Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: drm2PgligstmrqpM8RO/hyA3GjGnBUBrq8xGaZFJLDg=
Subject key identifier: 02:F1:FD:CD:23:BF:53:29:5A:01:E2:73:F2:50:75:A0:4A:B9:79:83
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 0194BB97312677391E9D615EB520ABCF89DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 0F7D
Signing time: Fri 31 Jan 2025 09:00:35 +0000
Manifest this update: Fri 31 Jan 2025 09:00:35 +0000
Manifest next update: Sat 01 Feb 2025 09:00:35 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: T+CYX/FEA2O1iF/aOrCcQXt7Xpebp0+vbnYA211CK6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:31:26:77:39:1e:9d:61:5e:b5:20:ab:cf:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Jan 31 09:00:35 2025 GMT
Not After : Feb 1 09:00:35 2025 GMT
Subject: CN=02f1fdcd23bf53295a01e273f25075a04ab97983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:60:0e:dd:08:31:bb:35:83:69:da:b3:fb:
5a:a9:ee:04:1e:9d:03:58:d8:69:a5:a3:09:e5:61:
8e:24:5f:38:25:87:1e:0d:c4:72:5e:19:4e:d4:38:
41:1a:07:b7:dd:a6:b7:2c:97:e0:b4:e3:2a:20:7f:
dc:ff:6d:b0:30:e5:e7:40:f4:dd:6d:9d:93:e6:f4:
88:ff:ab:49:5e:9b:e3:a8:e9:7a:71:57:35:71:7b:
79:8d:c8:c8:36:b2:a3:59:b8:8b:bb:e9:8b:75:e2:
9e:b8:16:74:1d:0b:d9:d5:d2:39:28:ea:1c:96:17:
c0:8f:32:9d:16:c1:8c:6a:89:69:07:62:84:2a:33:
53:9f:77:91:47:6e:8a:4c:24:96:b5:c5:0a:3c:70:
ab:28:7f:a6:b1:fd:e6:70:2d:c2:e4:2c:b8:28:76:
a7:07:1d:3d:42:93:86:12:0e:75:a7:06:4e:f4:4c:
65:50:a5:41:97:de:7d:21:59:23:b1:d0:bb:a7:85:
17:48:e9:2a:88:65:1f:26:3c:09:c6:29:a2:1b:3c:
18:4d:50:3d:27:a8:3a:50:64:b9:93:e1:f8:83:3e:
15:dc:90:23:80:23:3b:a8:8f:60:92:fd:2a:7c:38:
f0:04:7f:29:f6:d6:93:33:af:7e:6e:a5:09:de:d0:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:FD:CD:23:BF:53:29:5A:01:E2:73:F2:50:75:A0:4A:B9:79:83
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:45:c6:07:64:19:96:b3:c8:01:17:32:3e:2a:17:b8:e0:
69:87:48:cb:84:b4:5f:6b:a7:bd:f5:f5:c4:18:8e:50:3f:d9:
6a:82:58:2b:6d:0d:57:51:38:4f:7e:3c:54:2b:e5:ff:d6:33:
4d:09:15:d9:63:94:22:01:cc:75:56:51:83:42:46:be:bb:4c:
86:32:1e:7a:0a:6b:30:00:58:ce:9f:a7:45:4b:66:66:37:c5:
6d:22:42:f3:fa:2e:82:82:8e:95:8e:ed:fc:3b:e1:bd:ac:ab:
0d:0f:74:66:68:f1:8d:a4:d9:41:21:de:a9:b7:fa:fe:02:b3:
d1:41:1b:df:60:24:e0:4e:b7:8b:c8:b8:d5:1c:29:8e:8e:2d:
77:0b:08:0d:83:82:09:27:5c:b8:4d:22:a6:bb:95:70:46:e0:
33:2f:52:1c:1a:a9:03:d2:15:5f:0f:87:ef:fa:66:36:66:f9:
89:c5:5f:96:a4:7c:5d:c8:d1:d0:fe:44:55:25:e6:e4:1a:c0:
00:cb:23:39:7b:ab:8e:74:a0:21:28:8f:a5:14:36:3c:39:cc:
ff:1c:cf:1b:2d:52:0c:91:80:29:6c:a4:1b:12:7f:73:d4:82:
ba:9c:31:20:df:ee:6f:28:80:17:71:c0:ea:ab:61:22:9f:19:
83:cd:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:19 2025 by rpki-client on console-fra.rpki-client.org