Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: LzpxBv5iqV8X6kfJ8+78FmaCUOUYOt/L8rTSYQaUztE=
Subject key identifier: 33:68:90:44:B4:F7:67:EC:0F:D2:C4:77:8F:EA:1E:F3:74:F4:A9:26
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0194BABB4D6DBB1467BE2A2520E60DBB9178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:24 +0000
Manifest this update: Fri 31 Jan 2025 05:00:24 +0000
Manifest next update: Sat 01 Feb 2025 05:00:24 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: 2Jl9By7pv5oN73iiytf6rwkFczb2Cvr0yRRMNOIv3Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4d:6d:bb:14:67:be:2a:25:20:e6:0d:bb:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jan 31 05:00:24 2025 GMT
Not After : Feb 1 05:00:24 2025 GMT
Subject: CN=33689044b4f767ec0fd2c4778fea1ef374f4a926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:0c:ac:5b:2e:c2:92:ba:92:5e:71:cc:88:
99:7c:17:ab:fd:db:a9:74:6e:05:8c:2a:66:19:44:
0b:69:88:5e:c2:26:c1:ac:8a:56:9c:1a:a4:62:6f:
f8:5f:db:c1:7d:f6:b9:01:7a:23:1c:0c:e9:2f:f2:
4c:8f:d5:30:7d:20:ca:ec:f0:3a:93:e8:66:2f:a4:
89:de:fc:64:ce:e1:fa:36:01:40:9d:25:94:85:06:
4e:1a:dd:e4:c7:61:f9:1c:b1:83:bb:6e:0a:63:05:
4b:e9:ca:1c:cd:6b:69:6d:71:b1:4f:92:a0:f1:da:
bd:61:6b:2f:22:89:0f:66:e6:81:f8:56:0a:05:ac:
83:fc:58:26:0d:c6:4e:e5:e6:70:c5:14:47:99:c7:
ea:e2:6d:2f:f2:5e:97:f2:53:86:50:81:28:5d:c0:
1f:cc:c5:d5:4d:4f:3a:7c:14:61:40:d1:18:72:44:
24:86:73:ec:8e:e9:0a:5a:6f:ac:74:ca:20:6b:36:
b1:bd:c8:a4:f0:ab:2f:c7:b0:94:a9:d8:4a:bd:c0:
48:93:a0:cf:83:ac:bc:70:f3:0e:b1:c8:da:e4:a6:
6b:d6:21:b0:97:ab:98:43:f0:97:3e:90:0a:72:32:
ee:a7:d8:ed:a9:e0:1d:9a:0e:e1:f7:88:a1:58:41:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:90:44:B4:F7:67:EC:0F:D2:C4:77:8F:EA:1E:F3:74:F4:A9:26
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:80:95:40:4b:65:1b:2a:1b:8b:ca:e9:b6:d8:8e:3d:37:8a:
b1:a0:7b:f2:5e:a4:dc:8a:fd:31:78:24:3b:bb:e1:a3:da:6a:
de:ba:1b:a0:8f:9d:b3:75:ce:49:18:64:52:41:7e:8a:b8:66:
fa:69:04:ff:d4:35:a9:19:f8:a8:12:aa:7c:24:dc:4e:4a:63:
e6:d7:e5:8f:fa:c4:aa:af:f1:19:09:08:c7:3a:57:d7:b4:9e:
7c:65:88:d9:66:79:ba:4b:26:dd:7b:9d:ec:5e:a0:da:1b:6f:
a2:ed:f2:97:67:ce:e6:b0:c5:d6:cd:79:d0:ec:65:22:2e:94:
7d:d6:fa:db:27:dc:f7:96:14:3c:f4:61:56:2a:99:a6:10:d5:
05:67:27:46:ae:99:f3:f7:fb:85:58:38:69:66:04:fd:12:4b:
5b:13:c8:74:27:43:7e:a7:68:37:af:44:4c:3b:2a:e4:2c:e5:
97:4e:2f:f2:2f:62:8b:8b:2c:2a:1b:16:0a:ac:36:a3:99:47:
32:75:66:44:6a:3f:9b:c2:45:39:26:ea:97:1e:99:43:ba:ab:
8b:38:88:8f:20:d7:12:52:d7:12:a7:55:98:0c:51:3c:41:66:
f3:c7:86:e0:48:10:cb:c6:26:63:b9:bc:51:f6:50:2c:1e:8f:
0b:7e:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:58 2025 by rpki-client on console-fra.rpki-client.org