Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
File: dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft (raw, json)
Hash identifier: KF1Cqji/wu9vG8FBShWooE04XjkVV7SuU/ILSqJZUlM=
Subject key identifier: 3F:D9:01:57:A5:94:09:E8:CD:F2:2C:7C:97:13:6D:EC:81:E6:F0:30
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 0194BAF232777701534BD433C94DDB26D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
Manifest number: 1174
Signing time: Fri 31 Jan 2025 06:00:22 +0000
Manifest this update: Fri 31 Jan 2025 06:00:22 +0000
Manifest next update: Sat 01 Feb 2025 06:00:22 +0000
Files and hashes: 1: P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa (hash: 3hJsA3Q3EQecJR3hJHgLTYYEIcnWflx0DcKeSfNvhRM=)
2: dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl (hash: fAPz7uEpmIG0853KS00z4QP3jM0heF/iuNC8HQRbj3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:32:77:77:01:53:4b:d4:33:c9:4d:db:26:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Jan 31 06:00:22 2025 GMT
Not After : Feb 1 06:00:22 2025 GMT
Subject: CN=3fd90157a59409e8cdf22c7c97136dec81e6f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:0f:44:43:1d:aa:42:27:ef:d3:a9:20:22:
56:e6:46:5d:ba:42:c4:cb:2e:6d:df:14:32:1d:87:
94:0f:a2:db:e9:0a:b1:a4:b5:14:8f:b7:c6:cd:ee:
a6:04:19:3b:4c:63:8a:84:fc:fc:ed:1c:1e:18:7d:
c2:e7:50:44:f0:04:9c:ff:19:2e:f2:b3:3c:ef:35:
01:d0:a0:de:68:04:9b:09:5b:ff:5c:e1:b0:7d:80:
be:ef:56:ec:5e:67:e3:12:8d:96:29:5b:6d:a1:7a:
79:f8:44:37:37:18:b6:52:f1:42:af:45:bb:6d:6f:
b8:12:74:94:3b:85:6f:d4:c5:e4:89:e5:65:62:49:
63:7b:3f:01:dd:39:af:d2:d5:1e:88:44:3d:92:81:
f4:d2:2c:ec:de:e8:14:9a:63:eb:e1:d2:ac:80:b7:
96:c2:79:f2:e8:ba:c8:ff:ab:d5:fa:98:6d:1d:f2:
71:cd:22:ef:8c:93:d8:b3:21:9a:56:09:c9:97:82:
e1:95:93:41:21:8a:3b:a0:40:de:09:32:c7:f0:2f:
b6:a7:1f:0b:a2:ac:48:40:cc:50:58:fd:a6:cc:45:
fe:fe:b8:87:0b:2b:5a:ae:23:e3:1e:32:23:77:46:
37:fa:c1:17:dc:a3:bc:5a:6f:6c:ff:45:4f:06:5a:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:01:57:A5:94:09:E8:CD:F2:2C:7C:97:13:6D:EC:81:E6:F0:30
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:52:8d:c9:c6:93:d8:8c:61:21:18:a9:5a:05:be:23:3c:54:
1e:71:e5:a7:40:ae:b3:c3:7c:cd:d5:ac:4a:38:fb:e7:22:a4:
35:26:43:bb:eb:ef:52:d9:ba:0b:51:50:20:bf:10:8a:78:38:
9e:5e:34:0b:c1:a3:89:fe:70:46:ad:c6:b0:f1:55:1b:00:55:
15:80:96:ca:63:8f:ae:7e:47:22:a9:e4:e8:3d:90:af:78:6b:
1a:c6:41:60:cb:73:2b:17:49:d1:65:73:6d:45:5d:18:4b:74:
f3:6d:6e:bb:c7:02:37:45:4f:ac:40:ea:15:f1:51:d2:85:40:
bb:97:5a:30:7c:15:b2:fb:10:13:20:7d:e7:4f:72:7b:4c:20:
a6:b6:5f:5d:1d:ea:98:50:ab:90:62:93:52:6a:b7:6b:5a:c3:
c8:93:61:21:73:82:4c:25:54:dc:35:e9:1c:ca:99:9c:6f:c4:
b3:12:55:ce:cb:46:10:24:65:62:76:c9:53:41:29:1c:b9:73:
ce:92:b4:c0:2b:33:4b:1e:b0:1f:68:18:6b:b9:8b:b3:d1:92:
69:97:d1:60:05:1e:26:c8:00:c3:85:1c:9d:44:93:e3:87:05:
15:cc:72:7c:78:ff:5e:24:a6:f6:a7:1b:0f:13:58:a4:a7:6e:
a5:d3:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:21 2025 by rpki-client on console-fra.rpki-client.org