Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: o3iXm3dRLvNmpeVNTJCLW/ivxLHC/CnLQoGq9YjKk6M=
Subject key identifier: A1:81:A8:B1:92:69:8E:56:5E:27:34:81:52:CF:5E:00:3C:93:19:C6
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0194BA845FD3B5B03B2AE4A47F7B86D1629B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 04:00:24 +0000
Manifest this update: Fri 31 Jan 2025 04:00:24 +0000
Manifest next update: Sat 01 Feb 2025 04:00:24 +0000
Files and hashes: 1: 8KvlfbRq8s2GAiIRzqG7Rk422Gs.roa (hash: dNyvw6BImK/4I7a0t4iqRMr5gilh+0d+uv1VajB8u9E=)
2: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: wz91rzQ18ymWhrXerG7QE9lGRDzTXH7S4XmfmESY0o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5f:d3:b5:b0:3b:2a:e4:a4:7f:7b:86:d1:62:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Jan 31 04:00:24 2025 GMT
Not After : Feb 1 04:00:24 2025 GMT
Subject: CN=a181a8b192698e565e27348152cf5e003c9319c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:5d:2e:b1:28:ea:b1:4c:a8:ea:77:53:f4:
4d:94:77:86:ce:da:43:bd:a4:b7:a3:29:09:47:a7:
0c:7a:05:fe:8b:27:26:be:a3:f1:2a:c3:35:67:24:
95:21:1a:d8:c6:98:71:cc:1c:59:8b:92:5a:8c:f1:
45:69:a9:04:36:c8:ac:10:b0:da:63:50:d4:40:ea:
f2:27:d1:32:e6:8e:f1:0c:e1:50:70:a2:ee:d5:36:
fb:36:a7:15:71:6b:7d:a6:62:f6:af:88:2f:c8:19:
eb:37:bf:5e:9e:17:c1:1d:91:f6:4e:fb:9e:59:3e:
7a:a1:e6:82:7f:12:c8:8e:a9:46:32:61:00:25:c9:
4a:ed:dd:80:80:f6:3f:a0:82:1a:33:03:b0:6f:95:
62:0d:26:d5:7a:dc:bb:cd:0d:e6:b2:a4:bd:6b:7d:
ab:28:fb:74:4c:a4:c5:24:7d:c2:b8:19:70:4d:14:
d8:41:a6:1e:76:63:b5:10:6e:e7:e3:da:d2:7e:9c:
09:cb:ea:a5:5e:8e:32:61:5d:34:c2:d1:79:0e:1e:
87:2b:f2:7f:61:96:0d:72:c3:af:ec:eb:25:71:0c:
b0:bc:8a:d9:d9:c6:35:8e:b2:cf:99:0e:b3:ab:ac:
b8:1a:b7:21:d9:d0:51:82:fa:7a:7d:d3:ef:35:c2:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:A8:B1:92:69:8E:56:5E:27:34:81:52:CF:5E:00:3C:93:19:C6
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:87:07:a1:50:da:ec:78:b3:63:4b:85:1e:09:81:f5:80:
ac:fd:d2:1e:c4:3b:60:f6:0f:a7:3b:31:c4:07:72:ac:f9:e2:
da:6c:27:f0:98:82:f4:ac:86:27:13:8d:78:33:a2:32:1a:4e:
5b:c3:e0:64:51:9a:5a:5e:8f:83:02:c1:ed:34:09:2d:c7:71:
dd:90:c5:6a:ea:11:e4:57:d2:3b:07:ee:7d:43:6b:c9:b2:9f:
9f:83:21:84:7c:0f:36:88:f2:85:60:d1:61:9b:9a:ca:42:88:
92:4e:d6:9e:03:3f:71:cb:54:1d:ed:b0:47:6f:26:d2:21:e3:
39:3a:65:dd:8f:76:55:78:f6:38:df:eb:59:75:15:6f:26:ed:
b2:60:95:27:6a:71:af:10:61:2e:bb:37:d8:01:fd:48:e1:0f:
fc:10:6e:33:11:63:60:d2:7a:00:d7:26:e8:0d:b0:97:a2:32:
e5:53:11:04:2f:d4:bb:42:9d:1a:b2:79:f0:80:3e:96:93:9f:
b5:f9:18:65:65:e2:35:6e:35:2f:bd:c9:07:7c:d3:4f:a8:8e:
56:55:28:f1:91:3c:00:9c:62:2d:0e:3f:d2:30:0a:39:a0:fe:
0d:fe:e1:3b:67:91:aa:ee:ae:42:f0:5e:9c:b8:c6:16:c4:92:
e8:91:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:22 2025 by rpki-client on console-fra.rpki-client.org