Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: 8IbEzvVij8EPjfP4VRqjhwoxU+8NLc4My7mha60g5OU=
Subject key identifier: 38:4A:29:63:53:B4:C4:99:1E:51:5F:44:93:3A:FC:89:8D:CF:FE:32
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0194BA84B9732681519853E81F8A458199A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:47 +0000
Manifest this update: Fri 31 Jan 2025 04:00:47 +0000
Manifest next update: Sat 01 Feb 2025 04:00:47 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: 9vokfbCbELQGtJ49OfsesoEyr6gjg7WD/P4sj79DPmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b9:73:26:81:51:98:53:e8:1f:8a:45:81:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jan 31 04:00:47 2025 GMT
Not After : Feb 1 04:00:47 2025 GMT
Subject: CN=384a296353b4c4991e515f44933afc898dcffe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:8e:0a:30:2e:08:8e:ec:80:3e:92:37:1f:
b9:6d:92:80:3b:21:a7:bc:59:2f:c5:7b:2c:89:1a:
ff:af:e3:7c:93:fc:9c:37:61:fe:fc:cd:df:63:a2:
a0:ce:5d:81:6f:87:80:c6:0c:d9:b7:f0:f9:92:1b:
92:a5:01:5f:bb:4e:e2:ec:36:47:9f:02:ba:f6:a9:
83:46:4b:7b:ef:55:c6:d3:e5:60:fc:ff:a3:bb:b8:
02:f7:8f:66:df:3c:dc:94:39:79:7d:85:06:86:2a:
53:e9:f2:7a:f1:d8:06:19:75:b8:18:cf:3a:f7:f0:
4d:ec:e8:af:33:dd:b7:d1:91:dc:d9:50:0f:6a:26:
c7:94:63:e0:cc:36:f1:e6:f3:7f:c2:e3:76:e6:30:
2a:20:cd:f3:19:a4:36:ed:b7:f9:d8:95:0a:21:31:
4e:1c:9b:67:6f:f4:4f:57:d4:52:f7:5c:69:6f:be:
36:58:97:b5:49:d9:35:7e:cf:93:19:d0:a2:40:ca:
51:df:ba:da:30:e6:d2:62:bf:67:4c:19:a7:e5:11:
fe:f4:b4:b4:f7:0b:ee:38:a1:3e:db:ef:17:5c:9e:
ca:92:cf:dd:35:d3:fb:4d:45:1e:e8:92:63:92:96:
60:64:b9:0c:06:4c:c2:53:6c:73:63:8c:4b:21:e6:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:29:63:53:B4:C4:99:1E:51:5F:44:93:3A:FC:89:8D:CF:FE:32
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:76:cf:d5:01:c1:0b:6e:08:92:43:9e:d2:b5:5f:a7:55:d9:
f9:94:d3:0f:85:d1:e1:ca:95:b7:b1:38:39:80:bd:3a:1e:81:
56:5a:f1:f6:e3:04:75:46:15:b1:9b:3c:33:66:14:e2:58:84:
68:51:07:8f:61:5e:ed:4d:b6:1c:72:83:92:61:a4:e4:0f:11:
dd:ae:91:95:7d:57:a1:32:6c:50:1b:bc:99:51:30:c5:0f:1a:
7a:3f:ff:f5:81:61:16:47:75:cc:ee:dd:5f:a9:5e:1c:18:a2:
b0:35:7f:ab:96:9a:e6:33:3d:fd:35:f7:d0:d7:ec:9f:60:0d:
b6:a5:8f:bc:f5:d0:73:6b:f4:9c:07:e3:76:08:e5:8d:16:e1:
9b:78:ae:aa:a9:de:bb:19:19:1f:33:2b:29:c8:5f:27:b6:01:
b3:32:b7:b2:b9:c6:36:b8:00:3e:f7:42:a7:24:80:12:e9:33:
66:14:68:76:ce:4e:98:ce:bb:b8:0c:8c:ef:5a:0b:ca:64:5f:
17:17:78:13:a4:f4:ab:24:ad:0c:b0:d5:60:95:6a:67:7b:9d:
7d:e6:81:f9:ba:c6:f4:9b:98:45:37:60:2f:c9:76:f9:b7:b5:
91:4a:3a:d6:9a:70:e9:04:dd:d5:e6:d8:20:41:af:b1:8e:60:
eb:fe:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:50 2025 by rpki-client on console-fra.rpki-client.org