Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier: fmndblMy0q+cl54mcZ6Loav+owU/i6hGOzPbaxrwOts=
Subject key identifier: D7:AD:BC:C4:EB:9F:2B:13:1F:84:4B:8C:7D:EC:CE:35:70:FC:85:83
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial: 0194BB293EE6821E02537A2EFC7EC412E5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number: 0F41
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=)
2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: XeDUCcKBl1HDLPnK5+J0zAHk8n/A70Hw4ZIdCW2o8VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3e:e6:82:1e:02:53:7a:2e:fc:7e:c4:12:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=d7adbcc4eb9f2b131f844b8c7decce3570fc8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:c7:ad:34:09:1b:55:29:16:96:ee:68:df:
e4:21:7e:16:49:b8:a5:69:6f:ea:51:85:fc:86:e4:
e9:fa:14:01:0d:61:f9:f3:ed:ac:97:a8:cb:fe:2c:
75:74:30:61:f9:31:62:d3:09:0b:79:ed:c4:7d:a5:
5c:55:9c:be:57:d7:fa:6d:2e:0e:ce:63:90:1b:3f:
dc:c2:02:4c:5f:cd:bf:3b:23:29:b6:d2:22:d8:18:
6e:d7:0f:ff:5a:fd:53:bd:2a:eb:b7:c9:6d:b2:7c:
03:12:d3:0d:05:dd:bc:be:a9:81:07:89:48:52:c7:
17:01:d1:bf:2e:dc:65:47:28:b2:df:c2:8e:66:75:
f3:b3:ff:d4:25:5b:a2:92:e2:d4:84:dc:e8:06:7c:
5b:da:c9:22:fa:3f:80:de:0c:19:87:ba:a1:31:a7:
72:59:4d:63:2f:9e:26:fc:98:4b:0d:ab:d0:4c:98:
f4:39:ee:df:f9:07:a2:ff:35:80:81:10:b3:38:f6:
aa:22:fc:1a:d5:52:a9:03:fc:c1:13:c2:a8:bd:c6:
90:05:f3:f0:db:73:1d:36:79:e2:f9:94:9c:b9:b8:
07:b4:c3:34:93:3d:4c:38:aa:8a:2c:8e:33:80:c0:
1d:e8:7d:35:4b:0f:a3:71:d7:9a:94:7f:83:60:66:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AD:BC:C4:EB:9F:2B:13:1F:84:4B:8C:7D:EC:CE:35:70:FC:85:83
X509v3 Authority Key Identifier:
keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:57:a5:be:cd:c4:56:5b:f3:88:be:b7:f1:2c:c3:7d:3e:
66:e0:e9:00:fe:c4:bf:68:94:16:2d:ae:12:5f:6d:fa:27:51:
bc:dd:1b:63:78:2c:0d:29:08:04:d8:03:8f:79:43:68:4c:26:
62:d1:0f:a2:d3:d0:92:3e:dc:5a:a7:95:b4:62:23:04:a6:6d:
a7:f7:6b:7f:40:fa:9c:af:38:3c:e6:70:16:36:60:ab:c2:03:
39:25:50:3e:df:8d:5f:cf:2d:55:31:e8:00:ad:3e:17:52:c1:
ce:9d:5a:7d:1b:5f:e9:c5:d7:f3:82:d0:9a:11:11:55:c3:b6:
44:c0:fd:66:e4:48:d3:36:b6:d1:7d:f4:0f:d8:a1:fc:5b:6d:
4c:14:a4:d8:d4:2d:89:6c:f3:60:86:96:26:23:e1:6d:e9:b1:
e7:ec:27:40:a1:1e:a7:b8:7a:de:49:45:fe:b0:fa:bc:72:64:
8d:5b:0d:9c:a4:43:ed:57:47:81:98:e3:51:6a:b4:8a:4d:36:
6f:c5:39:d6:34:7d:6f:7b:3c:4b:bc:a6:c9:20:9a:29:08:9d:
19:29:92:f7:a5:f6:c6:bc:3e:35:c9:ce:05:4d:27:ef:a4:21:
d6:2e:1a:f0:f0:86:31:ba:8e:bd:e0:c8:df:12:e6:ee:db:3e:
57:24:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:51 2025 by rpki-client on console-fra.rpki-client.org