Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: Naat9Z46CFMSNoB+Xr9fL4tg3WnD1zEq/HQKmlPTclE=
Subject key identifier: 58:D0:81:36:A6:48:5B:44:0F:58:3D:AF:95:6A:74:25:56:9A:68:3B
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 0194BB2906C5D0D2BA5A8279A462F9B8D239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 1050
Signing time: Fri 31 Jan 2025 07:00:15 +0000
Manifest this update: Fri 31 Jan 2025 07:00:15 +0000
Manifest next update: Sat 01 Feb 2025 07:00:15 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: GrrI5IVjhbU8H8fCRb6lK5vtHMcXWO9NJIK+HH2tt/I=)
2: to47JCc_e9Qrrg2tVbeiwG63wsQ.roa (hash: tHKJZVV0X66uh963WSmhjzD4IRWkIMFnLIgcHV2NkJM=)
3: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:06:c5:d0:d2:ba:5a:82:79:a4:62:f9:b8:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jan 31 07:00:15 2025 GMT
Not After : Feb 1 07:00:15 2025 GMT
Subject: CN=58d08136a6485b440f583daf956a7425569a683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:69:04:70:d7:b6:71:fa:47:57:e1:d4:0d:
e9:8e:aa:9d:b2:9e:cd:5e:5f:a1:89:d4:c1:cd:72:
26:a8:90:17:6d:12:18:87:d4:ec:9c:e6:64:0a:d6:
18:0a:1e:4b:cb:4d:3a:7b:e9:b6:0a:4e:69:36:90:
4f:ae:1b:f5:f3:94:73:f2:ca:1e:77:27:f5:5d:a0:
5c:ec:79:af:7f:43:b9:4c:44:5b:56:ab:28:df:86:
01:cb:58:40:4d:85:61:7d:99:81:0a:3c:a8:56:8e:
cd:18:8b:3c:1c:32:86:c9:27:ae:dd:0a:6f:78:8a:
ec:a6:73:f5:18:4f:96:64:60:c4:99:bc:f9:97:5c:
97:46:31:58:93:fc:fd:b1:df:30:64:91:97:e9:e1:
b9:5e:fe:e7:0f:fd:fa:f9:b9:a5:f1:87:51:b6:cd:
38:61:32:6c:98:fc:6e:76:53:fb:cd:78:2a:29:8b:
b8:a6:f9:94:55:94:d1:89:5b:94:e9:26:9f:f8:d2:
e1:00:af:2b:64:0e:54:01:ea:c8:7e:d3:a4:12:ca:
b3:71:2a:c2:97:4f:69:d3:e6:9f:8b:ca:86:da:b6:
a4:e4:c6:5b:dd:b8:8f:d8:7f:a5:cc:4f:9e:77:71:
bf:00:10:9c:58:52:e1:f2:53:b4:f5:ce:a0:13:e4:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:81:36:A6:48:5B:44:0F:58:3D:AF:95:6A:74:25:56:9A:68:3B
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f8:23:d0:2c:31:21:82:26:e3:ed:e7:18:f2:eb:80:df:a5:
f8:ab:9b:5b:3e:6c:1a:02:94:eb:d2:8a:dd:ba:25:15:db:c6:
f5:a3:64:07:5b:e8:dc:e5:56:84:28:45:3e:2b:34:3f:ec:48:
22:a6:43:80:8a:44:3d:04:88:4c:4f:a4:f6:c9:e2:0b:7d:7a:
dc:49:1e:8c:b5:ef:13:23:bc:52:02:02:b4:3f:d2:f9:0f:e1:
1e:65:5b:92:52:a3:d7:74:ab:06:0a:fd:21:f7:9c:7f:7b:ea:
2a:fe:d9:c2:78:4a:7a:5f:a2:b4:8a:7e:9a:7a:34:ff:d4:75:
89:ca:3c:7b:ee:2e:b4:3c:26:53:4c:31:7d:dd:73:e9:5c:26:
63:43:ee:44:82:60:37:05:5d:10:c4:53:99:2b:dd:95:a2:1b:
d6:86:37:ce:40:32:de:a7:46:c7:19:23:3a:48:05:1c:38:81:
4a:a5:b6:8d:8f:e7:83:64:68:ea:44:e6:29:1e:d2:00:18:32:
20:db:eb:f0:b7:3f:78:d4:7c:1a:f1:74:7c:33:1b:35:e6:e8:
ca:c5:ca:71:79:41:e9:40:45:56:8b:95:c2:6b:01:b8:e9:d6:
19:ae:2c:60:d1:05:ab:5c:5f:44:c6:f0:01:a3:a3:df:60:0b:
4f:92:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:05 2025 by rpki-client on console-fra.rpki-client.org