Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: /gWFw2blTZkdgYjGZaL5/9gnUzVV1UdvtFCtE+Ltjq8=
Subject key identifier: 05:88:06:65:B5:7F:7D:D8:E7:89:92:92:C0:AF:B3:68:63:69:7A:78
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0194BB29844E79683F4CF67E734897A98D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0A31
Signing time: Fri 31 Jan 2025 07:00:47 +0000
Manifest this update: Fri 31 Jan 2025 07:00:47 +0000
Manifest next update: Sat 01 Feb 2025 07:00:47 +0000
Files and hashes: 1: 9XB5L2BKr8qvjKYU2Uioly6fY1U.roa (hash: tKzpvJI6ftqAt+HOqzK+2PC1tLhzH4FaMM6p7/zTUWE=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: Ta2WQ13xgxzyY/BkwFlwnziHWkiHQKyOJJX51q3OHmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:84:4e:79:68:3f:4c:f6:7e:73:48:97:a9:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jan 31 07:00:47 2025 GMT
Not After : Feb 1 07:00:47 2025 GMT
Subject: CN=05880665b57f7dd8e7899292c0afb36863697a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:49:5b:8f:fb:92:8e:31:00:d8:95:95:27:
93:82:6e:77:fe:9c:c7:29:78:61:37:35:77:01:ae:
a7:56:e3:a7:01:89:e8:3a:ac:de:a8:61:66:fc:54:
f1:3c:d1:db:6c:27:b2:87:29:69:d3:0e:ab:15:2d:
97:9c:06:71:8a:37:a4:ed:8c:9d:c9:59:80:29:97:
4f:84:6d:e4:0e:e6:64:a3:2f:ca:f9:46:c7:b0:a4:
97:49:fb:1c:df:5a:a5:e5:60:a0:f1:6a:c7:50:2c:
76:bd:8a:d7:94:1c:bc:90:ca:97:48:1c:72:81:4b:
42:12:f7:17:43:87:2d:77:51:03:a4:67:5c:f4:a7:
e0:d0:66:9f:a3:90:13:ce:a9:49:92:85:5e:ca:bf:
2f:08:50:56:dd:8b:f3:2f:3b:02:0c:63:fb:5b:fa:
ff:b0:76:95:2e:a9:85:c3:4a:94:d1:f2:84:66:f9:
e7:cc:1d:1f:3d:10:07:5d:d4:72:0c:5c:fe:af:77:
a7:99:f3:2f:95:70:e8:82:e6:c5:93:db:a6:51:8b:
06:e2:ae:a3:d4:4c:c0:f6:9f:ba:6f:9e:73:08:23:
1e:c6:30:98:46:1c:5a:6e:c3:47:df:3a:df:72:dd:
4e:e9:10:ff:a7:99:e8:aa:ab:fa:86:7e:e8:ab:55:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:06:65:B5:7F:7D:D8:E7:89:92:92:C0:AF:B3:68:63:69:7A:78
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:76:e5:e0:db:fc:dd:d3:f4:55:d6:d0:7f:d2:a1:fd:47:
81:c0:24:62:5a:09:1a:71:77:e0:de:9b:b8:30:2f:be:6d:07:
70:b7:19:b4:e0:05:d6:e2:3a:90:64:ce:f3:46:2a:ca:42:12:
d9:fe:6d:d7:45:48:85:b2:3f:0a:d1:31:b3:96:81:5e:c2:70:
8b:18:02:5d:ac:4e:19:8b:66:98:80:b4:e6:d6:a5:52:1b:12:
ca:ca:b2:b2:26:b0:e1:c0:e3:fd:c6:17:cd:c5:f6:fc:68:d5:
97:79:c8:4e:8e:ea:7c:aa:c0:07:ec:ac:71:7d:89:d5:d3:40:
24:27:3c:cd:1d:ed:da:aa:61:a0:4f:b6:a5:4f:85:b5:39:c8:
d7:0c:f3:07:f9:95:95:61:b3:ac:ee:df:4c:04:a1:05:b8:fb:
6e:4f:04:49:29:16:c5:48:26:67:61:e7:d9:0c:6e:e3:ac:e2:
4a:05:7b:ca:da:96:d3:a2:82:64:5e:cd:34:eb:fb:b2:a6:ad:
a6:6f:15:df:03:40:cd:93:ea:f2:db:ca:91:ec:87:45:f6:10:
50:f8:c4:5a:ea:22:0d:f5:f8:f7:ce:61:8b:5f:4c:1c:1d:ee:
ce:25:b4:0d:40:0d:ac:bb:ca:87:cb:fa:3a:dc:21:5c:a1:23:
40:9f:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:56 2025 by rpki-client on console-fra.rpki-client.org