Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: SGUaabZL6DeFLbhNXLi+gzgE3bwYWMozZt+GUO6AYp8=
Subject key identifier: C0:3B:65:AF:94:ED:AD:0F:28:CF:34:7E:2B:E3:25:49:C8:15:C8:12
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0194BAF26D1157E1F396D0C0A8B9787DA506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:37 +0000
Manifest this update: Fri 31 Jan 2025 06:00:37 +0000
Manifest next update: Sat 01 Feb 2025 06:00:37 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: PVz5OQ1+QVItc40vDuBGR7HCtzJblfYIxh4WCfT5IP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6d:11:57:e1:f3:96:d0:c0:a8:b9:78:7d:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Jan 31 06:00:37 2025 GMT
Not After : Feb 1 06:00:37 2025 GMT
Subject: CN=c03b65af94edad0f28cf347e2be32549c815c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:07:f4:85:01:25:be:2d:40:1d:58:82:13:64:
51:1c:16:c1:ec:cf:7d:33:0d:f3:12:78:32:64:16:
ed:1a:72:69:22:72:c5:99:18:d6:0e:23:47:f2:8c:
7d:9b:5b:cc:7e:28:ca:fb:c6:08:28:df:d8:5c:07:
8d:17:bd:f7:e2:02:9a:cd:9b:b1:54:c2:78:af:32:
c2:a1:52:c6:fb:4f:0e:55:55:7c:a3:b3:d0:c8:9c:
e4:69:4a:92:94:5b:fd:21:4d:b6:7b:c1:ed:63:e3:
e7:72:01:f2:3f:13:1d:65:9a:28:68:a1:c5:d8:9b:
00:87:e0:48:44:6b:57:c5:4a:d3:e5:b1:c2:2a:39:
42:e8:a0:ab:df:48:92:8b:1d:5f:e6:e9:c4:8b:52:
29:1e:a1:11:7d:34:15:26:7e:c2:2f:0a:fb:79:28:
17:03:3f:3a:36:e0:82:8f:4b:a4:5e:c3:58:9d:20:
48:6a:bd:9a:36:8b:36:f3:a1:09:2c:6e:54:15:57:
d5:07:32:0b:7b:2a:e3:e9:75:33:08:0b:82:d5:9b:
a5:08:4a:02:1d:8a:20:f5:f7:86:73:2e:db:02:d7:
5f:b7:12:0b:aa:a1:66:f5:54:c5:29:13:b1:49:07:
9c:6e:3f:36:c9:8b:fc:4e:08:23:a8:6b:0c:7d:c3:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:65:AF:94:ED:AD:0F:28:CF:34:7E:2B:E3:25:49:C8:15:C8:12
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:15:ad:0a:7a:06:9a:36:8e:ac:a7:a9:05:d6:e2:3b:fd:e7:
4b:e4:76:4b:1f:67:f8:8d:af:c0:61:ce:ff:11:21:49:f7:b9:
ef:55:f6:e6:27:e1:11:b9:72:cf:4b:10:97:e1:94:1a:3a:71:
6b:a9:27:48:b1:e5:4a:a8:0e:38:41:de:09:a3:89:fb:00:86:
6b:32:e5:14:06:4b:24:3a:39:b1:b5:96:da:f6:60:8b:c5:99:
2e:a3:18:45:bf:16:d7:21:da:ed:4d:71:a6:23:26:89:3e:e7:
d5:a8:b2:33:16:4f:ba:8b:e0:94:7b:4e:28:9a:5f:83:22:22:
b1:63:87:57:11:30:7a:07:30:60:9f:c9:fd:25:8d:4a:30:92:
95:0a:09:47:da:c7:72:dd:ae:13:c2:dd:44:e4:bf:77:09:2e:
e6:a3:49:d6:c5:73:3e:7d:84:b3:95:82:29:6b:ee:38:6b:ac:
c1:f1:b6:f9:8b:c8:57:5c:44:2c:29:5a:27:49:f2:dc:55:6a:
6c:ed:37:1a:0f:31:82:f3:02:ab:b5:d4:54:71:c5:28:3b:49:
44:ac:91:bc:9c:27:2c:e6:58:75:e8:18:6f:cf:06:a1:ec:98:
13:23:43:b9:a5:c6:b1:50:bf:47:2b:b8:8c:35:94:b9:f7:4e:
97:cf:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:47 2025 by rpki-client on console-fra.rpki-client.org