Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: j9GwZc8d67pCX/X3ZG5DWcapiQyeU8NzoEPMd9Z4wzc=
Subject key identifier: A8:62:3A:3F:E2:AF:4C:5F:5D:81:38:59:8D:89:4F:2E:81:85:0D:55
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0194BB293E13266BDC276CE51E6FBA707B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 0202
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: gILHiG5AuW4voT7cvkG3703IX9SVLFz+KUmylKqRPxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3e:13:26:6b:dc:27:6c:e5:1e:6f:ba:70:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=a8623a3fe2af4c5f5d8138598d894f2e81850d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:c3:fb:ec:ee:03:c3:8a:aa:0c:9d:eb:64:
82:cc:74:33:48:b7:f6:e1:69:97:f1:8e:88:75:b4:
28:f9:87:67:91:d1:af:31:f9:7e:e8:c5:aa:23:10:
4a:da:12:f6:70:6e:2f:7c:6f:29:9b:42:64:41:72:
b0:38:82:f9:5c:cc:7e:19:5b:63:ca:9a:85:68:13:
7d:d3:54:f6:94:74:b6:23:5f:d6:5c:79:f5:94:8a:
0f:b6:69:f6:d8:e9:df:22:4e:24:70:7a:16:e4:ee:
9e:b4:99:97:2c:1e:8a:96:35:2e:b5:56:9d:39:a0:
27:ba:8a:62:5f:35:ba:1e:98:28:9f:f7:3d:bc:57:
09:24:02:3a:66:84:08:aa:0c:42:c3:b9:07:c6:b4:
81:87:2c:14:b9:f9:d4:fb:76:11:d4:e5:d4:79:e4:
fc:ed:42:fb:d8:ad:81:f0:a6:a4:33:88:24:04:0b:
1e:e4:d2:c1:41:2c:dd:f3:37:07:f0:cb:01:4d:6a:
92:8b:5b:57:bd:ea:ee:48:b8:68:f5:17:b1:3e:8e:
e0:a2:d7:ab:4b:00:86:40:a1:59:f9:e6:6e:cf:27:
9c:ef:30:1a:b4:bd:97:9b:8d:c7:57:5c:34:1b:b9:
1f:33:fd:f3:d1:ae:30:a1:61:da:75:cd:a7:95:f4:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:3A:3F:E2:AF:4C:5F:5D:81:38:59:8D:89:4F:2E:81:85:0D:55
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f6:0f:e0:41:6b:cc:db:87:32:95:33:36:d5:94:1a:ab:7f:
5d:7f:ed:33:ff:8f:38:29:99:a9:29:0d:7f:01:05:d3:79:39:
8b:77:3a:30:71:6e:07:f7:48:30:95:77:2f:76:e9:0d:b5:6a:
7e:78:f6:3c:89:5c:24:e4:50:93:da:ba:d7:e4:28:7b:83:97:
ce:45:08:c5:9a:83:07:3e:65:15:87:a2:40:3f:8a:f9:de:57:
c9:f1:dc:72:fa:dc:ea:d7:32:91:e0:05:55:81:33:b1:c7:c5:
7f:72:c7:d6:ac:d0:c3:88:c5:11:2b:1d:72:14:7c:22:86:af:
46:a3:0d:d5:50:b9:e4:50:58:18:14:bf:aa:62:17:7a:f8:98:
7e:26:2e:84:14:78:7c:36:89:c5:03:f0:15:28:57:99:21:8d:
d0:59:da:7b:0f:f0:5b:2e:9d:75:7b:f5:c1:99:35:7c:78:97:
b1:a3:83:eb:44:e3:15:72:29:90:42:17:0f:82:82:04:1c:21:
0a:43:4d:a4:06:37:c6:b9:0c:3d:ee:1c:c8:1b:98:54:18:bf:
8d:18:55:88:8e:38:ac:2d:10:ed:4f:77:d1:7e:ec:f5:78:91:
76:12:4a:af:84:12:ca:c3:a1:9e:88:d0:a3:4f:51:13:48:e1:
18:02:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:10 2025 by rpki-client on console-fra.rpki-client.org