Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: p3B9Nzf7q29encH6CG2SOBoI0fuaL0KpoCyWolh8vTM=
Subject key identifier: FE:E0:C1:26:D4:45:F9:FF:03:05:C1:AE:64:F2:85:B4:E0:CD:02:29
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 0194BA84736313A9A3CDD2713668F90467F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:29 +0000
Manifest next update: Sat 01 Feb 2025 04:00:29 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: MKTPI9fGNpbxgVXb/AaUgwD2Hpg8bPDKW1szdr6Pc5k=)
2: OwG4_h94ip7CzANECDf39dfwNGk.roa (hash: XIXqYD1CZdADAiBPHja+pimegzmDxikS2efUTrBV4t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:73:63:13:a9:a3:cd:d2:71:36:68:f9:04:67:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jan 31 04:00:29 2025 GMT
Not After : Feb 1 04:00:29 2025 GMT
Subject: CN=fee0c126d445f9ff0305c1ae64f285b4e0cd0229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:92:36:f9:55:b0:69:1c:43:fb:15:54:93:
89:75:c1:17:03:c5:a1:02:ac:c2:c0:34:7a:04:87:
60:cc:cd:57:cc:00:fe:92:15:f4:41:35:3a:e0:ff:
da:b7:72:4b:1b:85:f6:63:ed:21:8f:eb:b6:c9:62:
be:74:1c:23:e2:0d:7f:02:30:2d:f3:67:1c:2d:1f:
93:8b:1e:43:a0:ef:81:88:67:89:20:b7:15:ab:c4:
24:95:1f:31:d3:4a:1b:8c:64:ed:d1:4d:16:ac:a3:
d1:f5:2e:a5:ca:b5:21:9d:34:36:a4:45:4d:5d:d5:
8d:b7:df:b7:a0:ee:71:1c:6a:39:ea:46:fb:d1:b9:
fc:41:c9:56:1a:0e:71:fe:5b:1f:a1:e8:8f:e9:d4:
c9:83:02:26:33:a9:ea:62:53:54:6f:9d:28:35:20:
94:57:fb:90:75:d2:88:c4:60:0f:0f:bc:10:2c:36:
4a:7c:04:47:de:70:71:5f:4c:1d:ac:6a:67:36:97:
f6:9f:da:f8:7d:a0:33:d0:57:98:48:f2:b9:e4:ba:
79:31:e6:33:50:69:fa:cc:66:45:96:eb:ee:14:c7:
03:bd:5f:4a:97:ec:b7:4b:79:55:18:9a:2c:18:ca:
88:43:74:34:69:40:f2:92:52:8a:d2:aa:c2:2d:5e:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:C1:26:D4:45:F9:FF:03:05:C1:AE:64:F2:85:B4:E0:CD:02:29
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f0:69:02:0d:1a:68:b8:50:11:72:89:d3:65:a4:1b:7c:d9:
d5:4b:80:c8:7a:90:f4:aa:a3:21:69:a7:ff:8d:c2:58:3f:c6:
93:83:d5:c2:e8:49:75:2d:50:fb:ec:05:e3:0b:01:ce:dc:bb:
84:0f:dc:74:cf:44:ee:63:49:ea:4a:c4:9f:05:9e:bc:7c:4a:
96:48:66:bd:80:b6:51:46:c4:5c:b1:e2:b4:99:0f:08:9e:7b:
b6:9a:a3:9a:e5:63:1d:47:ee:cd:8c:fb:29:a0:7b:a3:80:04:
02:56:52:67:a5:02:a3:13:30:6d:ea:f5:73:ac:6f:64:d0:f3:
62:5b:bf:81:74:7d:8e:72:74:01:0f:1e:f7:64:27:05:7b:54:
6a:38:bf:a4:14:d8:55:8e:9b:d3:f4:45:ae:d8:41:93:05:ac:
28:f5:47:6b:6c:54:96:66:ae:1c:1a:96:d0:d6:b0:03:47:81:
af:1b:b1:cb:5b:88:a2:58:ba:f4:bb:92:ee:35:74:c9:a7:83:
3b:89:30:aa:27:64:11:19:06:b9:10:a6:14:db:a5:8c:e2:f7:
d3:86:ed:c8:90:a6:74:fb:c8:99:c1:2f:36:01:c3:39:35:ae:
06:0e:b3:86:cf:08:58:51:a2:00:8d:d4:ba:5e:59:17:6f:e6:
fe:fe:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:39 2025 by rpki-client on console-fra.rpki-client.org