Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: Hw8w/ys/Gw5Lkjea59inh2xmMtzJMdExZHQqY74GrOQ=
Subject key identifier: A5:D4:EE:00:F5:3A:73:DC:B8:43:FE:E9:B9:7B:77:5F:0A:DC:21:32
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 0194BAF20D4E81DD39669EF36DDC685AA412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:12 +0000
Manifest this update: Fri 31 Jan 2025 06:00:12 +0000
Manifest next update: Sat 01 Feb 2025 06:00:12 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: blnaLvNsk7C6ijpNhMrwwgHcfs+6qni5L1WSED0t9wI=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:0d:4e:81:dd:39:66:9e:f3:6d:dc:68:5a:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jan 31 06:00:12 2025 GMT
Not After : Feb 1 06:00:12 2025 GMT
Subject: CN=a5d4ee00f53a73dcb843fee9b97b775f0adc2132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:0e:fb:64:df:e7:70:80:b3:df:ad:51:8d:
39:84:76:13:df:c3:a4:27:6d:b4:31:7d:e7:9d:db:
f8:25:f8:cd:c0:fe:41:b0:88:2f:4a:72:24:53:ed:
9f:ec:e7:f7:9b:30:8e:41:4b:6c:1b:2e:70:7d:c2:
79:1c:9b:ef:76:11:d1:15:68:34:ae:78:fd:b5:0b:
5e:5c:5c:1e:eb:cd:e5:75:c1:33:70:c8:70:f9:6d:
f5:d7:ea:44:e1:df:df:87:b0:ba:42:1a:a2:bc:29:
ad:2b:47:fe:a9:70:16:ae:09:c1:12:bc:9f:85:36:
9a:50:ae:d4:6b:d1:b1:f9:8c:a2:8f:7a:dc:7b:d4:
d6:7b:1e:22:31:88:47:61:a1:7b:e8:05:f3:04:5b:
36:a9:9f:a8:ef:91:80:d1:81:44:f8:52:67:69:50:
c1:e4:fb:72:b2:c2:9b:d3:a6:b9:b0:fb:0e:02:5b:
ad:8e:d2:9a:c5:d3:80:c8:e6:1e:11:e8:a6:ec:b6:
a2:56:b7:13:a9:74:9a:c0:50:2a:38:45:25:bd:0d:
5c:72:96:10:74:be:f5:54:4b:1e:43:4a:9b:a8:23:
0c:58:4d:ba:73:68:d0:15:bc:25:8a:cc:11:87:7d:
61:72:a3:73:a7:26:e1:a2:81:d5:65:7a:27:4a:bc:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:EE:00:F5:3A:73:DC:B8:43:FE:E9:B9:7B:77:5F:0A:DC:21:32
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ee:da:6e:f1:d2:cc:b7:f5:09:ae:91:cb:4a:0f:2d:67:1f:
84:86:fd:90:be:77:9a:c0:0a:44:bd:99:58:95:0f:0d:bf:f3:
22:44:c3:8c:4f:83:3b:10:3c:0c:e1:0e:47:93:95:c9:91:af:
02:33:81:4d:37:69:1e:76:89:ec:85:a8:41:bf:89:39:35:d4:
0b:dd:15:f1:5d:d3:a5:b8:61:ce:9d:ef:41:0b:4e:36:bb:e7:
63:d0:7b:a4:33:8b:0a:22:4c:68:36:b8:61:de:b2:d7:d4:d3:
d9:75:c8:e5:56:05:34:2f:22:59:37:45:29:ff:85:48:18:ac:
bd:ef:e9:43:f6:4a:ba:f8:3b:fa:93:0d:4c:61:07:3c:08:e4:
09:91:8e:e2:14:dd:b6:50:8f:b7:26:d7:28:8b:5c:79:ba:7f:
ee:57:e9:3a:9e:d3:1f:f7:f9:a0:60:60:da:0b:40:2c:96:af:
76:c0:5a:bc:f0:6b:aa:cf:2b:23:57:a6:0f:b2:e7:90:72:46:
ad:25:30:98:1c:42:b8:62:61:64:a8:b6:ba:79:86:6a:10:06:
7d:0e:74:99:39:e2:0a:9d:a5:c2:3f:45:79:1f:6c:94:60:b0:
cd:e3:e8:8f:aa:3f:5a:a4:d9:b6:e0:79:c1:a0:23:01:eb:aa:
c6:ed:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:11 2025 by rpki-client on console-fra.rpki-client.org