Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: hD4FKMGgds2VIxILe/f7Scq0o/UvioYYFrcGkH3bMjk=
Subject key identifier: B4:07:C5:BB:1C:97:D9:AA:5B:EF:75:9C:14:F2:25:D3:A7:82:EA:64
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0194BABBD6118CF7CD8A58AE5BDD5ABF8DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 05:00:59 +0000
Manifest this update: Fri 31 Jan 2025 05:00:59 +0000
Manifest next update: Sat 01 Feb 2025 05:00:59 +0000
Files and hashes: 1: 0JyAcPXL-bXwxT9T4RR50a8dw08.roa (hash: uXEDLrD6enC/axv995LzZVWavGREUCxmYJkE/6Uz3j8=)
2: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
3: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
4: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
5: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: 04hYncx2OyH9fLoYsxHkC1vuCTObgx31QFoTY9GgGro=)
6: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
7: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
8: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d6:11:8c:f7:cd:8a:58:ae:5b:dd:5a:bf:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 31 05:00:59 2025 GMT
Not After : Feb 1 05:00:59 2025 GMT
Subject: CN=b407c5bb1c97d9aa5bef759c14f225d3a782ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:01:74:19:6d:a4:e7:27:46:d2:6f:ea:78:
a0:7a:e4:25:e0:13:b2:fb:2a:fb:a9:2d:4f:d9:37:
a3:1a:c0:95:d9:92:66:e3:1e:be:fc:17:d7:83:5a:
1b:e0:29:8f:d3:cc:c7:1d:7e:fa:ee:77:83:f2:38:
c0:3e:26:aa:2e:14:ce:2b:e2:26:27:c5:7e:37:1b:
5d:6a:18:9a:a5:43:af:79:09:4f:7e:b6:e0:e9:f4:
98:df:a7:54:8a:c6:d2:24:76:b8:6c:09:9e:79:8e:
ad:01:9b:1a:3c:5d:e1:30:10:1b:d3:af:52:34:d7:
a2:3b:0b:00:e0:76:b5:1b:e2:ad:ca:f6:20:05:44:
9a:55:3d:75:ba:b3:d5:38:02:47:c7:eb:81:75:72:
87:32:60:bd:1f:e4:be:43:7f:38:77:7b:cd:68:6b:
2f:27:e4:a6:25:a0:22:04:fb:e5:93:35:22:97:25:
95:91:1e:43:4a:5e:5b:ee:4f:45:42:21:8c:9a:8b:
e3:57:15:0d:2c:20:e3:17:c8:52:7f:95:13:a9:55:
b4:c2:78:d1:8d:ba:96:23:41:ef:7f:bb:01:73:92:
5e:4a:44:cd:db:62:46:d0:96:a4:e1:74:47:0d:aa:
28:a9:20:6e:da:78:26:3f:e0:44:9b:35:35:94:fc:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:C5:BB:1C:97:D9:AA:5B:EF:75:9C:14:F2:25:D3:A7:82:EA:64
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cb:9b:06:f5:20:b8:23:95:0b:7a:83:c5:dc:e1:7c:16:f6:
7d:19:5b:3b:db:6c:4a:ef:a3:79:8c:2c:f9:6a:12:5c:5a:a3:
2e:54:07:a2:3f:30:90:41:09:e6:59:c9:71:24:19:02:ce:e6:
89:e5:14:69:86:30:ee:05:f7:1b:79:c5:b9:74:ac:ca:85:45:
f8:14:a0:29:88:7c:cd:eb:a5:ca:de:de:96:a7:6a:79:4e:d9:
55:e5:83:55:70:8e:0f:07:a7:b9:9b:3c:4a:0e:9b:9d:bf:00:
09:f3:52:ef:98:15:d5:b9:6a:49:35:cd:34:79:fe:a6:1f:93:
06:b2:c0:3b:b7:3c:1c:56:b7:79:de:1e:a9:a8:81:bb:50:ed:
41:b7:dc:f3:e7:61:d1:f9:95:4b:e3:67:dc:69:aa:9d:42:95:
69:f1:8f:7d:d9:b6:01:9d:20:aa:5b:b2:3e:37:5f:40:e3:d9:
f1:33:20:14:52:3e:30:86:92:21:f9:18:a8:1f:47:be:76:a8:
31:93:cb:47:5a:d9:40:69:60:90:04:78:1e:84:52:54:9d:98:
2d:b8:65:22:40:46:25:55:87:c9:3b:94:09:8b:ee:73:c0:34:
cc:b1:4e:77:4c:70:31:f9:ad:78:15:3d:4d:b9:0f:9d:66:fb:
63:8f:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:49 2025 by rpki-client on console-fra.rpki-client.org