Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: 3vBbQ1enktAnPUjONCcNbOSqKKx1fvcFOv/ksnU00Bs=
Subject key identifier: A0:4C:D8:EB:74:0A:BA:DE:E4:78:DD:76:49:16:26:B8:38:40:A2:46
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0194BABB635D6356FF2A5A8AD8EC254B5C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 05:00:30 +0000
Manifest this update: Fri 31 Jan 2025 05:00:30 +0000
Manifest next update: Sat 01 Feb 2025 05:00:30 +0000
Files and hashes: 1: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: XSoAo3i/fdbB9SmNrMj64+IWyfojjFo4WEIHV+kMN9c=)
2: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:63:5d:63:56:ff:2a:5a:8a:d8:ec:25:4b:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jan 31 05:00:30 2025 GMT
Not After : Feb 1 05:00:30 2025 GMT
Subject: CN=a04cd8eb740abadee478dd76491626b83840a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:28:31:37:4f:03:f7:bd:03:d6:a1:54:fd:
86:25:1a:c3:9c:7d:93:94:8d:26:27:98:a8:41:1e:
dd:cb:ec:d5:12:c5:00:ae:7b:6f:c7:3a:b7:02:e4:
d9:00:9a:18:e6:40:7c:5e:6e:f4:27:2f:f5:ff:a9:
9d:42:99:6f:aa:e6:24:86:10:1b:e3:72:1a:c4:7e:
ab:65:a5:79:cb:bf:a3:95:90:73:c4:2a:a7:79:b4:
b9:4b:42:41:12:2d:3d:1c:d5:9b:38:17:91:bf:4a:
1c:c5:bc:7c:0c:37:9b:6f:81:ce:71:af:3e:fd:38:
1b:a9:03:a1:36:b6:06:5f:cf:74:84:17:d5:85:6e:
32:4c:0f:94:0d:30:4c:cb:ac:53:16:cf:36:7b:7f:
2c:10:47:bf:7b:8a:c9:78:14:c6:49:8b:3e:09:39:
44:de:88:f8:3c:85:95:aa:72:f2:30:7f:9b:f2:a3:
78:b5:12:a5:6f:c3:f3:25:e2:42:ed:e4:22:ac:08:
d9:1c:53:3f:01:8a:c8:4d:d7:c4:00:e4:c0:43:ff:
97:c9:37:7d:19:5f:7d:f2:c1:d5:a9:ce:2f:03:2d:
7f:f6:bd:67:b7:5e:94:26:08:bb:07:63:7c:f5:05:
a6:3a:22:3a:4c:90:5f:3f:4d:b9:73:db:c5:45:f5:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:D8:EB:74:0A:BA:DE:E4:78:DD:76:49:16:26:B8:38:40:A2:46
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c8:a7:db:7f:24:b8:c4:60:6e:33:5d:7b:6f:bb:30:dc:e3:
c8:6a:34:2c:6f:70:9f:32:27:4e:36:e0:fb:5d:e2:0d:f9:37:
e4:fc:0c:5f:32:25:b6:6c:18:21:c5:66:36:03:66:d0:5d:2a:
d3:a0:2e:8c:5a:a5:68:53:f8:90:38:bf:12:e2:ca:b2:2d:02:
cd:ac:a2:e0:b9:13:16:28:02:72:2c:08:01:32:0a:f5:2f:2b:
aa:e5:62:cb:23:62:68:25:ef:60:ef:ea:6f:52:fe:57:06:e1:
d9:37:d5:1d:2d:bb:2d:39:e4:4a:65:39:48:4c:93:01:c7:13:
70:12:6d:ef:b3:ea:db:cd:2f:5c:ca:48:6a:32:d8:d1:6c:c7:
13:dc:e3:bc:12:fc:af:f9:89:38:3c:0a:ec:af:8f:41:73:61:
a8:6c:c3:7d:66:44:cd:5d:31:25:ed:8f:cc:19:c1:75:7e:ba:
19:b3:d6:e6:4d:a3:73:1a:72:c1:0d:57:40:11:62:f0:09:4c:
e7:2f:c5:d1:c1:f2:47:cf:83:28:ec:da:bf:76:fd:ba:83:77:
a1:22:d7:f7:a6:84:93:da:c7:6a:91:65:a0:5a:e4:48:c7:55:
eb:95:f0:8d:7c:5e:22:7e:99:0a:e9:bd:68:8d:da:a5:87:69:
a3:d8:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:00 2025 by rpki-client on console-fra.rpki-client.org