Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
File: SPaKoudVqgrGmnD-jv6-pMIzVhE.mft (raw, json)
Hash identifier: EVh7qlCASbPuHnXHjG20vPzJt5NSzajz0wGcTQa1TZA=
Subject key identifier: AD:5C:BA:C9:F6:41:AE:B6:98:F0:CB:D9:7B:35:98:E9:4D:04:14:12
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 0194BABBDC058D395F2BC075207DE63D8947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:01:01 +0000
Manifest this update: Fri 31 Jan 2025 05:01:01 +0000
Manifest next update: Sat 01 Feb 2025 05:01:01 +0000
Files and hashes: 1: SPaKoudVqgrGmnD-jv6-pMIzVhE.crl (hash: fm5ZrUX18l+x6IcW813VGYQ9k7fXAkAhyGuV4K//dEY=)
2: zdcU1X_muklbr0PsAXf5FfLi2-4.roa (hash: xVhUBfvK07juxF0BpH1Z7Z8zQ9yW0QLwTqhNif5nVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:dc:05:8d:39:5f:2b:c0:75:20:7d:e6:3d:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Jan 31 05:01:01 2025 GMT
Not After : Feb 1 05:01:01 2025 GMT
Subject: CN=ad5cbac9f641aeb698f0cbd97b3598e94d041412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:5c:5c:f3:e7:8f:ce:3a:6f:cc:8c:7b:0a:
41:73:a9:06:0d:1d:9d:a6:d6:05:ce:7c:fc:3d:c4:
78:31:9d:0c:c7:d5:f3:24:e1:ff:d4:9d:b8:d2:c4:
d4:ac:b6:5b:a5:77:a7:44:62:9e:6e:6f:90:46:e4:
d2:cd:a0:d8:e5:c8:a5:c2:d8:1b:ce:0e:c2:f4:40:
80:12:10:53:72:4f:ff:a0:3c:8f:41:4c:b7:bf:8f:
20:2b:bd:45:8e:93:ed:85:d2:9a:e0:1f:c5:fa:c3:
89:39:1b:ea:70:ce:1c:7f:ce:4a:fe:2c:cd:10:da:
b6:21:f3:7f:76:fb:49:4b:1f:28:47:54:bd:3a:2b:
7d:9f:9b:32:68:52:0d:6f:b2:1b:51:e4:f3:fb:10:
1b:70:65:26:4f:c5:cd:2e:c2:2e:7b:3b:fb:06:dc:
77:d7:82:84:87:47:8a:fc:aa:b3:e1:06:f3:3c:41:
c3:3b:de:b2:7d:0f:e2:43:f4:7e:2e:8b:ae:76:af:
1d:25:32:17:56:c6:6c:fb:d9:1d:21:92:35:47:15:
c2:9d:aa:f9:3e:3a:9a:3c:88:7f:64:02:80:4b:b5:
a2:94:9b:a0:f8:a2:9c:1a:e5:00:1c:eb:cf:d2:9d:
e2:0c:ca:0b:c2:ad:a8:29:da:0d:13:03:52:01:0f:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5C:BA:C9:F6:41:AE:B6:98:F0:CB:D9:7B:35:98:E9:4D:04:14:12
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9b:03:9b:dc:b7:ad:71:bd:99:6f:95:87:09:7e:dc:e9:3c:
b4:27:4e:58:96:bc:3f:d0:ad:4c:52:bd:ba:22:24:69:a1:9c:
a7:b9:50:c9:6c:15:e8:16:34:27:f0:1e:48:b0:f6:8e:5c:3b:
8f:a5:f2:bb:ef:1f:e2:26:5e:4a:da:6e:97:bf:36:5c:03:f2:
b7:7d:29:86:78:94:95:23:ca:10:7f:1b:4b:ad:d5:8e:83:48:
18:10:1f:70:09:a4:f7:d7:4d:22:64:b2:7c:e4:20:da:80:c1:
8e:4c:88:e8:52:a4:55:c2:89:89:74:df:e6:d9:c2:0c:20:21:
df:86:a4:94:7a:ff:ca:ee:a5:38:08:48:a5:d7:f7:32:c0:e9:
0d:7a:e1:48:f4:34:24:d9:e4:6c:cc:c5:b0:f5:51:d3:00:ee:
37:34:a1:38:3e:86:32:5c:86:90:b9:e5:88:f7:b7:fa:fc:9b:
bf:25:e2:7d:bc:61:e6:0b:11:8c:4a:36:61:6e:76:75:4b:a7:
ed:ed:19:47:97:a2:24:2f:79:4d:51:06:e8:34:88:88:85:57:
ff:d0:b2:17:fb:23:af:93:b0:93:c7:e0:42:06:dd:fd:9b:2f:
b7:20:79:db:ad:0f:d6:0a:c3:ce:f9:72:b0:f6:7d:ba:17:40:
af:5d:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:43 2025 by rpki-client on console-fra.rpki-client.org