Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: P+K9w44YTOli8i2hJmdbfAmYbnHIzXTI/eeNZd/RkcE=
Subject key identifier: 8F:AB:76:35:C0:8E:B7:73:36:A4:C9:69:78:20:88:5E:AB:65:B1:93
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0194BA84705BC79859B7852B9980F25E6779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 09C3
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:29 +0000
Manifest next update: Sat 01 Feb 2025 04:00:29 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: K2m1t1Y/Bos+iHdfocDtUPMwtmteql8+YPTH2BZPm+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:70:5b:c7:98:59:b7:85:2b:99:80:f2:5e:67:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Jan 31 04:00:29 2025 GMT
Not After : Feb 1 04:00:29 2025 GMT
Subject: CN=8fab7635c08eb77336a4c9697820885eab65b193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:b7:8a:87:61:8b:d2:2e:b1:92:64:90:89:
92:41:f6:c5:b7:2e:e6:8d:a7:ee:c3:f1:b5:21:6a:
c1:72:31:88:6c:f3:cf:b3:25:da:cf:6f:d9:20:81:
4e:22:90:7c:72:0f:01:da:58:b0:fb:3f:4b:72:23:
d8:95:e9:dc:a1:ed:5b:ab:61:6b:98:22:4a:15:f8:
94:95:01:da:59:e7:ec:69:dd:31:d8:ed:25:f8:63:
8d:76:1d:95:25:92:dd:de:90:cb:40:6e:e8:1d:95:
c7:2b:64:04:06:77:fb:b8:a9:c1:d6:2a:06:53:45:
05:53:68:71:3c:58:7c:4f:e4:d6:af:11:5d:53:ef:
b5:54:3d:f7:64:e4:ad:c5:70:07:d6:49:94:ac:fc:
c8:ed:78:f3:2e:64:67:57:ef:cf:e1:03:e6:ea:5d:
68:45:fc:5f:5e:b0:13:57:4a:31:7e:31:96:c6:8d:
fc:64:66:b9:1f:c8:d1:49:2e:e5:e8:1a:dd:ba:90:
a1:14:74:be:2f:74:ce:14:67:ec:91:02:1f:7f:d9:
68:a4:fa:50:bf:9d:e7:16:e3:cd:0d:0a:0c:96:18:
9f:c2:5d:cb:07:82:71:a3:a6:06:ba:df:0a:14:ff:
c6:83:93:43:8d:6b:90:e1:26:d3:d5:e2:70:06:17:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:76:35:C0:8E:B7:73:36:A4:C9:69:78:20:88:5E:AB:65:B1:93
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:58:c2:d6:11:db:df:5a:b6:d0:d5:62:63:a5:3f:81:a7:
af:c5:c9:06:5b:f4:6a:34:bb:91:11:7b:bf:42:63:54:3d:b1:
f9:00:16:b8:a7:5e:58:06:df:0d:a1:b3:e2:62:11:2e:65:16:
69:e0:0e:c9:95:d5:eb:c3:73:0b:d8:db:78:dc:26:11:47:a3:
cc:7f:c4:a6:c6:a7:ec:24:d3:0b:dd:24:b7:c2:f4:52:c2:0a:
44:07:c9:c9:e9:19:4d:05:7e:77:54:9f:56:12:81:1a:45:df:
76:b1:9e:b5:ad:d4:81:41:ac:25:7e:c5:7c:e7:ec:8d:31:a0:
2b:43:26:e1:0c:8a:18:b8:14:de:d2:3f:85:3c:63:59:c8:b1:
6d:71:9b:3d:0d:df:a8:16:95:fa:59:0e:19:6d:0b:cf:22:20:
10:ea:f2:e9:e3:75:4d:e1:d3:11:e6:20:42:55:7d:5d:77:bc:
94:65:f4:ce:03:ec:f9:12:7d:a4:61:58:38:a7:b1:f6:3d:77:
57:87:3b:e8:27:ae:ba:43:6e:bf:e9:dd:48:12:0a:e3:e9:8c:
7b:a9:57:9b:13:81:15:4e:ab:0a:51:32:39:92:5a:fa:ce:9e:
ba:6b:00:0a:a0:48:72:47:9f:8e:ac:82:17:76:14:84:e8:00:
d3:2e:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:18 2025 by rpki-client on console-fra.rpki-client.org