Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: zCCdr/c5c90QiKKQCYstITqqNdpF0yB6sgfwB8ohHfM=
Subject key identifier: 69:02:AD:3E:B6:34:D4:BF:70:FB:65:53:CB:C4:1D:C9:17:9E:6D:1C
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 0194BABBB8F1AEA8FB1E5133091C7E71AF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 0F7D
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: 3uazCr/jQ1YM0mcHpBV1uFfzpNQ4cmh6vLIeavGwJqw=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b8:f1:ae:a8:fb:1e:51:33:09:1c:7e:71:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=6902ad3eb634d4bf70fb6553cbc41dc9179e6d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:13:d6:38:60:fd:13:d2:c2:44:c3:18:01:
3c:7b:52:08:93:09:5e:cd:12:88:44:7b:b6:ff:e2:
82:7c:48:79:c7:87:c4:f3:e4:66:e7:82:e5:69:94:
4f:28:bd:fc:7c:eb:11:61:90:33:1a:1a:6b:8f:68:
f4:80:91:89:f7:3a:80:39:61:61:73:86:24:92:03:
f3:8b:de:31:d1:db:38:61:b1:44:b6:dc:b9:20:7f:
65:ea:f0:01:26:a3:50:da:60:fe:60:74:e0:38:c2:
0d:fe:d9:29:a5:47:fe:82:ae:21:4d:59:61:84:11:
05:db:50:83:db:3d:a8:43:ac:a5:2c:20:d8:92:d3:
b5:49:2d:9a:4c:a2:8d:bc:ad:b6:c3:2a:93:29:dd:
df:57:cf:2f:20:b3:53:fc:50:33:73:2a:26:94:e1:
16:42:92:62:88:84:a9:17:b1:8a:39:84:87:05:9a:
43:fd:cd:d1:19:17:5a:90:43:78:f7:54:63:ee:49:
08:05:11:8b:79:a7:2c:d4:f3:b2:b7:e9:61:69:82:
f0:7d:48:51:ed:e0:19:27:da:59:cd:90:3f:51:40:
55:54:12:bd:17:0a:69:ac:c3:7c:05:fc:8e:20:80:
5f:e6:d3:4d:b0:9c:e0:95:4e:01:e5:0c:a4:7f:eb:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:AD:3E:B6:34:D4:BF:70:FB:65:53:CB:C4:1D:C9:17:9E:6D:1C
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d0:5a:fd:d5:f2:03:01:3c:89:72:d0:b5:35:d8:c1:31:2b:
c5:5e:7a:83:99:f4:e3:dc:fc:b7:e2:b8:02:3b:5b:86:30:d8:
b8:ce:cd:21:a7:28:cb:18:ad:5f:ec:19:10:ba:ec:b9:d6:8f:
cd:d0:29:d7:b5:da:5d:b0:11:a5:81:64:b0:eb:c4:f8:b6:27:
2f:47:23:e0:60:4e:b9:8c:f3:55:49:b3:81:a4:dc:7d:f7:41:
68:4e:02:d7:53:fd:c1:70:1e:1e:9f:6a:86:23:7c:51:84:39:
6a:29:07:bf:38:c9:10:3e:a5:95:e0:cc:77:75:f3:9e:29:16:
ba:12:a1:9c:de:51:72:fc:8b:41:8e:7d:12:5a:c7:6a:35:04:
05:27:7a:97:d4:dd:2c:2c:11:09:cc:c8:b4:9d:b1:05:56:1f:
bb:47:8f:7e:ee:7e:15:72:7d:1f:ca:6a:f6:dc:a2:a2:20:7d:
bd:a2:a8:0d:86:02:71:85:b6:bd:f0:66:ba:9a:dd:14:ad:b2:
d2:b4:50:ff:7b:8f:2f:e4:78:3b:2d:a9:55:d6:c3:5a:6d:b6:
da:27:ae:fa:90:ce:b7:41:4a:f9:85:66:0b:c5:a8:9c:85:90:
68:48:e3:cb:db:90:ab:a7:b9:8f:e2:a8:3f:46:fc:12:58:02:
6c:70:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:07 2025 by rpki-client on console-fra.rpki-client.org