Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 2VDrR/bbhntRKO37u326324f1UfqD7ySN7ysZKnZ/FA=
Subject key identifier: 30:44:EE:EA:7E:73:6A:3D:46:BA:63:39:21:54:E5:F1:B1:D8:10:AA
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 0194BC3BE206C2C06111FCB951DE817B8EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: 8W4LSf+3+qWaMgjYVkm8q0l90ZUcERZ509qMTpbZp54=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:06:c2:c0:61:11:fc:b9:51:de:81:7b:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=3044eeea7e736a3d46ba63392154e5f1b1d810aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4e:4b:a0:6c:83:73:1b:63:c0:a6:e3:4f:a9:
f5:f9:96:5a:5c:20:e2:f6:a4:9a:a7:30:a9:03:d1:
6d:28:2c:37:41:cd:67:71:51:71:17:46:cd:fa:ab:
4f:1f:95:d5:ed:ea:6e:21:29:2c:c9:4b:27:e2:cc:
0b:e3:93:ed:62:84:e5:b6:9a:5d:b1:6b:f7:9a:a0:
8e:b8:97:e3:93:ba:85:cc:d3:50:6f:22:37:f1:09:
fd:e6:56:e3:90:f6:0f:ff:7d:3a:25:99:6a:ce:08:
93:e9:4a:31:49:00:ad:75:73:d6:69:e5:07:63:3e:
57:c0:2f:e0:28:02:af:fd:89:6a:ae:ad:36:1e:44:
02:2e:41:d4:23:5a:3a:1f:73:d7:ba:44:df:6b:92:
c1:83:e0:80:ee:68:59:ad:06:0d:31:b5:be:4b:7b:
f1:44:e1:8d:9f:9b:1b:ff:a5:e7:b8:ca:48:c6:61:
9c:80:7c:53:94:d4:a7:4f:1e:61:d9:5c:5d:0f:2e:
1b:ba:f9:81:85:ae:a0:10:ce:d9:e3:71:5e:b2:52:
fb:2e:4a:08:52:b9:aa:e7:3d:52:6b:7d:50:a1:11:
73:44:81:ca:ca:4c:9d:32:a6:48:5c:88:e8:84:e9:
94:41:cd:09:a1:7f:4d:08:ae:d9:c2:9e:2d:f1:1b:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:EE:EA:7E:73:6A:3D:46:BA:63:39:21:54:E5:F1:B1:D8:10:AA
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:ff:58:f4:8d:84:92:ba:de:0b:f7:c1:dc:3f:8f:b5:e5:
6c:37:37:53:11:43:7c:1c:18:cf:3c:e8:b1:b8:fd:56:1c:45:
b2:04:ea:89:46:fa:f3:6b:c5:1a:f5:56:ca:a4:24:18:0d:3b:
f2:6c:6f:52:f6:37:17:d9:00:09:6c:fe:46:e0:e7:bf:e4:47:
ed:49:db:30:1c:9f:e3:09:c8:74:d4:1e:96:0f:c2:20:d9:2a:
fc:48:72:2d:49:5e:a7:f0:f0:3f:7b:a6:72:82:aa:f7:87:e0:
31:6d:c3:20:41:42:05:b1:1d:b0:9e:4d:19:9f:ec:e5:9f:32:
51:47:08:e9:b1:47:ba:dc:7f:76:c3:64:7b:ed:d9:8c:b4:41:
67:53:08:fd:b3:b5:15:a8:9a:62:e1:f2:18:77:ac:10:b3:62:
9a:5e:89:7c:db:5e:f6:54:8f:52:75:e0:20:02:6c:84:95:16:
09:d6:47:ca:25:f0:42:5a:f1:de:ab:fa:30:6d:e8:ee:11:a9:
dd:c0:ad:c9:54:c6:ff:f8:74:6d:0d:4b:60:87:d7:47:da:ef:
bf:d5:4b:44:40:5d:e9:8d:ca:e1:b9:fd:c4:ee:8f:26:6b:53:
78:36:e9:8c:c0:24:67:f4:80:12:54:23:da:4e:d3:7e:51:94:
a8:4d:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:37 2025 by rpki-client on console-fra.rpki-client.org