Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: VqlJhDkL/jCb03SmpiiYa2gjhbVZuiSHROGdA3yA6S0=
Subject key identifier: 23:7C:59:96:38:94:60:87:E0:08:29:F9:31:09:3E:F6:67:EC:92:6C
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0194BABB6E6D24909040C8B3FFE3B533BB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 7D
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: nI5NCdmtStkGl8PmX4sZl4lJ0d0.roa (hash: cjYM2aQq4v8XueF1UgYd4H++DRsq/Hpr+SQGx9rrRlE=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: SW9lQKC/e2l6cRtz2c44iSe1rhWCtWAHlKdmhDv8rE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6e:6d:24:90:90:40:c8:b3:ff:e3:b5:33:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=237c599638946087e00829f931093ef667ec926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:15:a4:0e:38:f4:08:7d:ba:ce:62:ea:a4:
b8:c3:8d:5c:d7:db:0f:2a:6e:2d:73:a0:7c:94:a3:
c5:45:78:e2:76:7e:16:3b:75:5a:20:5e:d8:9a:dc:
ef:41:0f:b7:48:34:fe:ea:85:8c:55:e7:b4:62:f9:
0b:96:6f:ae:0b:fd:f1:49:65:82:2e:29:dc:6f:08:
e6:0f:75:7a:be:ba:57:4b:14:84:19:3d:c4:be:57:
fe:96:3e:9b:32:26:d2:e0:da:f8:85:5d:02:f4:9f:
3d:73:60:81:3a:2e:f5:09:52:ca:c2:31:04:60:4f:
55:f2:06:5d:dc:03:0b:15:14:ff:76:d5:7a:1f:c7:
99:d7:58:55:89:ed:8d:3f:f2:03:57:f2:ee:a5:5b:
d6:6b:c4:49:27:45:92:8b:af:f6:39:2a:e0:cf:1b:
7b:b4:0b:b0:78:0a:74:2d:ce:88:80:35:96:01:7b:
f6:6b:24:4d:5a:f8:1e:63:4d:c7:3d:de:e3:62:66:
a6:23:4f:bc:9e:61:ca:66:c2:ce:a7:e1:70:1a:81:
a7:ae:06:8e:4c:d3:bb:bb:78:e0:fb:8d:33:42:d0:
2f:7e:88:41:c9:29:84:f4:0b:b8:12:13:a2:64:85:
48:9c:bd:b1:a4:25:60:71:34:be:66:4e:ae:c7:63:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:59:96:38:94:60:87:E0:08:29:F9:31:09:3E:F6:67:EC:92:6C
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:fe:c6:90:0e:16:fa:2e:5f:58:0e:fe:88:21:bd:f2:e3:
72:f8:4d:73:0c:ae:cd:37:bc:b6:9b:f8:31:71:ed:23:12:e6:
f8:72:4f:0e:cf:d6:5f:2d:42:ac:56:5f:78:07:c8:23:d7:ff:
5e:91:8f:b8:42:d3:82:71:6a:b1:0a:1d:10:6e:e0:1c:9e:e8:
e0:1f:bf:99:7d:7e:41:71:f8:70:d8:32:ba:9f:68:ba:09:0b:
52:05:15:ae:b0:87:7f:b7:4e:b5:ee:c8:b1:05:57:ed:10:d2:
d2:39:de:39:80:dc:74:c1:9c:92:5f:14:f2:31:91:ca:bc:58:
b1:f7:3e:20:29:90:67:ca:0c:87:e7:f9:f3:71:06:62:df:bc:
2e:59:07:66:1a:68:a4:39:9d:ca:2a:6e:e0:c1:88:3b:38:55:
e9:ce:cf:4d:fa:e9:a0:42:c8:40:83:eb:3c:ad:f8:2c:15:75:
24:2b:fe:2e:ad:8c:3b:ec:1b:39:5d:d7:dc:76:95:57:c2:66:
10:cf:91:0d:7a:c7:e1:5e:f7:53:df:21:2f:19:ff:43:59:df:
e2:4f:2a:ad:1d:a8:ff:dd:59:b2:ca:9b:de:8b:dd:bc:5f:a5:
bf:18:b0:8d:2e:35:0a:2d:39:39:95:6e:69:08:bb:f1:ad:2a:
53:a3:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:49 2025 by rpki-client on console-fra.rpki-client.org