Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File: sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier: bwjrHD5VNPygWJMkoeSM+OHkGuez+qpO1TkN0S5Wbug=
Subject key identifier: 5D:4D:B0:EB:F4:3D:FE:A4:59:85:99:5E:FF:C1:EE:29:F2:86:88:27
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 0194BB604B76E8EAF1427C044195869A67B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number: 0920
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: w07SnHaGknUijeXVq/xUIqhXZJzZJx393gt6Fdnen5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4b:76:e8:ea:f1:42:7c:04:41:95:86:9a:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=5d4db0ebf43dfea45985995effc1ee29f2868827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:30:11:dd:2d:08:92:b9:ab:45:94:d2:d9:
bc:f8:b3:2b:1b:af:8f:c8:e2:45:fa:3e:ea:6f:4a:
ef:76:b2:44:61:e5:71:8f:de:a8:ad:58:d5:6d:a7:
5d:69:e5:db:c5:d4:a9:1c:0e:38:db:8b:f3:bf:9c:
91:c1:36:e4:10:b4:77:8a:6d:f9:a8:76:d5:c2:fd:
5b:39:fe:55:c2:21:91:15:25:78:d7:f9:3a:0d:8a:
db:22:bd:30:42:13:61:c9:36:59:4d:5a:3e:66:8f:
73:72:85:79:a8:f5:71:13:fd:ab:c9:59:99:46:2b:
76:bb:97:a5:91:dc:00:2e:46:22:a3:2a:8d:45:57:
a2:73:f7:e8:d6:0f:32:82:8f:e2:86:9c:11:28:c4:
e7:40:d5:43:ef:39:c8:37:1a:cb:70:7c:11:a5:bb:
e0:4a:37:18:4a:36:1c:21:4e:60:dd:9b:03:2b:91:
ef:f7:e3:69:41:05:89:36:8f:2d:3c:bd:2f:e4:a5:
2f:cb:ac:d3:8f:6d:79:a5:91:9f:65:2d:01:8a:ba:
e3:e3:9c:0f:ed:e2:d6:d3:60:a8:79:12:00:88:1e:
a1:8e:f3:7c:6a:db:43:e7:72:72:ac:44:e4:0d:90:
57:50:64:15:af:8e:ae:10:b0:92:6a:3e:b5:50:75:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:B0:EB:F4:3D:FE:A4:59:85:99:5E:FF:C1:EE:29:F2:86:88:27
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:32:3b:aa:a3:43:6e:83:06:66:ed:9c:5d:54:0e:15:c2:
23:d7:ab:6f:9b:03:25:5f:51:c6:8e:41:92:fb:20:cf:99:a9:
d1:b6:77:75:cd:3d:c3:ad:35:24:08:f4:2f:ca:cf:3b:8f:b5:
e6:c9:b3:64:a2:6d:27:55:0c:df:1b:f7:60:fc:78:cc:c4:a2:
c2:08:52:04:2e:bd:68:9d:84:51:82:d3:ee:95:a8:3f:6a:34:
d2:0c:aa:0e:56:35:53:70:d0:c9:ae:91:4d:db:2d:38:d0:47:
f6:eb:0a:28:67:4d:18:18:7a:db:fb:76:4a:0d:7f:47:a2:0b:
35:c6:6b:c0:4c:a2:38:72:88:82:91:b9:72:75:7a:63:2e:0f:
c2:f4:bd:fc:0b:9a:79:8f:17:74:f1:09:43:77:73:6a:93:bd:
62:e4:58:d9:ca:9d:80:4b:fa:86:15:d2:9a:cc:43:4c:84:cd:
c3:20:40:1b:7d:f2:24:32:68:35:00:75:e5:c8:1b:08:28:ec:
02:b8:d9:78:67:e1:26:df:7c:31:35:4a:61:97:cd:09:56:17:
47:c0:e2:eb:8f:c7:95:0a:3e:8b:87:90:01:c5:d6:04:c8:5d:
b8:ba:b3:e2:77:58:8a:27:42:4d:ba:ff:90:3b:f7:11:95:73:
9d:82:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:31 2025 by rpki-client on console-fra.rpki-client.org