Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: ysvSO3ORLp/M1WKQX53b3WKWumfavlum5xm+P62sGPQ=
Subject key identifier: 6C:1C:51:20:4F:36:B5:30:AD:A2:B3:AA:25:58:7B:99:2A:08:10:2A
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0194BABBDBC90B8B0DDC5F38CFE7CC3375FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:01:01 +0000
Manifest this update: Fri 31 Jan 2025 05:01:01 +0000
Manifest next update: Sat 01 Feb 2025 05:01:01 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: YWYyVltFbW+fIP28B23Kwyx22paXKjFIwiZm24UoVX4=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:db:c9:0b:8b:0d:dc:5f:38:cf:e7:cc:33:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Jan 31 05:01:01 2025 GMT
Not After : Feb 1 05:01:01 2025 GMT
Subject: CN=6c1c51204f36b530ada2b3aa25587b992a08102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:1e:85:a6:ea:c3:0c:5a:fa:96:1c:d5:43:
7c:b8:64:bf:26:0c:f0:3e:52:84:16:1c:4d:68:37:
0e:23:ec:dd:0e:8a:a8:0c:61:43:94:42:f7:69:6f:
76:1c:20:9d:06:2a:e5:5f:35:e3:03:f6:e4:57:73:
71:c7:16:c2:79:1f:cc:21:c7:bd:19:17:92:3f:85:
e5:40:6f:59:28:d3:4e:ab:31:3e:7b:70:23:f5:4e:
d0:01:e3:e7:65:77:c2:7c:03:f2:58:e8:97:9a:f9:
69:f8:10:91:f2:cd:99:bb:93:ef:16:8c:be:fc:b8:
d4:85:1a:3c:86:3c:36:dc:45:cc:21:40:47:c7:d5:
89:a2:4d:d9:d1:6e:7a:20:7e:b8:69:17:60:6b:cd:
57:14:7c:c7:ec:5a:ae:ad:66:07:68:ce:66:72:d6:
ca:4c:bf:52:28:10:93:29:a4:ce:35:12:f1:71:c9:
88:e7:fb:3e:44:28:8c:93:ab:d2:52:69:38:a1:5e:
bd:ed:1d:80:4d:d8:04:c7:c1:8a:88:ab:c3:01:d0:
4c:1a:35:ef:2b:71:66:29:e2:36:ad:c1:45:eb:09:
f7:71:55:34:66:02:a8:dc:96:22:d2:df:e3:01:04:
5e:32:21:a0:d1:db:45:25:33:d3:11:4b:c0:51:90:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1C:51:20:4F:36:B5:30:AD:A2:B3:AA:25:58:7B:99:2A:08:10:2A
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:23:6b:6a:2b:38:6e:3c:6c:ee:78:05:0d:15:c7:b8:d4:95:
90:88:14:23:04:7c:ec:2f:c3:36:2c:a6:67:d5:6b:7f:86:aa:
73:88:b8:38:5d:9d:bf:3b:65:2b:6b:8f:54:12:36:25:63:16:
c5:cb:ff:ca:ef:1f:24:61:e7:c5:96:3e:34:ff:30:37:4f:da:
dd:c7:3c:9c:83:6f:06:78:14:36:c8:c4:13:28:45:97:58:6f:
6f:ad:5c:1f:91:76:18:4b:1d:77:86:ad:f3:80:27:70:f2:55:
51:4f:6a:b5:d4:20:5f:46:aa:44:76:2f:ff:9f:21:cf:1c:26:
ce:8d:40:89:cd:c7:0d:b2:9b:a6:c6:b9:1e:3b:21:b6:72:30:
34:31:9b:df:f6:9d:88:5d:49:ff:a0:9b:c8:de:6b:85:6c:9e:
17:56:34:98:04:e6:e8:ca:27:bc:48:c4:97:8b:1d:0b:f0:eb:
09:4a:0f:95:d8:65:a4:07:f1:c9:9d:f1:00:87:72:14:10:1c:
05:0e:b3:04:da:7e:ac:23:a4:69:4d:a0:ea:ab:dc:31:18:14:
b6:74:74:fb:e6:c5:2e:9a:45:ba:29:37:7d:50:96:47:8f:4b:
0f:e8:d7:6c:4b:3a:5e:aa:17:67:12:26:1f:43:16:74:52:2a:
c1:26:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:06 2025 by rpki-client on console-fra.rpki-client.org