Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: TFXaosUtmU72AYbA69QPEW1R+Nx64sK3hz1L3WfmzJM=
Subject key identifier: 8A:62:2A:D2:2F:AE:DB:81:F2:01:F5:05:E5:60:B5:1A:E9:74:DD:46
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 0194BB298C4E10AB5EC75067191A06288FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:49 +0000
Manifest this update: Fri 31 Jan 2025 07:00:49 +0000
Manifest next update: Sat 01 Feb 2025 07:00:49 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: ZIg07hmy1dHox4VCD3FdcRkLSmRJllso7KGoCpGzOsU=)
2: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (hash: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:8c:4e:10:ab:5e:c7:50:67:19:1a:06:28:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Jan 31 07:00:49 2025 GMT
Not After : Feb 1 07:00:49 2025 GMT
Subject: CN=8a622ad22faedb81f201f505e560b51ae974dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:11:a9:1c:71:f4:56:22:c4:73:cd:06:64:
25:3d:1d:52:b0:b1:18:03:5b:6b:1e:8b:7f:4b:c1:
ce:11:65:33:56:ed:29:f1:af:b9:7d:11:97:89:48:
35:33:c5:ef:e6:31:9e:5f:f0:c1:ae:8c:51:de:90:
b5:29:0e:71:fe:0c:46:82:af:f8:bb:5e:20:8b:f7:
2a:72:8e:0a:5b:fd:ed:8c:48:d3:c1:f9:f4:63:fd:
22:ef:5e:e5:e9:b6:23:b3:31:8f:38:3e:0f:9a:2d:
24:7f:f0:47:ae:a3:05:e8:1a:54:fa:2b:19:c4:6e:
59:8d:c0:e5:a3:96:56:8d:32:a5:27:d2:c7:dd:37:
d4:e9:3e:da:7c:ad:a4:c7:cf:10:42:12:bd:e6:70:
af:f0:23:e8:e6:7b:e8:fc:38:c7:00:e0:a8:9d:6b:
5a:d2:24:1f:f1:c1:1f:ac:eb:5a:26:f1:02:58:b7:
5b:a8:d1:71:e9:18:e5:5d:3a:4f:49:bb:ed:6f:c3:
1c:9a:c6:e7:95:57:c7:b2:3f:b2:6b:d8:15:be:cd:
7e:ed:2f:df:4c:98:a1:88:bc:17:21:ec:df:de:9d:
74:61:f9:d7:f8:6a:bf:15:50:ac:66:d4:b7:c4:a8:
61:fb:90:e6:e7:d3:23:bb:c0:53:2d:5b:e4:0c:be:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:2A:D2:2F:AE:DB:81:F2:01:F5:05:E5:60:B5:1A:E9:74:DD:46
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:eb:a3:b5:9e:d0:6d:6d:6c:b0:e5:c0:95:f0:9d:a8:5c:e3:
31:52:6e:e8:e0:6e:52:aa:38:fd:dc:ca:fe:e5:4c:84:75:79:
59:6b:1a:67:b7:f8:cf:8e:da:67:a3:ce:8b:b6:f9:22:2c:d5:
01:b3:e7:7e:9c:4b:09:b3:f8:8c:fb:3f:38:6f:02:f4:aa:ac:
83:5a:80:fc:0a:08:5b:f9:06:0e:07:2c:db:e8:a0:f1:c8:2d:
1b:aa:5d:57:07:fa:40:a5:02:e2:d7:0e:ec:b0:d6:73:ad:19:
1e:f9:16:b2:b1:0f:22:25:dc:98:b8:cb:75:17:07:95:43:02:
b4:36:2d:a6:ee:ff:39:0f:ec:15:9a:78:b6:a7:9b:ce:08:75:
8d:b9:73:8a:c7:45:fd:b9:1c:52:b2:d9:29:a6:9f:18:17:31:
03:59:1c:7c:57:30:5e:4d:67:f0:30:28:e7:9d:c7:59:f2:f4:
3b:02:6e:ee:83:2d:d1:6b:45:50:4d:ca:1b:40:c1:36:60:ea:
a6:33:9e:f8:78:3f:14:c1:0f:9f:d4:84:be:30:bc:f0:e3:8a:
31:b4:df:1e:a3:2b:dc:e8:a4:e0:04:0c:3a:23:dd:01:eb:9f:
f1:9a:8d:a0:ff:f5:c0:e3:54:41:f2:7d:2e:39:d0:ba:33:3c:
c6:3d:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:03 2025 by rpki-client on console-fra.rpki-client.org