Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: l9AhtrP2v0poZJIqRU3gME0fqy1X4xAqkuyxlRy0Mk0=
Subject key identifier: FD:37:E3:2C:1F:58:F8:77:B9:76:1D:47:12:76:42:99:41:F8:66:A8
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0194BAF2229673F92C0CE8890355E8BCB1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 09D4
Signing time: Fri 31 Jan 2025 06:00:18 +0000
Manifest this update: Fri 31 Jan 2025 06:00:18 +0000
Manifest next update: Sat 01 Feb 2025 06:00:18 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: COUNShW91BA0LXv+dm+iFsr3Ail47zm/veiLB0quwCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:22:96:73:f9:2c:0c:e8:89:03:55:e8:bc:b1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jan 31 06:00:18 2025 GMT
Not After : Feb 1 06:00:18 2025 GMT
Subject: CN=fd37e32c1f58f877b9761d471276429941f866a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:f8:2f:73:fd:17:63:94:0d:8f:da:96:7b:
3c:0e:6b:c7:aa:7f:0b:22:5d:99:a2:2b:70:24:4c:
ce:b6:ea:90:3e:02:f4:57:ba:0a:51:ed:50:91:75:
95:49:b7:30:ff:0d:61:99:0e:46:b5:e0:b3:3b:ce:
7c:70:bf:53:58:0d:0e:d5:41:98:42:86:71:b9:a1:
fe:c5:68:ca:16:1a:d6:37:31:05:a5:f8:42:01:fe:
9c:95:a6:09:13:ff:31:e2:0f:30:c5:0f:88:33:99:
1d:e0:b2:07:9e:fd:02:71:fe:65:34:76:72:93:ef:
ee:8c:06:e3:36:25:d8:da:fc:a1:9c:85:22:7b:d5:
97:00:c1:d8:a7:a9:da:a3:3b:ad:8c:13:de:41:f3:
a2:e6:c7:6c:91:0a:a3:82:f6:6c:5d:e2:52:94:6c:
6b:94:3e:c8:38:83:66:24:49:8a:04:fd:d3:27:9f:
4f:70:61:fb:fc:cf:1b:ff:56:88:45:71:21:f7:58:
dc:b6:8a:73:5b:ad:80:97:11:63:5b:63:ef:d4:76:
b5:9e:23:b3:ba:e9:e0:1f:12:f4:73:7f:35:de:91:
43:c0:94:25:e2:e3:0b:f9:a0:d7:b6:ae:22:d4:1e:
93:09:34:15:99:ed:ef:b2:d5:42:c6:9d:1a:99:c0:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:E3:2C:1F:58:F8:77:B9:76:1D:47:12:76:42:99:41:F8:66:A8
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d0:76:21:08:ea:63:7c:06:b8:e2:bf:b1:41:91:b0:fc:1a:
65:7d:58:91:1b:bb:3f:f2:e6:b9:c6:2c:be:60:66:aa:99:f2:
ad:6b:dd:1d:e0:e0:86:2c:5b:2b:d4:0a:67:9f:d8:6b:ad:96:
a5:66:4f:5b:8f:18:4a:22:cf:64:f8:e0:38:12:05:5d:59:1e:
d5:7f:2b:78:52:08:21:4b:94:4b:25:e8:38:6a:f6:f9:6a:cb:
cb:e6:3c:b1:8c:79:b3:47:4f:a0:1c:09:86:31:b7:0b:54:8a:
ee:ac:fd:ee:54:b1:5f:8f:45:f3:5c:1d:2f:c3:8a:16:4d:d0:
d2:ea:bb:b0:2a:5b:67:ee:6d:71:8a:29:2f:f4:2b:22:c9:b7:
2b:80:84:c1:db:d4:11:7e:86:dc:08:39:e6:2a:da:24:e5:25:
84:ec:84:c9:70:72:6d:85:d7:35:a4:67:dd:7c:19:99:9c:60:
a0:1d:e8:de:5c:75:5b:5b:cb:37:e6:08:37:5f:69:42:1c:ff:
58:5f:d6:d0:cc:de:39:a1:24:d2:ac:71:01:50:8f:38:fe:c0:
5b:ec:27:54:6b:99:8f:57:6d:79:d5:30:9a:83:a1:0b:20:08:
8e:d3:64:4f:87:04:67:25:46:60:c3:a9:12:54:de:26:64:b7:
30:0f:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:08 2025 by rpki-client on console-fra.rpki-client.org