Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: LoKsETWTHwuafWbUqVLKZAcdrmHWMbYUfq+nugyCvT0=
Subject key identifier: FD:FB:8F:EC:7C:BB:AE:F0:44:97:38:57:0F:14:75:01:52:CD:03:5C
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0194BABB4FDCC66A1E4452953C6984EAA4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:25 +0000
Manifest this update: Fri 31 Jan 2025 05:00:25 +0000
Manifest next update: Sat 01 Feb 2025 05:00:25 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: f86Kl312zn7YLMabmhX92DB7AlKpVwr+1DQ3D2c4Vw0=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4f:dc:c6:6a:1e:44:52:95:3c:69:84:ea:a4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Jan 31 05:00:25 2025 GMT
Not After : Feb 1 05:00:25 2025 GMT
Subject: CN=fdfb8fec7cbbaef0449738570f14750152cd035c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:8d:f5:b3:30:87:1c:f9:d6:bb:65:b9:0b:
17:bc:01:79:6c:cf:a5:45:d8:86:73:f1:c8:a7:1c:
a8:8d:e2:37:93:3c:d8:ea:00:b5:39:07:98:ed:71:
fd:33:e6:24:69:58:35:69:8e:8f:02:37:c4:1e:87:
67:62:13:68:79:0f:92:39:4f:95:95:72:21:f7:21:
9f:46:9d:bd:ac:ca:ea:2e:59:53:b9:52:16:cd:b0:
3a:23:08:ad:0d:dc:df:47:27:a6:67:e9:1a:dc:60:
b9:e8:c4:3e:a2:60:ea:9f:92:0f:ae:0d:e0:d4:62:
b5:5b:28:dd:cf:5a:d8:49:ca:24:39:73:82:38:cf:
5f:d3:38:22:b0:f2:e2:f0:53:52:b9:b3:ec:d6:4a:
f1:e2:62:82:e4:83:ce:9e:17:ae:95:fe:59:16:4d:
fa:45:36:47:05:68:27:64:4c:77:70:33:a7:b5:f0:
a3:55:8d:d8:76:6e:a2:9e:9b:b4:a8:d3:78:7b:b1:
27:0c:23:9e:f8:21:c4:1f:5f:59:a4:aa:3a:90:2f:
c7:04:3c:f6:16:21:5f:b8:5f:e5:34:86:cb:0f:72:
8d:6f:e9:cd:ad:5e:88:27:22:47:af:65:92:cb:2a:
35:7a:76:bf:34:a8:55:f4:4c:83:1a:c6:e6:30:3a:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:8F:EC:7C:BB:AE:F0:44:97:38:57:0F:14:75:01:52:CD:03:5C
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:38:da:04:67:c4:1b:44:86:d5:0f:f9:75:86:a8:db:0c:6f:
41:35:d2:d9:22:44:c8:f8:3c:a5:94:9d:e5:63:9c:e7:ad:43:
3d:64:53:66:db:e1:3c:bf:4b:8b:c7:ff:4f:e8:dc:83:84:b8:
13:29:67:3f:39:03:a2:ff:89:7f:b5:cd:9b:37:6b:07:a1:ac:
25:6b:4a:14:ca:c0:0c:fb:a5:a9:9f:e1:8f:8f:f5:a0:8c:66:
69:f1:c6:43:17:68:d2:e9:21:57:57:18:5c:f2:33:5c:77:58:
70:05:9e:c5:c0:70:dd:54:1d:94:61:f1:ca:e2:9a:25:40:05:
f6:15:f1:e4:c9:26:a8:cd:3e:4e:93:20:04:85:98:c1:a8:7f:
71:80:ac:bc:70:b2:00:55:e6:56:e4:43:60:a6:70:bc:ad:a6:
ce:33:f8:34:db:b5:b0:b9:ce:e2:05:1b:d9:fc:2c:0c:53:4c:
e8:01:a5:33:26:d2:b1:13:6c:83:0e:7a:e5:85:fd:35:0b:48:
43:c7:bd:6f:e7:01:a4:ee:68:9e:24:00:3d:45:3b:58:e2:3e:
31:ae:3d:2e:6b:4c:12:21:bb:63:04:dd:33:56:6f:be:67:c2:
2b:1a:aa:3e:01:b0:ae:26:ad:24:9c:4e:22:c6:fc:b4:b2:9a:
3a:8a:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:13 2025 by rpki-client on console-fra.rpki-client.org