Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: C0aUj9reYHLuw8/z9g3jaYlBb5GMt0Ap4V4VFtocvxs=
Subject key identifier: 16:6C:40:7D:DF:FD:78:82:06:10:4A:4B:94:D2:B6:52:CC:E0:4E:53
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 0194BB602A95C425A809689B5EF8CE839F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: j/eiDTHeIVF+bzE/5pQNVgBBTEbAq2AVBlAbF04pZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2a:95:c4:25:a8:09:68:9b:5e:f8:ce:83:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=166c407ddffd788206104a4b94d2b652cce04e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:97:26:a5:72:40:66:a8:76:32:78:38:5c:
d2:9b:7a:df:4d:d4:7c:84:6c:c3:05:d7:4f:19:8b:
69:f2:e1:4d:af:e8:f3:5b:9d:6e:e8:14:dc:3b:6f:
e9:4f:85:f2:83:35:78:05:e8:63:ae:cf:51:2f:cf:
3c:51:fb:a2:e3:99:c5:47:f9:40:b1:28:e0:9c:20:
ab:af:9a:c2:51:0a:7f:46:42:dc:3f:84:ff:22:c8:
0e:29:8f:ed:84:56:dc:15:0f:11:d8:aa:46:4e:92:
f8:3f:4a:06:36:36:05:5b:e0:da:05:55:6f:82:39:
00:59:c6:35:22:a0:66:4a:a3:c3:3e:ba:de:80:b9:
fa:e6:9b:48:5c:32:98:b8:aa:44:9e:ee:9b:90:27:
3e:20:06:93:33:83:cd:e0:70:9b:e4:5b:96:40:3c:
ae:e7:8a:f8:94:00:4c:16:b1:db:55:f4:ec:99:43:
45:e4:39:c9:f0:72:37:1b:44:74:0e:a3:72:cd:8e:
f0:91:84:68:76:18:19:b2:94:ec:24:c1:66:5a:f9:
4d:fc:d0:a2:2d:19:31:00:14:57:8f:dc:e3:a6:f3:
c4:2e:06:58:54:a0:a6:91:50:25:1b:69:f1:2b:80:
0d:2e:26:0f:34:b8:c2:6d:33:1c:25:a3:8b:94:a9:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:40:7D:DF:FD:78:82:06:10:4A:4B:94:D2:B6:52:CC:E0:4E:53
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a4:2e:b9:64:be:b5:c2:15:5c:06:62:47:2f:15:2e:c3:d8:
01:76:19:d7:65:c8:4f:5b:cd:f0:25:f3:a3:77:b0:a3:4d:d9:
63:67:3e:d6:f4:b2:e8:f6:85:06:88:46:d9:da:11:5b:ac:ab:
df:ef:fc:a8:7e:bd:00:32:68:be:89:5e:a3:f1:a3:2f:0a:7b:
26:73:1e:5b:75:5e:ff:fd:39:6e:b2:5a:57:30:9a:8a:45:80:
8c:19:16:48:e6:3f:f5:8d:8b:50:eb:d1:7c:86:28:ca:49:ba:
9d:67:45:f0:5e:e0:23:86:06:14:5b:ee:33:c7:bd:4f:77:88:
41:00:63:0a:79:bd:9b:7e:4f:58:78:82:5f:5d:c5:67:d6:0a:
df:71:1f:1c:5e:c6:90:4c:b2:19:a6:90:74:72:30:0a:a6:81:
ee:6d:61:1d:af:a9:9b:41:60:ed:ab:cb:9f:64:18:df:79:37:
8d:9e:a6:86:87:05:ac:68:24:72:43:66:92:47:fc:ca:53:f7:
4f:8f:21:27:ec:83:bb:1f:54:92:76:69:d9:a5:b7:5a:2b:7a:
91:a2:e5:d1:d1:97:e7:6b:44:d7:39:3b:5e:81:32:8d:41:89:
8f:43:e6:cd:6a:8d:3b:b8:46:b4:8f:de:16:09:d5:bf:84:ae:
5e:1b:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:41 2025 by rpki-client on console-fra.rpki-client.org