Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: pqjVNESRU9dB5WiaX3UTpmvmsYKOYKClATMX4ezalnU=
Subject key identifier: A9:3D:03:AA:65:AA:F9:4F:A4:51:FD:5A:F9:32:BF:4F:A2:A5:57:79
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0194BA84352BE3102A00651CF1F1E2906246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: 1xCDoin_l-PXV5xiYDlMclvenpw.roa (hash: aganIe3IICFmPVBAxFe5fWkBEv9iHKSkpJ9j78Dp3+A=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: mFE7JtJkQrIzNPP60OLRviewqdANGBTBjaRDaInF+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:35:2b:e3:10:2a:00:65:1c:f1:f1:e2:90:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=a93d03aa65aaf94fa451fd5af932bf4fa2a55779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:a7:80:ac:8c:33:9d:c7:15:fa:64:8f:20:
7f:37:ab:f6:a1:6c:a2:a9:0f:dc:fb:6b:2e:2f:f3:
94:43:af:b2:6d:06:e9:05:d1:c0:3a:16:b9:c4:62:
08:17:79:88:fa:cf:93:19:5d:32:47:32:6c:14:f1:
2d:6c:4e:8c:a4:12:d4:78:43:63:4f:b5:0c:0a:2e:
22:49:c1:d6:54:24:55:1e:09:df:4a:cd:da:be:d2:
24:a8:ef:26:93:74:4f:45:69:a1:e5:ff:fd:67:37:
fe:a4:f0:cb:16:fc:e5:9a:b7:27:19:8d:76:c9:94:
1b:f7:f3:6e:70:a3:7b:f6:3c:06:db:6d:7d:57:e2:
86:52:5d:f0:16:82:08:3e:28:16:77:a3:67:1e:c1:
dc:6d:9e:15:f4:42:3f:9d:b3:c7:57:e3:3f:57:d5:
61:11:49:c2:b5:94:48:b7:6a:18:83:27:76:a6:50:
e7:c8:f7:81:9a:8b:19:f6:32:a9:0f:97:1f:13:b4:
4a:fa:b4:a0:36:65:40:70:34:d6:a2:71:2d:ac:fd:
40:f2:b9:5c:79:d6:80:22:5b:1a:b4:85:a6:10:29:
5c:02:df:36:db:d5:5b:5a:d0:07:e1:6c:2c:c9:18:
12:e4:db:85:ee:b0:bd:70:f6:3d:0e:e1:27:25:53:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:03:AA:65:AA:F9:4F:A4:51:FD:5A:F9:32:BF:4F:A2:A5:57:79
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:cf:3b:dc:c1:63:0f:d8:f6:6b:63:79:67:31:42:6c:80:
8d:93:c8:4a:ce:c4:97:41:42:e2:0b:42:e0:ea:49:b0:57:7a:
10:01:f2:eb:bb:80:b9:78:8b:ac:96:d4:93:e6:49:88:2d:f3:
32:97:05:fd:cd:87:bc:3f:a2:9e:11:d7:da:c8:59:83:e4:c9:
71:7a:2a:d8:60:aa:89:62:c5:ed:29:12:03:3a:d8:a0:63:0b:
57:0b:ac:78:8f:64:42:ce:39:89:fc:0c:08:78:d5:c1:4f:db:
32:de:15:24:fc:3d:97:1d:92:ee:c1:39:2c:bb:d7:5d:3e:3f:
d0:bc:cb:6a:f5:35:34:bb:60:95:55:3a:77:53:db:b5:66:4e:
36:19:64:c1:5a:3a:02:c0:89:b2:7e:ab:27:31:85:91:ef:15:
40:b6:a4:0e:3d:a9:d1:88:85:5b:ee:ab:83:e7:20:8a:af:93:
d1:7b:a1:05:7c:cf:bc:ca:dd:f4:69:65:f4:e7:d3:ba:41:ed:
75:3c:55:16:b4:66:fe:02:70:d8:2f:4a:67:c5:4b:f9:e2:b3:
e4:fd:5a:8a:17:71:dd:ef:0b:0a:32:9b:b2:51:1e:c3:64:f0:
40:16:be:b4:72:80:e8:9e:f1:61:06:ff:22:de:24:b3:38:4b:
90:ce:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:49 2025 by rpki-client on console-fra.rpki-client.org