Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier: c2T57fpjWJT84XZD1uTicqfI4khemvWrP3k3oZwL1ac=
Subject key identifier: 42:73:68:65:B3:6E:0D:E4:72:77:FB:19:65:E0:C3:61:CC:3F:D4:9F
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 0194BB96E6205E9437A4199395EF4982F909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number: 025D
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: OO74fooppYpnp35PRo8dt/ZPx0sLhSYs/dr5MVKRCnw=)
2: L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa (hash: ZqeWwA6iMQz8wB7BBawsH9mt3/kwxAcY8eULL2GkA/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e6:20:5e:94:37:a4:19:93:95:ef:49:82:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=42736865b36e0de47277fb1965e0c361cc3fd49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:9a:d8:dc:4f:e1:ba:0f:b0:dc:b7:e8:e7:
01:9d:18:f3:d6:ba:75:5e:bf:c8:c0:fb:51:6f:85:
0c:ae:dc:a6:40:59:db:1c:6b:a1:d4:e2:7c:f8:4c:
7d:89:81:28:28:fa:dc:8a:a3:ea:8e:73:9c:d0:ea:
d6:5f:29:5b:98:f7:10:15:ed:81:95:f1:be:11:61:
44:89:51:4a:7b:de:6b:74:9d:ad:43:14:45:6d:09:
6b:fb:2f:92:8b:2d:d4:23:fd:c0:bd:78:f7:89:a8:
a8:93:8e:07:82:b9:cf:9f:f5:f4:ba:35:38:bd:8f:
72:16:ec:c1:bd:d4:13:e5:43:10:d6:db:85:ff:69:
dc:0b:82:32:b9:04:e7:ed:bb:f1:d1:08:d7:63:24:
b1:28:4a:ac:50:44:a8:2d:c9:5a:72:8c:d8:9f:97:
bf:81:e1:a2:2d:37:bb:8e:73:67:66:3f:7a:f2:3a:
03:f5:b4:d2:f6:fc:6a:36:3e:fa:77:49:67:a5:2d:
4d:e6:83:fe:7b:ed:b8:c2:b6:8f:3d:83:40:09:0a:
b7:ac:bf:b8:80:cf:d3:06:68:e8:3e:b9:17:82:43:
13:cd:41:70:2d:44:4a:28:b7:be:3a:aa:10:9f:a2:
49:e8:3e:9a:1a:ee:19:f4:6d:a4:8a:79:67:ab:cf:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:68:65:B3:6E:0D:E4:72:77:FB:19:65:E0:C3:61:CC:3F:D4:9F
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f4:fd:95:a8:3e:60:9c:5b:ee:51:da:c9:16:c3:5c:3b:45:
fa:56:1f:57:a7:c4:9d:80:85:c7:26:31:09:11:4c:e4:f0:0b:
b4:7d:04:3b:cf:09:07:84:40:1f:44:4e:95:00:f1:1a:af:40:
16:28:d1:22:83:1f:81:83:4c:66:81:52:04:de:12:83:ae:0e:
d9:23:dc:d0:76:8b:18:c0:1e:f0:4e:5c:b5:f1:c0:e3:3f:74:
57:0b:40:50:97:da:7e:43:e7:51:73:22:8d:be:54:b9:07:a8:
c5:82:4f:6c:b7:02:38:41:cf:a1:9a:d4:16:bb:9c:1a:aa:28:
43:72:44:95:39:6f:d5:88:73:eb:4f:bd:eb:c0:2c:59:9e:73:
1a:0e:09:57:9d:df:28:71:5a:26:15:9b:e3:ef:ad:ad:20:f2:
06:f1:d7:0b:96:85:fe:9d:65:6f:99:82:61:13:7b:63:e4:43:
ef:8d:b5:12:5a:4b:d7:59:a9:22:2d:72:39:59:8d:9a:11:9e:
50:d9:7f:4d:fc:62:a8:8c:00:18:c2:db:d0:40:34:94:ce:6c:
1d:94:1e:8c:6d:67:1d:d3:b4:7b:fb:10:fd:c7:da:8c:35:48:
bf:a7:c7:7f:7d:1a:cd:01:97:d8:72:06:e0:99:de:49:90:19:
9f:ab:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:48 2025 by rpki-client on console-fra.rpki-client.org