Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: 8xrqoSCWeBD2PU6WzRSCxgFLisngrqcYu1YtFXJVrmc=
Subject key identifier: 7A:E7:44:95:CA:BC:98:A6:EB:D6:5C:8C:39:41:96:E2:99:3C:07:A6
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 0194BABBD539EA21AD567B1E9AFFDD9B5698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 0DA4
Signing time: Fri 31 Jan 2025 05:00:59 +0000
Manifest this update: Fri 31 Jan 2025 05:00:59 +0000
Manifest next update: Sat 01 Feb 2025 05:00:59 +0000
Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: duA0QpWzVUJkd4txakhCMej4OIiSp4n+3RX6N8lsYHc=)
2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d5:39:ea:21:ad:56:7b:1e:9a:ff:dd:9b:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Jan 31 05:00:59 2025 GMT
Not After : Feb 1 05:00:59 2025 GMT
Subject: CN=7ae74495cabc98a6ebd65c8c394196e2993c07a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:eb:53:f5:7b:c3:01:38:44:74:d6:81:dc:
04:01:a4:37:06:31:54:62:50:2e:7d:6c:c0:d7:b5:
98:0b:97:d2:94:a3:1e:ed:fe:48:15:29:38:26:0d:
2a:26:f0:7a:f5:00:88:33:b6:0a:88:3b:3b:5f:13:
c9:88:d4:0f:3a:d4:90:ad:98:d2:5f:d2:cb:00:d5:
1e:0f:27:e2:13:f3:32:e4:3d:aa:e4:97:c9:cb:10:
4c:a6:fd:5c:26:1d:8a:a2:fe:fe:8f:c9:6a:c4:71:
8b:0d:89:f3:fa:29:e2:9e:9b:09:cc:3f:2c:f3:f2:
dd:69:a1:53:bc:75:e0:06:e8:dd:3a:8f:ac:de:71:
5c:19:9c:fb:67:69:4f:f4:8c:cf:8f:7d:2b:cf:3e:
0a:fe:04:67:13:12:38:3e:f3:d2:86:a6:41:d9:90:
e7:3a:48:b8:df:9c:80:b9:09:78:e5:4a:d1:fa:cf:
56:67:98:a9:56:e7:9d:bb:8e:b9:64:af:e9:3e:1f:
9f:91:30:39:9d:93:de:0e:86:9c:6f:48:ce:39:e8:
b4:3b:88:f1:bc:a8:4c:61:d9:1e:8d:f6:f2:67:0e:
5d:56:2e:a1:7e:a6:5f:8d:53:f5:86:42:79:69:3b:
23:1c:ac:f2:e4:76:df:cf:f1:c2:47:e5:e5:d1:79:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:44:95:CA:BC:98:A6:EB:D6:5C:8C:39:41:96:E2:99:3C:07:A6
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:c0:5c:41:76:91:c9:65:30:e0:77:32:13:20:0c:4d:fb:
45:66:e4:21:0c:d5:3d:f2:44:58:19:b4:22:d6:5c:ea:37:f1:
f6:3f:d6:52:eb:16:02:e3:a9:60:12:68:66:61:7a:ce:f2:96:
6d:94:33:ed:fc:89:55:8c:75:a4:d3:f5:d8:ad:cd:b3:1c:6a:
9b:61:86:14:8f:32:62:f2:73:8d:3f:de:72:95:63:9c:e6:80:
2b:09:76:da:e5:6e:7b:03:d7:5d:91:04:48:1a:73:35:b4:2a:
f7:b8:b1:bb:1b:53:45:dd:d3:7e:a5:e1:e5:88:f0:44:27:d6:
b4:c1:e2:6a:96:6d:2b:fc:fd:7d:b7:42:83:db:d6:e5:7d:bc:
00:ca:2c:66:80:58:12:0e:a0:91:4d:b4:c3:4d:0d:03:91:76:
59:9b:cd:04:71:e3:8a:86:0c:65:70:1b:b3:50:c8:f0:c2:3f:
90:39:49:30:8b:66:d5:35:24:cd:2b:44:a4:6c:87:f2:15:63:
f6:41:36:22:0e:b5:ed:22:2b:41:21:5c:79:a2:3e:b4:bd:9a:
98:ab:e8:03:60:c0:5e:db:02:35:26:27:a2:b5:f7:ca:8f:11:
97:01:c8:62:b7:92:20:e5:8a:5b:42:10:7b:7a:52:74:15:04:
9f:d4:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:19 2025 by rpki-client on console-fra.rpki-client.org