Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: Lj75Uc8I9+xu6+k9WR9+bWwjYm5aDimIRfS2TJ9KH04=
Subject key identifier: CA:9E:71:63:75:C0:F3:35:20:D2:18:24:81:16:2E:AA:0D:08:80:21
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0194BAF2137637966A29A8D9F41051E86767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:14 +0000
Manifest this update: Fri 31 Jan 2025 06:00:14 +0000
Manifest next update: Sat 01 Feb 2025 06:00:14 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: 0pfK5ai9VKfr83GEBjhuIi4moooSIertA45L+aFMNIc=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:13:76:37:96:6a:29:a8:d9:f4:10:51:e8:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jan 31 06:00:14 2025 GMT
Not After : Feb 1 06:00:14 2025 GMT
Subject: CN=ca9e716375c0f33520d2182481162eaa0d088021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:9c:6e:ad:08:cd:20:d6:92:3e:66:5f:9e:
ba:75:4d:0d:46:43:36:ee:bb:0a:7a:ef:13:86:ac:
7b:34:59:6a:b1:4c:5b:c8:a4:9c:63:b7:93:4d:b3:
8d:67:ad:7e:b5:a7:c9:2f:a3:ff:ff:19:60:e5:b7:
4a:27:16:36:a3:72:5a:1c:77:cd:ef:37:3f:6a:9c:
0d:60:11:3e:c1:53:c3:0f:52:97:1d:a2:00:25:db:
12:0d:81:48:fc:45:72:7c:eb:a5:b6:3a:57:b6:d5:
e6:2c:88:6f:e4:39:e1:e5:cf:7d:b7:c5:6f:45:4b:
f4:27:c8:15:60:9c:0d:c0:58:86:a2:df:6e:75:d0:
ea:26:b5:89:64:75:ec:dc:0e:1e:83:d3:a1:9e:fb:
80:d1:20:5f:39:c7:c5:01:6e:64:16:82:95:bc:91:
10:64:26:b7:f5:ee:23:03:c2:70:7c:d6:a6:be:82:
24:76:3c:56:a7:5a:7f:37:b4:56:ad:0d:2a:31:46:
24:2f:9a:aa:8c:32:87:aa:b6:0e:42:04:b0:94:aa:
f2:33:41:c0:b0:55:7e:87:50:c0:f7:b9:47:00:ce:
d6:17:ab:6c:74:e9:11:f7:b6:76:c9:73:8e:d2:97:
51:41:52:fc:73:08:73:95:37:64:40:da:01:fd:22:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:71:63:75:C0:F3:35:20:D2:18:24:81:16:2E:AA:0D:08:80:21
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:f3:fa:12:83:e3:ea:80:54:c0:a0:f6:0d:2c:a2:df:2e:
e7:b0:a2:b3:e4:7c:ff:e4:f9:88:fd:10:ce:ee:47:3c:c2:c9:
3f:86:3a:47:17:00:fa:e6:0f:5e:6b:55:37:2a:f7:52:e7:e6:
6e:ec:45:58:4a:37:fc:ac:e6:97:ed:7b:20:34:82:cb:e6:c8:
56:8b:83:fa:05:3a:9d:ff:7d:22:7e:58:bd:5c:c6:6a:94:e6:
99:6a:4e:94:fe:4c:7d:2c:0d:b5:04:10:a6:f3:93:07:b5:dc:
46:c6:dc:85:a7:66:91:b2:57:1c:0d:82:61:76:b0:53:80:f2:
78:25:90:68:a7:e3:a9:57:d4:bc:2c:12:49:cf:36:09:ff:5e:
da:85:33:bc:b8:ed:e3:e4:43:5a:7d:aa:91:af:52:49:9d:f0:
4a:03:26:85:db:ec:1c:17:d5:2f:35:5b:92:52:a2:4e:c5:91:
68:b9:2c:1d:c8:4e:94:46:12:cc:54:20:8d:fa:a0:2a:9d:a8:
30:ff:07:3c:0d:e5:20:6c:ac:7a:36:da:46:a3:b7:bd:09:fe:
41:86:0b:1a:f3:54:82:d6:e9:4e:62:ae:08:83:93:ce:c4:47:
27:0c:ad:96:77:b0:3a:f4:34:ff:7d:46:a3:c9:81:36:e1:f2:
45:05:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:34 2025 by rpki-client on console-fra.rpki-client.org