Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier: 5c0+mXp8CmpqcD7EpjMXj9gZOhvj8a2yFHOTE05DJqM=
Subject key identifier: E8:1E:4A:9F:CF:FE:6E:17:74:4A:CE:1B:E1:94:14:B9:BC:05:FF:6A
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 0194BB60274E34B772478018F2C0BC6C66C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 08:00:28 +0000
Manifest this update: Fri 31 Jan 2025 08:00:28 +0000
Manifest next update: Sat 01 Feb 2025 08:00:28 +0000
Files and hashes: 1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: YlE7X/TUzv4gJ2jJqeqIdrD1DwYUN9eHVYuVg0mwiVs=)
2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:27:4e:34:b7:72:47:80:18:f2:c0:bc:6c:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Jan 31 08:00:28 2025 GMT
Not After : Feb 1 08:00:28 2025 GMT
Subject: CN=e81e4a9fcffe6e17744ace1be19414b9bc05ff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:84:95:20:f1:2e:c4:5b:da:66:e7:54:66:
18:d2:b1:70:6f:a3:15:60:dc:f1:be:89:c1:c8:dd:
a9:ee:68:ae:a2:49:f6:a1:31:b7:54:45:c7:6a:74:
4c:43:b2:32:b6:8d:b8:7c:2d:60:64:8c:a3:a1:cf:
2d:24:74:7f:97:7b:17:79:10:62:9a:0f:76:6c:60:
73:d7:92:9d:ba:c5:64:a2:08:3c:fe:b8:02:1f:8f:
87:78:c9:97:fe:92:a2:0d:ac:0b:53:e7:54:f9:2e:
2e:b9:65:97:8c:e8:cd:a7:8f:92:94:54:a1:c4:de:
46:a0:db:54:f9:9d:cb:b1:db:06:9a:ca:be:3d:aa:
6d:c9:98:da:de:1c:f5:07:bf:59:cb:af:cb:d2:31:
f6:04:42:c3:df:ee:9c:8d:67:21:06:b1:be:3e:f6:
bb:aa:92:af:d6:a0:6e:37:76:40:6a:40:97:70:e8:
ef:cf:84:a4:73:88:45:2b:95:89:18:f3:d2:75:8a:
87:74:d5:1f:ca:47:1e:e3:6a:6f:2b:64:7b:e6:65:
e9:a4:1a:53:c7:62:66:ce:46:f5:92:a5:ff:b3:49:
5c:ce:29:ad:c4:6b:2c:9d:89:46:0a:e3:cf:0b:e5:
67:34:41:93:8e:06:0d:1d:19:7c:4f:45:5e:4f:1c:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:4A:9F:CF:FE:6E:17:74:4A:CE:1B:E1:94:14:B9:BC:05:FF:6A
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:64:a8:84:a2:67:17:97:86:71:d6:ec:50:48:e2:55:a6:e5:
2a:1a:da:62:5f:fd:77:a3:31:93:e6:24:46:65:b0:37:ff:ac:
50:d5:2d:67:41:f1:9e:d3:48:8b:50:db:46:db:5c:4a:e2:bf:
3d:0e:be:44:fe:d2:4f:7c:0f:05:b9:bf:3d:a8:6e:78:d6:9f:
93:8d:62:0f:05:5f:2e:44:ba:4f:b6:d1:9b:3d:bd:5c:45:53:
20:2d:fc:65:77:90:93:d5:15:a9:67:41:e6:26:d1:66:8a:0c:
8f:7a:2a:0d:33:c2:ee:12:48:d2:6e:b1:e5:54:51:d7:4e:b7:
55:e4:b1:fe:41:fd:e7:db:8c:83:fd:43:a9:46:95:11:45:b1:
4b:9d:1b:8f:9c:64:8f:c7:23:3f:b1:ea:45:fa:3e:e7:06:63:
7d:f6:c8:ef:2d:8c:05:78:00:00:c4:92:5f:10:ac:33:49:80:
dd:e5:53:54:02:13:30:74:3d:cd:52:41:6c:58:4d:30:22:bc:
d0:0c:a1:d1:ef:b8:70:50:be:cf:d5:f3:26:a6:e7:e9:fd:0f:
36:e0:2f:5f:1b:4b:5f:e1:9b:4f:7a:09:8c:a4:51:e4:68:38:
c2:0c:a3:ef:eb:07:e1:2c:50:3e:15:88:ae:ea:8c:fc:c7:35:
95:fd:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:53 2025 by rpki-client on console-fra.rpki-client.org