Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: rlZ36M5G4up8C82+ZF8hckG3HUqNUk0q9w2NU7SukM4=
Subject key identifier: B6:BC:E5:B6:CC:16:95:C6:DF:D1:EA:BF:57:F2:0D:76:97:7B:49:3A
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 0194BAF2109EA8E94023D94B6502857AB5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 06:00:13 +0000
Manifest this update: Fri 31 Jan 2025 06:00:13 +0000
Manifest next update: Sat 01 Feb 2025 06:00:13 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: 8D1tdkgJzoQZbV2n5EqMKvwL5LYqfrfRi9HIQurzVqw=)
2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:10:9e:a8:e9:40:23:d9:4b:65:02:85:7a:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 31 06:00:13 2025 GMT
Not After : Feb 1 06:00:13 2025 GMT
Subject: CN=b6bce5b6cc1695c6dfd1eabf57f20d76977b493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:92:fa:d4:90:58:00:7d:d9:e0:40:5a:c3:
44:aa:1f:53:fb:95:c0:4e:ff:4e:c7:bd:81:43:1c:
cb:a4:f3:73:da:3a:d7:c1:eb:fe:17:63:0c:1c:74:
9c:72:eb:ad:f5:fa:ea:cc:f0:dc:fc:b8:20:bd:0f:
88:5a:e1:1c:67:2c:30:25:95:2b:ab:61:83:a6:56:
5d:ec:a1:26:5c:ef:46:d0:e7:41:94:7d:a2:98:1f:
20:ad:6e:78:40:87:36:30:8c:a9:13:da:83:85:d5:
93:3e:ef:39:ef:95:7b:e5:ca:c5:a6:18:44:af:64:
df:7c:00:3a:ec:1a:90:14:4b:91:1e:d3:b9:d3:ea:
c1:f9:65:e0:01:c1:df:1a:9b:55:3c:b6:c0:97:3c:
56:20:86:ea:24:cb:ff:b7:43:ed:16:a9:d2:15:52:
d5:65:85:23:9b:b4:bd:9b:22:c2:ea:59:b4:8e:e6:
4c:93:a1:d8:2b:63:2d:5b:42:72:c7:82:8b:35:99:
d4:b1:0c:ca:14:19:a6:b0:97:32:4a:22:8a:43:bb:
05:f3:79:12:17:cf:3b:d2:96:9c:b1:31:ba:92:04:
5a:24:20:51:2e:4d:47:92:fa:27:38:cd:e3:be:d1:
61:97:5c:b1:6a:f3:b9:d1:80:18:88:5b:f3:e7:2e:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:E5:B6:CC:16:95:C6:DF:D1:EA:BF:57:F2:0D:76:97:7B:49:3A
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:36:f8:74:04:8e:21:0f:12:0b:2c:77:71:c6:1c:36:ea:
d0:05:90:a4:60:79:d6:58:cf:a0:65:11:30:5e:8d:c2:eb:76:
ba:f8:b1:95:9c:ed:43:46:8d:ad:8f:99:fa:34:cc:e1:5e:80:
ee:8d:8d:4f:7a:d3:93:c5:3d:f9:6e:48:81:7a:4f:05:cf:69:
95:b1:21:87:a1:11:79:10:b0:50:16:6b:5f:c8:05:9d:52:d7:
1a:f0:3d:88:17:66:b4:85:44:17:80:b9:86:d5:ca:99:fc:f8:
fe:e6:a7:ed:11:fe:1c:cf:09:4b:49:72:d6:6a:d1:ae:33:21:
32:fe:31:36:99:1f:07:ce:29:3e:80:d3:63:51:f9:16:a1:91:
2c:73:88:61:d7:ef:49:85:8d:4e:80:66:12:3a:21:38:ae:36:
4e:3a:3b:40:7d:17:9b:32:2c:f1:23:8d:c3:89:07:6e:a8:cd:
8f:f6:22:0b:bb:18:82:26:5a:7c:00:5f:a9:58:91:3e:cd:58:
93:e9:59:5c:06:b1:6c:cc:68:5a:16:54:9f:d5:cb:54:d9:c7:
3f:cd:b0:05:66:aa:42:62:34:d4:f9:79:3f:33:58:92:4e:43:
55:06:b3:4e:49:a5:8a:98:cf:14:28:ed:cd:7b:44:b9:8c:9b:
91:2f:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:49 2025 by rpki-client on console-fra.rpki-client.org