Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: CDMcQcRif3aAhmlSnee2fxH2p5WStUUOD+dVI2H+ozQ=
Subject key identifier: 08:3B:F1:3E:E3:B0:65:3F:A5:EF:1A:20:1F:26:42:6D:00:CA:DB:AA
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 0194BAF25407A3CD2F4C2FC25F9F22DB7361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:30 +0000
Manifest this update: Fri 31 Jan 2025 06:00:30 +0000
Manifest next update: Sat 01 Feb 2025 06:00:30 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: DrQPK+Lh1PaIAfRYKaEb9qgTtj5oCjzdzwHWaze287U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:54:07:a3:cd:2f:4c:2f:c2:5f:9f:22:db:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jan 31 06:00:30 2025 GMT
Not After : Feb 1 06:00:30 2025 GMT
Subject: CN=083bf13ee3b0653fa5ef1a201f26426d00cadbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:32:93:28:aa:7d:e9:7c:45:fe:fd:10:c8:
33:e7:54:d2:29:04:0b:77:1e:eb:5d:4b:08:b0:be:
74:49:0d:8e:27:b3:7e:ac:e1:2f:c9:d4:98:a3:b3:
f8:11:b8:32:07:24:4a:05:31:4a:4f:e3:f9:24:6a:
35:a3:28:6c:fe:c1:29:16:23:ec:f0:b8:3d:d9:9c:
31:ed:fd:54:c3:c4:9d:6b:58:f0:a9:15:75:fc:29:
54:5c:5b:f0:d5:47:0f:0c:84:09:42:bb:12:fb:ad:
b4:2e:7b:13:66:42:42:1d:86:1b:26:31:bd:25:cb:
ef:35:87:ea:2e:9d:8c:29:44:2b:75:9a:d1:10:1e:
6c:21:60:b7:42:1b:f2:11:f8:ea:93:06:08:22:6d:
a2:0d:fb:17:4f:0f:31:61:63:96:4d:fb:c7:f4:1b:
2a:79:49:2d:ac:05:96:f8:a1:17:ca:c6:c5:b5:bd:
40:36:8a:04:62:a6:8a:a2:36:49:04:f6:91:c1:e6:
7b:12:62:11:66:17:25:5e:63:09:12:b2:05:d7:e0:
1e:b9:c9:6b:e7:00:6d:ee:3a:4a:86:b7:14:f6:d0:
77:16:3e:a9:3b:80:07:2d:d1:03:53:a4:02:e1:b9:
06:45:87:e4:90:99:e6:b9:0f:90:d0:3e:30:e9:0c:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:F1:3E:E3:B0:65:3F:A5:EF:1A:20:1F:26:42:6D:00:CA:DB:AA
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:20:f6:a3:0c:07:ec:ae:d4:07:d8:ef:07:9f:42:92:a7:
72:08:be:c6:c3:11:d4:91:8f:9d:e9:30:4b:f4:5e:00:76:bf:
9d:f0:a6:4a:8f:99:ad:e2:bf:0a:ff:63:b0:87:6a:44:f2:74:
d2:10:fa:f6:f0:da:01:b1:67:46:70:ba:0e:0e:ef:89:30:68:
62:80:9c:de:41:4c:38:84:85:9a:d1:1d:89:11:7b:ee:93:7d:
f1:e0:55:26:0f:9f:05:47:73:8a:e9:91:7a:df:ea:85:da:aa:
80:eb:a5:11:8b:76:4a:aa:fe:ee:17:e2:58:60:80:48:d0:f4:
ba:f1:1c:db:08:4c:4e:20:ff:8a:8b:5d:82:39:36:20:5a:9c:
ae:23:b7:5d:b2:73:94:d6:95:46:10:3e:30:2d:c3:82:86:d3:
3e:42:87:38:6c:b9:dc:66:e5:dd:b5:ec:ce:1b:c9:a8:31:13:
66:ae:74:5f:e8:e0:db:26:ea:ba:c0:c6:89:4f:f7:a1:2b:f7:
b5:5e:e8:25:ed:99:6a:0a:28:00:b8:1e:0f:de:da:08:a5:5e:
c6:e5:5b:45:3b:1b:ee:b7:2f:b4:c2:4d:79:14:de:84:6d:b6:
e2:ee:df:ec:24:84:cb:28:e1:c3:ee:06:26:5e:ce:14:53:cd:
59:70:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:11 2025 by rpki-client on console-fra.rpki-client.org