Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier: NkcoaIz2+BGKNeUOtKdHbDYv042SZL4xfpCQ4T1cR/0=
Subject key identifier: 8D:72:13:7D:09:48:69:FC:5C:41:3E:51:50:CE:C4:98:70:38:11:8D
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial: 0194BA84BEE897C31E143C82E66529CA2FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number: 0544
Signing time: Fri 31 Jan 2025 04:00:49 +0000
Manifest this update: Fri 31 Jan 2025 04:00:49 +0000
Manifest next update: Sat 01 Feb 2025 04:00:49 +0000
Files and hashes: 1: a05D2as5w-ZphYSOJlRsKKwpve8.roa (hash: xvnLmK5XjCaYTBnLCkguyMd5kItynb1Iv2CauMJIpxU=)
2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: UpI//7DH5DkH5TBP+zNlEeA4KLjEQ9h9RvyaMIJ1pnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:be:e8:97:c3:1e:14:3c:82:e6:65:29:ca:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Validity
Not Before: Jan 31 04:00:49 2025 GMT
Not After : Feb 1 04:00:49 2025 GMT
Subject: CN=8d72137d094869fc5c413e5150cec4987038118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:f7:4f:99:4f:e3:8e:60:e0:78:1f:e7:ca:
2e:ea:76:61:66:12:f4:aa:75:c0:ae:7d:a2:94:7e:
b1:70:ac:91:91:29:9b:c9:5d:c3:3f:26:50:a9:3b:
59:e7:57:34:f3:d5:cc:42:21:70:59:0d:a7:3d:20:
f2:e0:80:25:f8:7d:e8:cb:e7:bd:45:1f:a6:ef:7b:
1c:43:ca:54:7b:e4:5a:f7:86:43:4f:a4:39:ea:a5:
8e:e6:9c:96:f9:77:a8:32:1d:77:f5:51:54:ac:4f:
8f:d8:e3:34:9b:51:66:d3:c1:77:ee:fb:a2:70:a7:
6d:c0:29:f1:36:12:b6:b6:8c:51:64:4a:ba:70:c4:
df:a1:35:be:91:1f:23:59:1f:23:f0:60:3b:fc:33:
65:ae:50:31:a7:23:6c:0d:e8:10:a6:4d:33:d5:74:
74:b0:72:3b:0b:63:7a:35:62:c8:55:ce:a0:c4:15:
54:98:1b:2e:12:d3:4d:9e:ce:fc:27:64:ae:cb:a5:
77:7e:64:45:21:d5:03:7d:cc:66:32:0d:b5:36:d5:
80:37:65:f4:f4:78:2c:b3:5b:b9:de:54:41:d8:0f:
95:db:08:99:65:72:24:30:49:8e:02:91:cf:82:e4:
7e:a5:2d:42:b0:a7:d5:e9:e8:58:ef:33:0c:ff:80:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:13:7D:09:48:69:FC:5C:41:3E:51:50:CE:C4:98:70:38:11:8D
X509v3 Authority Key Identifier:
keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:08:29:d9:13:db:7a:60:82:73:a8:ac:13:5f:ec:f3:54:d9:
16:0d:4a:dc:ed:4d:5a:fa:33:be:a6:a2:38:93:00:2c:99:04:
6a:ec:8d:68:b5:0d:41:e5:d6:62:d6:91:a2:06:8e:67:42:c1:
ec:c2:bb:b5:ae:cf:75:d3:e7:b6:10:50:7f:c4:3b:1d:d3:1e:
01:ca:76:a3:87:6d:a7:28:94:0d:54:3c:2b:d8:06:e0:a9:e6:
7a:3b:b2:36:96:f0:09:af:02:5a:01:b8:54:b3:a9:45:5e:ee:
db:74:81:cc:59:57:f9:e5:ca:57:87:e0:b6:6a:58:0f:8e:36:
b5:ee:90:42:cf:b7:95:43:13:97:64:97:17:9f:a9:7f:38:fc:
ae:01:72:58:b5:9a:6f:57:77:a1:53:0f:fb:f0:92:94:ab:22:
9e:56:85:aa:da:a7:6b:19:93:12:3a:63:3c:1a:0b:9a:16:7e:
4a:40:a7:5f:f6:8e:0a:79:c5:4c:0f:41:1e:8d:a0:97:19:f0:
19:e4:c4:a4:a7:98:66:f9:4c:9e:72:f5:a0:6b:89:cd:67:75:
0c:ac:16:cf:99:f2:96:1d:16:c2:c2:fd:77:54:63:d2:fc:5b:
00:bc:8b:bd:a1:55:71:31:5f:72:52:77:20:0a:41:98:3a:e4:
ac:02:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:13 2025 by rpki-client on console-fra.rpki-client.org