Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: mJLxSLMUi4c+SH5bbRtxp3npafsUkm8HXrwSny2hrsQ=
Subject key identifier: 0C:E9:F6:EF:F7:C3:38:5A:41:9D:E1:FB:DC:E3:2A:85:AF:BD:E1:75
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0194BA847BB3ABD9C0D05D849420B039D0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 033F
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 99G1IAkHDKajrXfT/ufSls/6rPJSmzPIsuDLam7KWMY=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7b:b3:ab:d9:c0:d0:5d:84:94:20:b0:39:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=0ce9f6eff7c3385a419de1fbdce32a85afbde175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:a3:f6:f5:52:4e:76:4b:3c:80:35:66:fb:
bb:6f:1d:a3:31:35:af:f7:a1:22:12:59:c9:6d:fd:
59:93:97:de:a6:d9:4d:21:63:fd:a7:f4:93:80:a2:
70:2e:16:d9:31:73:be:5b:6f:4b:5c:d0:be:b2:d4:
a7:89:38:f9:8f:ef:29:6a:90:67:94:5c:56:05:2d:
ca:ea:15:ad:a0:64:5a:4b:f6:17:b4:03:70:b6:a8:
ac:e5:f7:ac:82:e2:1d:f0:13:22:34:54:50:d7:f0:
df:05:a1:7b:d9:6c:3e:bf:9c:e9:f3:b6:5c:93:34:
7e:3e:3b:e0:49:c9:22:ad:f1:7b:49:b5:53:db:56:
28:32:a0:5c:37:f5:8f:e3:fe:29:43:c5:39:90:38:
89:b6:ad:41:db:37:f7:de:3d:b6:f5:20:c0:ef:65:
b5:f9:98:39:4f:ef:a9:3a:da:54:17:68:ca:b7:bf:
b7:1c:95:c2:04:09:36:e9:6b:37:1b:58:0e:4f:41:
92:25:81:3a:67:58:e6:ff:71:59:95:a8:6b:7b:d7:
a4:4d:f4:eb:1a:47:23:5b:fd:c6:4f:45:f9:f3:52:
56:bb:90:de:ab:ae:cc:2c:b8:1e:83:90:93:38:d0:
7f:20:a5:23:8f:a0:5a:f8:46:d8:31:50:dd:38:83:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:F6:EF:F7:C3:38:5A:41:9D:E1:FB:DC:E3:2A:85:AF:BD:E1:75
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:fa:e1:92:60:c4:41:57:b7:65:f7:15:40:52:a3:dd:50:
26:99:8e:51:e7:64:ab:42:c0:8b:37:1d:b9:36:6e:34:d9:c5:
4f:bf:d0:55:16:c0:33:ff:f8:87:e8:62:38:40:26:24:6d:90:
65:dc:86:9f:cf:fa:77:aa:87:71:56:aa:e5:9f:48:d5:b2:fa:
e7:69:bc:8a:ad:85:5f:59:a9:ec:11:37:02:22:80:8b:2e:e8:
e9:ed:73:8b:23:3f:15:76:dc:d0:a3:60:15:6f:5d:04:cd:b4:
67:7a:1a:f4:2d:5e:d5:12:9c:28:73:bf:0e:bd:76:ad:ee:74:
10:4c:c5:85:b8:bf:08:68:e8:f8:39:1f:18:57:4e:14:a2:7a:
a2:3e:13:ff:a9:12:5b:1a:70:5a:b5:81:e2:15:b5:1b:1c:59:
d7:6e:c7:5c:9c:11:25:df:87:a0:a9:26:1f:16:cf:b5:a8:05:
06:1f:83:40:53:29:6d:ea:fd:0b:dd:5d:64:36:4b:85:99:3c:
5c:5e:f7:57:e3:3a:16:95:f8:03:25:87:3b:e5:f7:51:3e:0c:
28:b4:90:86:1e:42:c0:12:c9:5e:cb:8f:84:5b:91:6c:8d:af:
e3:2e:31:d6:c6:be:d7:a0:41:7a:f2:e7:87:f0:cf:16:51:49:
f7:4e:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:34 2025 by rpki-client on console-fra.rpki-client.org