Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: KqJiqOtOQ9Ym8F5HT2tzbFU1wwEnCMmViTvBmZA80I0=
Subject key identifier: 1A:AC:C3:45:41:70:A7:AA:04:C2:D7:C2:45:9B:3B:54:85:BD:C0:A7
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 0194BB603A68F12F3F81796F4AF42260BA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:33 +0000
Manifest this update: Fri 31 Jan 2025 08:00:33 +0000
Manifest next update: Sat 01 Feb 2025 08:00:33 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: r08rCo5ELJi3CSLJLn9+b/qAVbzFaC5FAzKudHH9+X4=)
2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3a:68:f1:2f:3f:81:79:6f:4a:f4:22:60:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Jan 31 08:00:33 2025 GMT
Not After : Feb 1 08:00:33 2025 GMT
Subject: CN=1aacc3454170a7aa04c2d7c2459b3b5485bdc0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:e6:ba:1c:f0:06:5c:de:e8:07:4d:aa:70:
fa:4e:53:6a:2a:eb:bb:52:38:1e:80:bd:f8:17:35:
37:5f:62:5e:b9:7f:b0:73:96:7e:2f:a9:f8:3c:47:
48:ad:ce:cc:2f:a9:f2:c4:4f:73:0a:d0:70:da:ba:
84:bf:8b:d3:69:f8:56:86:60:e5:bb:eb:0e:51:09:
37:e0:d7:8f:b0:b1:89:a7:a9:fe:c6:57:b4:98:a3:
58:52:0e:e7:06:e8:03:46:e8:c7:1e:78:36:7c:9e:
58:7b:eb:f5:c1:b5:6d:ca:36:6b:58:ad:c4:9b:b4:
74:d8:c0:1a:96:f5:c7:4f:7f:96:9f:16:4f:49:db:
b4:df:96:c4:7e:9f:b9:7f:76:85:a5:4b:20:bb:b8:
3e:0f:1f:bf:f5:91:fe:46:41:ca:2f:4e:fe:bc:c7:
c2:cc:f0:15:a8:00:08:1c:63:25:0b:38:a3:2b:13:
8c:13:96:de:f9:51:ea:13:85:54:e3:54:61:28:83:
80:bf:ed:c8:b0:67:0b:ea:58:c6:b4:76:fe:78:92:
06:3c:d0:46:e3:6c:1b:15:63:52:c2:36:6a:e5:70:
48:95:fb:f2:59:a0:bb:90:38:35:cd:31:0d:48:27:
61:ba:15:e6:84:21:2b:0d:ea:07:9a:e8:7c:cc:25:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:C3:45:41:70:A7:AA:04:C2:D7:C2:45:9B:3B:54:85:BD:C0:A7
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:f2:bd:fa:94:9c:56:a7:b7:64:46:d1:55:ec:46:db:11:
a6:78:72:d0:23:fa:31:60:3e:54:a3:fe:fa:95:e8:7d:3d:d7:
b4:5b:29:b2:ed:20:dc:f9:f7:91:a1:56:a3:e3:c9:ba:41:66:
43:fb:90:a4:a0:e2:42:1c:2b:9c:23:e3:ff:5f:bd:d8:1c:6b:
81:f4:e5:21:19:b2:a6:8e:ba:8b:bc:d5:18:f2:96:20:94:da:
48:b2:41:86:be:f0:45:c0:3c:52:b0:0d:5a:1c:2a:8b:00:7c:
cd:ab:7b:ff:fb:7f:df:4e:a8:5e:ff:e7:2c:86:18:bd:4c:f2:
5b:34:cd:5f:ce:ee:81:ba:f8:2c:ef:3a:78:49:c9:b5:2d:6a:
97:43:52:05:7a:20:a9:1f:2b:60:06:a8:f8:2e:d7:e9:63:5c:
94:06:26:b7:10:ce:82:31:b2:14:49:da:c0:6a:9a:eb:8c:ac:
62:4a:52:09:90:69:8d:b8:d9:e7:51:9d:d9:5c:1a:2f:20:f5:
a3:1d:a7:b2:f8:35:9c:7f:35:fc:03:5e:3b:e0:c0:8d:d4:93:
b1:77:79:a6:ca:9a:15:60:02:7a:9a:5b:39:df:24:95:1c:41:
51:a4:ff:db:dd:da:bc:ef:63:50:3c:5f:ae:b2:f3:84:9e:51:
03:15:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:27 2025 by rpki-client on console-fra.rpki-client.org