb:cb:35:7a:15:04:dd:b7:
50:6f:e8:9d:3b:cc:03:f2:98:15:40:3d:25:dd:c0:35:2a:8c:
5f:6b:39:4f:87:04:22:85:1b:a2:91:9e:b8:87:bb:4a:9d:85:
c9:e1:cd:26:39:b1:76:03:0c:59:4d:b1:82:ea:3d:e0:d0:29:
eb:88:7b:29:e7:13:3a:71:ec:9d:45:56:bd:a8:64:75:b7:d8:
3d:2e:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:09 2025 by rpki-client on console-fra.rpki-client.org