Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: iz05jIuXmewRHJUm7lRBTktbQ3ssOWt9HdXwkuPAq/o=
Subject key identifier: 64:60:C5:21:6F:AA:23:A6:14:06:2E:F2:11:5E:44:19:3E:C3:5B:AE
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 0194BB9750CF39210F8F596C06EE80A986B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 0E82
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: RQVNATRlGveohjplf6zsEOx6GPr0o1ZPoFXh0Wfq2/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:50:cf:39:21:0f:8f:59:6c:06:ee:80:a9:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=6460c5216faa23a614062ef2115e44193ec35bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:cb:16:5a:1f:54:3f:df:67:36:bf:7d:83:
c4:f3:71:5c:88:be:b3:11:34:4c:f6:63:3a:2d:e6:
11:6f:10:ba:f8:c4:a5:46:11:80:37:16:2a:09:e0:
c8:c2:c8:e9:b7:29:15:16:41:37:b4:c1:4c:4f:b4:
72:4a:78:8b:54:16:2c:9a:90:63:04:d7:af:89:61:
d9:b2:7a:13:24:e2:6e:fb:1e:16:dd:46:55:2a:1a:
41:57:36:36:4a:e4:e3:4f:c3:63:a4:ef:7d:ef:a5:
13:8e:bd:1c:a6:27:40:b8:aa:f0:68:8d:02:80:bb:
04:a3:4a:9f:ea:bf:f7:dc:f3:d3:52:db:1b:00:cb:
78:b6:ab:93:c6:3f:90:da:ea:61:2d:d7:f3:8f:3a:
a1:ce:8f:c3:6c:e8:f3:24:88:b5:74:9a:29:7d:bf:
cd:f0:4b:51:af:36:60:8e:40:5a:85:58:05:e6:c4:
30:66:50:98:66:0a:75:35:c7:42:0e:11:fa:29:2b:
3f:e4:1b:10:3c:ca:88:c0:ea:6c:83:2a:7d:8f:c5:
96:44:9d:ac:08:36:42:18:b8:a2:10:c5:53:b0:a2:
65:c3:76:c5:3b:1d:5f:79:d6:7e:fa:1a:c2:7b:ac:
00:cf:03:3f:41:b8:f7:fb:5f:95:a7:53:72:77:89:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:C5:21:6F:AA:23:A6:14:06:2E:F2:11:5E:44:19:3E:C3:5B:AE
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:84:d9:fc:fe:df:28:d0:4b:a0:dd:16:b9:26:9d:df:0e:
cf:9a:0e:6d:c8:a6:7c:d9:ac:b3:08:38:a9:04:89:72:0c:7c:
ef:d4:9b:a0:c9:78:fc:ec:03:c1:0b:d7:bd:8b:72:54:59:49:
a8:49:4c:fa:bd:5a:90:06:da:ba:b4:51:02:c6:f6:63:3f:ad:
ba:b4:ff:b4:a0:b3:bd:6a:52:00:3b:2b:a7:5f:d9:5f:39:2d:
5c:fc:83:9c:e7:83:73:11:d7:3c:c3:75:ab:3d:36:98:2e:15:
b4:f0:cd:80:cb:54:b1:c5:a5:cf:fc:40:f7:47:ea:b3:42:b3:
b0:41:77:86:b3:48:09:74:8d:34:bb:26:dd:5c:28:1e:a6:4d:
ec:b4:27:36:92:d6:4a:a2:d6:f1:ae:44:5f:02:cb:97:0a:08:
5c:fd:e5:51:15:ae:24:51:ac:68:f6:2c:31:9a:15:57:b3:32:
a7:fc:8d:54:e9:f8:c6:2d:5f:05:62:ad:33:74:83:37:84:68:
14:cc:91:46:cc:8c:9a:fb:e5:ef:c9:53:3b:58:9a:47:56:32:
c1:0b:ad:17:be:14:05:a5:0f:d6:01:82:4e:b5:cc:86:50:e2:
83:f4:63:06:40:0e:3c:cd:30:ff:5e:42:21:2e:ea:4d:ae:f9:
3f:56:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:41 2025 by rpki-client on console-fra.rpki-client.org