Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier: eVFsfdR3rdZSHoiqONppcVbbuoqXZC6AoSZIZ6qhq7U=
Subject key identifier: CE:46:85:97:24:91:84:47:93:73:60:D8:AC:B3:4A:86:83:9D:7A:F4
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 0194BAF1FD5BF2613ECBB0E7CDF1336B44BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number: 0AFB
Signing time: Fri 31 Jan 2025 06:00:08 +0000
Manifest this update: Fri 31 Jan 2025 06:00:08 +0000
Manifest next update: Sat 01 Feb 2025 06:00:08 +0000
Files and hashes: 1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: nINubk0jelJ7gRmXIkHgyOW8Aq+hYQI90IBVAJwOz6I=)
2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:fd:5b:f2:61:3e:cb:b0:e7:cd:f1:33:6b:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: Jan 31 06:00:08 2025 GMT
Not After : Feb 1 06:00:08 2025 GMT
Subject: CN=ce46859724918447937360d8acb34a86839d7af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:82:b8:3b:d8:5d:ff:3e:15:1c:ef:b8:a0:
33:af:38:69:68:73:c4:59:04:66:db:39:f5:59:ab:
4a:bb:e0:5a:61:62:2e:88:b6:10:ee:59:07:af:c1:
b2:f6:29:99:76:7d:ed:2a:14:21:f9:30:f4:92:e3:
5a:5a:f6:3f:ac:7a:bb:00:56:1d:8a:43:17:89:53:
3a:d1:48:cb:b8:6e:8e:56:1f:46:42:7d:1f:5a:e4:
79:18:8d:b9:23:0b:17:3f:fa:23:86:43:ae:87:8e:
75:a8:6d:0f:02:5f:83:73:60:2b:5a:75:eb:d2:c4:
d1:15:30:41:56:9a:ab:53:0e:2d:03:89:aa:e6:1e:
6e:fb:8f:c7:72:72:3d:20:8e:47:f7:21:3b:6f:84:
6b:19:c4:9e:ab:47:2b:77:6c:2c:5d:b7:61:32:e9:
0b:e3:60:c5:2b:6f:cc:03:f9:9b:12:12:b6:00:fa:
c0:57:b4:de:cc:45:c6:e1:11:94:31:88:42:39:ac:
83:d7:1f:2c:03:04:02:26:43:c6:74:dc:9f:24:aa:
e4:ff:42:82:2b:d2:86:55:22:83:a0:cf:3f:4b:75:
04:c9:b3:58:be:54:6e:4a:29:ad:9d:1d:98:9e:78:
d9:86:7a:73:a1:61:99:c4:c9:1d:cd:41:13:7c:b7:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:85:97:24:91:84:47:93:73:60:D8:AC:B3:4A:86:83:9D:7A:F4
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:ab:79:fb:49:d5:0e:c6:6a:74:86:06:e2:ba:96:3e:33:
5a:7b:89:dc:a6:57:e3:f8:00:1f:9b:d6:75:a1:67:7d:90:e8:
91:d7:a0:d2:d8:54:04:92:5d:11:6d:71:41:03:22:b8:56:c7:
2e:e4:ab:af:25:c0:8c:ba:11:b1:d9:ee:ea:bc:67:e8:a8:7d:
9a:42:ca:7e:ab:ee:ab:3a:6a:5c:68:8d:33:49:12:ee:31:e7:
00:3d:8c:b5:8b:e6:b9:3b:99:82:dc:8a:78:7a:26:b2:fc:d5:
88:4a:3e:db:e7:a7:88:69:de:b6:59:1f:52:fc:aa:c3:14:a8:
6f:97:46:b9:c8:8c:5d:f5:13:9b:8f:9a:c4:d2:a8:cb:2d:74:
7c:4c:4b:b3:fd:31:71:54:85:79:58:fe:20:f3:18:f3:60:d9:
b3:6f:f6:94:b8:51:c1:80:f5:37:e3:76:de:07:e6:f7:de:32:
8d:49:17:20:67:b0:7d:42:d1:ad:36:b1:fe:0d:2c:e1:04:e1:
b3:93:a5:f5:2f:fa:71:51:d8:16:fe:39:51:c0:64:87:6d:27:
0c:f1:29:ac:7d:fd:9e:19:b6:25:b7:ad:4e:f6:d3:ad:f9:e0:
91:eb:63:9d:0a:02:3a:b0:24:c6:54:b5:90:06:61:17:c5:ea:
89:53:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:26 2025 by rpki-client on console-fra.rpki-client.org