Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: vAf6uf53TNxZ3gTlZQZk/PII8dfjDYJpN0u7d/A/8+s=
Subject key identifier: 13:4A:EE:D8:74:3C:D2:D9:7D:6E:41:A8:B9:F4:88:C5:28:77:36:7B
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 0194BB29893DBD374C19CE600BE8A0341086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0B4F
Signing time: Fri 31 Jan 2025 07:00:48 +0000
Manifest this update: Fri 31 Jan 2025 07:00:48 +0000
Manifest next update: Sat 01 Feb 2025 07:00:48 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: rA/66XqRRZUDG79vIlUN3ZJdm9TZRcXqs29Caz61c/0=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:89:3d:bd:37:4c:19:ce:60:0b:e8:a0:34:10:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jan 31 07:00:48 2025 GMT
Not After : Feb 1 07:00:48 2025 GMT
Subject: CN=134aeed8743cd2d97d6e41a8b9f488c52877367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:5c:46:dc:12:80:38:3c:de:da:9b:d9:6f:
1c:5b:38:f4:ce:85:5c:86:ed:00:6c:b6:7b:73:0d:
ff:78:5e:1b:0a:f2:e6:5e:9f:fa:4f:e7:78:38:a0:
cb:3c:7b:a8:20:74:2c:5b:9d:03:2f:2e:4c:f9:e6:
3d:49:95:05:27:2b:dc:12:e8:75:0b:d0:af:bb:c9:
84:74:cb:c3:04:4e:e6:e8:e6:5c:af:32:4a:38:e1:
b2:3d:10:51:f9:00:0f:df:32:7c:c3:55:0c:93:c4:
fc:81:f4:ed:f7:39:0e:e4:4b:8d:ce:94:27:32:a7:
a9:b0:11:db:39:f7:52:33:eb:05:f7:e0:27:35:39:
ae:55:99:84:06:8b:c1:2f:00:53:9b:9f:25:39:5d:
f9:5c:0e:9f:ce:7e:fc:ba:92:40:55:69:90:8e:3c:
78:f5:38:56:06:02:d3:cb:fd:f0:a4:7d:71:ea:cf:
66:ce:26:28:cf:2d:0c:63:d2:fc:13:70:16:fd:80:
3e:f1:71:58:62:e1:91:20:ba:7a:12:9d:83:cb:db:
e5:ce:b9:ec:b3:78:11:fb:e4:42:68:17:16:c1:bc:
3e:cf:d0:63:26:15:19:d4:2a:e4:f3:98:fa:d2:c1:
70:02:a5:62:9a:09:47:b7:87:6a:44:8f:b7:c9:e3:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:EE:D8:74:3C:D2:D9:7D:6E:41:A8:B9:F4:88:C5:28:77:36:7B
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:be:cf:69:53:e8:4b:55:13:8b:16:b2:9f:0a:1b:f3:7f:
25:de:38:c6:0a:46:e4:f4:4e:40:e7:1c:e2:9c:2c:5c:93:f3:
af:df:15:c5:36:93:fc:ea:db:33:e6:e7:ad:8b:97:e4:8e:64:
2a:f3:ac:69:e1:1e:89:bc:54:9a:ce:ce:97:69:1d:ad:f6:8e:
23:4a:69:16:ec:fb:7a:40:93:c6:72:57:e0:5f:e1:72:be:29:
49:d2:3b:8e:91:75:4e:70:98:0b:3d:6f:9b:ba:83:8c:af:87:
e9:b0:fe:0c:ab:e4:12:4f:21:39:60:93:b8:08:0e:78:d2:0b:
63:96:67:2e:30:98:2b:82:b8:dd:9f:64:4d:f2:ba:95:cf:bb:
f7:b4:8c:ca:80:0f:9a:59:4b:83:1a:20:e5:66:88:91:32:4d:
82:fc:38:28:56:2b:6a:d1:6b:6f:0d:b5:88:a5:8e:56:33:f9:
14:50:77:02:4d:d9:f7:bb:77:94:fe:c6:d2:38:0d:da:0a:8e:
34:ef:c8:f3:34:65:2c:06:10:75:f9:0d:33:e6:92:8d:af:f0:
bf:be:31:6d:f9:dd:a7:53:78:16:2e:8c:34:bd:69:2b:b5:87:
3e:55:49:cf:05:47:df:a2:30:d8:c1:cb:d0:20:7f:df:d3:ab:
d2:70:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:21 2025 by rpki-client on console-fra.rpki-client.org