Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: kW+5kR8mKAO4pL/RVV4Szdcd1ypchOl+KJDJZXgwbhA=
Subject key identifier: E8:28:25:D7:50:19:C8:7E:B8:8A:74:A4:68:6E:14:D4:B6:45:10:A8
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 0194BB96D2A4B2B95E34B88958E81EA3F3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: /EL6ue8IHFYQx9qKss0TyyGaGG6tYBYsvUKxUp4md3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d2:a4:b2:b9:5e:34:b8:89:58:e8:1e:a3:f3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=e82825d75019c87eb88a74a4686e14d4b64510a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:c2:eb:37:2a:35:fe:70:89:1c:65:1a:86:
fd:18:e1:d8:70:36:26:82:52:bc:c8:af:fe:ac:ca:
e6:3d:46:38:48:de:56:6f:d4:eb:79:83:c9:dd:99:
10:a0:ed:d7:6a:eb:31:a5:eb:d4:b1:1a:8e:6b:6b:
b4:7e:ff:27:21:bf:16:fa:3a:16:cf:b4:d0:28:76:
d8:96:ec:1b:75:73:1e:c7:d2:8f:ea:37:c4:f7:c4:
b1:b0:53:c8:94:34:f8:77:d9:2b:56:e7:7d:80:7e:
ac:82:05:81:4d:3b:de:cd:b8:18:75:fa:5e:49:45:
62:cd:54:3f:31:4f:8d:d3:09:87:8f:3f:af:9e:22:
28:e6:5c:4f:ad:b5:f3:62:3c:c8:11:45:ae:12:53:
44:1c:cc:e7:86:0c:65:c5:70:cb:3f:e7:fd:cf:1c:
1e:d7:da:0b:cc:68:3b:bc:75:3f:8f:30:7a:45:5d:
0e:f8:a3:17:75:bb:4c:c8:27:44:c8:df:4b:62:02:
c0:04:00:2f:70:3a:77:a8:9c:69:48:d8:f6:93:46:
d9:71:04:45:ff:9f:bd:90:38:a4:a7:77:1c:bc:ac:
99:af:32:9e:58:8b:89:3a:49:6b:56:73:9e:e0:13:
6c:5c:07:13:25:b6:fd:b7:c2:19:64:60:44:9a:e2:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:25:D7:50:19:C8:7E:B8:8A:74:A4:68:6E:14:D4:B6:45:10:A8
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2e:c7:b5:1d:5a:27:64:eb:10:94:a4:b7:6f:85:6b:48:f0:
e8:19:bf:5f:bd:6d:ce:d7:c7:92:66:4e:22:e5:7d:4e:4c:0c:
71:53:c7:75:25:c7:cc:e3:7c:86:5b:dc:11:ed:ae:4e:30:ce:
aa:bd:64:43:8e:9a:26:69:40:48:51:d5:72:59:e8:38:54:c2:
95:84:42:21:c1:ab:a5:f9:2a:0f:9e:c8:e1:19:34:20:43:60:
3b:d8:0b:eb:98:f2:26:36:40:c7:70:3a:82:c0:ca:3d:8d:c7:
cc:10:08:07:b5:70:26:52:d8:3e:10:15:3d:04:ec:4f:f2:c8:
d4:1b:49:b0:80:4e:46:51:07:68:41:ff:0c:5e:46:dc:3b:4f:
ac:49:45:23:54:fc:dc:ed:2f:ed:1d:31:bb:66:17:ec:b6:ae:
a9:09:99:46:b0:16:43:a1:c9:2f:3b:bb:8a:4a:84:ae:9a:e8:
64:0d:3a:d7:75:5b:17:0f:0e:da:9e:9b:40:f6:01:00:6e:98:
1c:6b:d1:ea:ec:87:68:8d:5f:35:a9:de:90:77:53:22:3e:a7:
c9:28:14:f1:0b:f6:5b:1b:94:d5:4c:b8:13:3b:06:ff:ce:ea:
9d:7e:87:7e:e0:9a:10:d9:23:94:13:13:29:ce:54:99:cb:96:
e9:ee:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:09 2025 by rpki-client on console-fra.rpki-client.org