Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: osKkyrv7wkPnh3JY81VoIn+WdDd9RVulF23rg7AeOE0=
Subject key identifier: 10:F4:E0:4D:24:04:BB:4E:77:68:59:FE:52:91:FD:9D:F8:BE:F0:60
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 0194BB60062D306E4B58CCD7721A8DE44ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0A3A
Signing time: Fri 31 Jan 2025 08:00:19 +0000
Manifest this update: Fri 31 Jan 2025 08:00:19 +0000
Manifest next update: Sat 01 Feb 2025 08:00:19 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: 8ht2ZEV2Rpn9LFbEQSZMyCfnaJpwQ7h3cSUodmb6kDc=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:06:2d:30:6e:4b:58:cc:d7:72:1a:8d:e4:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jan 31 08:00:19 2025 GMT
Not After : Feb 1 08:00:19 2025 GMT
Subject: CN=10f4e04d2404bb4e776859fe5291fd9df8bef060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:4c:cb:0a:52:82:17:90:74:71:34:be:44:
99:3c:57:b8:cc:39:30:92:1d:be:fe:c6:30:4b:06:
18:08:66:ba:9d:bc:15:35:56:95:2b:1e:19:ec:b4:
3d:93:5c:68:10:3f:9f:b5:29:52:5f:4f:7a:39:02:
ee:3e:e6:24:c3:ab:bb:1e:82:91:69:49:c1:ef:18:
26:47:4e:10:1c:7b:87:46:2a:4c:e8:29:1f:ee:2c:
73:dc:b8:15:04:62:fe:e9:d8:f4:12:75:a5:59:00:
e5:9a:24:ec:c2:c9:1f:e8:c2:91:d8:4c:7a:65:31:
55:27:02:85:ba:86:e4:8d:8d:7b:b1:7c:5a:d9:6e:
fc:72:6b:ce:80:d0:d4:5f:47:58:00:72:44:d4:0d:
94:a6:99:ff:6c:30:12:8e:35:2c:22:fc:2b:d3:bb:
6c:c8:ca:f3:ca:be:ae:6a:1b:ac:60:bd:05:32:da:
0a:59:d6:88:86:31:52:68:b7:0a:a2:c2:d6:7e:f9:
69:a0:ec:a9:7c:e3:cd:e9:58:f5:e7:f7:4d:e1:72:
bf:64:8a:62:cf:ad:1a:5d:f8:6a:8e:4d:58:a6:d0:
6a:be:98:be:2d:ec:b8:51:6f:94:ad:a1:38:5a:02:
17:b8:91:eb:b6:4c:84:56:0b:73:0e:17:b8:e6:62:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:E0:4D:24:04:BB:4E:77:68:59:FE:52:91:FD:9D:F8:BE:F0:60
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:c5:4d:af:17:cc:d9:94:17:34:8a:bd:a0:71:e6:d6:11:
96:1f:e6:cf:c1:ca:e0:77:ef:7a:68:c5:80:46:11:3a:fe:5b:
2a:53:15:4d:31:68:6e:a5:2f:7a:d5:fa:1a:10:4f:28:09:9d:
2c:1c:3d:a2:1b:29:7b:c9:8e:2e:1a:93:c5:6e:5c:d9:c2:20:
08:26:25:0d:63:28:79:d4:19:7a:2b:b7:05:d9:da:6b:85:cb:
90:e2:a9:10:4c:33:0c:67:0f:a3:27:23:2e:05:b1:47:0e:30:
af:62:fa:39:c7:9b:1c:0d:22:53:c3:f9:ba:d6:60:3a:57:43:
d2:b5:20:47:1b:e6:69:1e:40:c4:90:cb:41:1a:f1:a3:00:af:
c3:55:6e:f2:a5:e6:2f:76:e7:91:c8:05:ac:9e:fc:79:b2:51:
b4:43:a5:82:37:ad:8b:fb:b7:a8:fe:a6:4b:26:01:35:4b:a3:
d8:ff:77:26:55:1e:b3:57:77:43:a4:70:57:90:9e:ac:47:37:
92:f5:40:ea:02:93:13:24:2d:78:90:25:a0:bb:57:bf:07:01:
96:6b:90:e3:d8:31:c7:42:59:24:59:52:be:ab:6b:73:77:cc:
e4:7d:cd:7e:d2:31:fb:1b:24:08:f5:4a:31:64:be:9a:9b:c9:
89:0d:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:14 2025 by rpki-client on console-fra.rpki-client.org