Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: pSe5GeW3hK3k6WtyOZMT8HuV9+PmHLqKSFQhPQty1iM=
Subject key identifier: AA:38:7C:4D:65:1A:CE:96:EC:42:3C:4B:62:69:4A:DB:CC:7D:32:B7
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0194BA8449ECE5DEEE6D2DD318E32951301E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 04:00:19 +0000
Manifest this update: Fri 31 Jan 2025 04:00:19 +0000
Manifest next update: Sat 01 Feb 2025 04:00:19 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: 4knLBPbA5BRNLDyCw+hw3Z4rrjHf80zzx1Szsi2L91I=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:49:ec:e5:de:ee:6d:2d:d3:18:e3:29:51:30:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jan 31 04:00:19 2025 GMT
Not After : Feb 1 04:00:19 2025 GMT
Subject: CN=aa387c4d651ace96ec423c4b62694adbcc7d32b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:da:6b:25:72:53:56:0d:e3:20:26:ab:6e:
47:d4:76:42:d2:e7:76:b6:d4:3c:4f:9e:b8:e3:df:
a7:e3:0e:bf:26:fb:cb:7d:24:60:0e:e8:eb:88:69:
e4:76:50:64:4b:ba:ee:de:61:2c:b8:f7:99:24:ef:
c0:8d:dd:c2:73:cc:9f:30:ba:12:01:94:7d:8c:e9:
5f:68:f9:6b:dc:45:33:6f:24:5d:2d:f9:ce:c5:9e:
ce:e6:a9:1d:ec:f5:a0:f7:c1:f3:f5:17:0f:ad:77:
c0:de:e4:1a:4d:3a:59:81:83:b2:56:e6:5f:e7:64:
0e:8c:2a:82:16:ba:42:26:f7:06:b3:ae:80:39:26:
f8:6f:79:8e:51:cd:59:2d:33:c0:fa:fc:7f:39:12:
bf:2e:f9:3d:21:e2:01:17:3a:f8:8c:d5:e3:57:6f:
02:f8:e0:ba:c5:84:83:1c:77:60:31:03:9e:27:23:
0e:18:2d:47:ac:1c:08:c2:46:4a:54:6a:95:eb:84:
b2:7d:61:43:69:5b:2b:05:74:94:9e:d8:13:58:57:
27:59:c4:6f:f7:54:a0:b8:40:68:b3:6a:fd:97:4e:
ca:1d:65:c7:26:ed:57:a7:dd:79:ae:4f:15:41:03:
29:16:8f:75:c4:e4:06:6a:35:26:03:ea:9c:fa:97:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:7C:4D:65:1A:CE:96:EC:42:3C:4B:62:69:4A:DB:CC:7D:32:B7
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9b:69:fc:6e:58:33:5e:bd:ea:11:35:6d:37:25:ff:a9:3e:
7c:01:a9:2e:58:fd:ec:9f:90:d4:e9:7f:90:7e:4d:df:6a:f0:
fb:65:62:95:63:71:14:d5:77:99:90:1a:cf:49:4e:05:a3:5d:
0e:af:92:68:3d:bd:9a:ab:0f:1e:28:62:67:10:87:4e:f1:24:
0d:65:5a:76:d6:1b:29:75:d3:6c:2d:c1:ab:3e:6f:6b:e0:a8:
a1:ec:ec:69:88:6b:27:78:46:69:00:0a:2a:86:0d:13:1f:b4:
78:4e:49:db:2d:10:b3:55:30:26:6a:12:3f:19:06:27:0f:07:
5e:64:82:7d:1c:2c:fc:d8:1a:97:18:48:e0:6d:51:27:3a:29:
2d:f7:21:43:4f:ad:da:72:a4:20:7a:58:f6:c0:4f:64:64:7c:
dc:8d:f5:1b:06:a9:23:44:57:60:2e:6b:d5:88:89:df:f9:b4:
94:d6:de:1f:f5:18:c7:a0:82:9f:a6:d9:4d:d2:c9:2e:ae:61:
4c:1d:65:9b:f6:3c:f4:8e:e9:86:01:f9:e6:2a:51:29:e1:15:
54:5c:23:37:08:3e:fd:2b:73:a5:f9:dd:97:fd:6e:d7:7c:cb:
7e:04:e9:d8:f6:32:16:55:6f:99:09:c3:46:65:0b:fb:46:7d:
77:02:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:05 2025 by rpki-client on console-fra.rpki-client.org