Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: eM+ee6VcFL3dlSGLU0s2NQ/uuXdZINEncpdvVUCth18=
Subject key identifier: 89:54:66:B9:02:FF:28:5A:F7:CD:6E:47:D4:A7:26:1A:33:BE:54:1B
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 0194BA8428E9FA3585269E5CDC083F1289E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0BDE
Signing time: Fri 31 Jan 2025 04:00:10 +0000
Manifest this update: Fri 31 Jan 2025 04:00:10 +0000
Manifest next update: Sat 01 Feb 2025 04:00:10 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: dQjuAM0EavfLXBzPS2y4JijSdh+lqUNqPMK6KL917wU=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:28:e9:fa:35:85:26:9e:5c:dc:08:3f:12:89:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Jan 31 04:00:10 2025 GMT
Not After : Feb 1 04:00:10 2025 GMT
Subject: CN=895466b902ff285af7cd6e47d4a7261a33be541b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:eb:64:b4:1d:20:72:bf:dc:9e:17:ef:b6:
5b:7b:66:56:94:b3:3e:34:dc:fb:f3:cf:e7:5a:22:
57:35:10:1f:8e:f8:85:09:cb:f3:2b:64:1b:22:f3:
95:16:43:03:c9:20:3f:18:02:41:fa:15:4e:f9:48:
ee:3e:b2:b7:29:a3:b7:b1:71:ce:37:b0:79:70:57:
31:b4:2b:79:6d:b7:d8:06:37:9d:70:c6:71:bb:10:
21:28:c9:9f:cd:57:d9:35:a6:17:51:3a:cc:9d:d4:
03:1b:6b:d5:f1:e4:0f:19:45:d7:a7:b9:49:3d:c1:
af:df:ea:67:ea:20:99:d9:e6:83:b4:98:23:b7:34:
af:38:fc:47:45:89:db:96:d9:7e:4e:be:07:07:0a:
c0:c2:b5:42:10:7e:ec:cc:a8:83:c5:9b:ae:f5:cf:
d0:94:08:cd:40:28:e3:a9:ee:18:58:02:0d:d9:98:
b8:5d:dd:9c:b5:99:12:56:c0:75:5b:d6:3d:9d:42:
5e:50:ec:42:54:6d:0d:7c:01:87:54:65:18:72:78:
6c:43:3c:78:1a:9c:ae:d2:d8:f0:a7:5c:84:c9:24:
bc:f7:6c:1f:e0:fb:dc:bd:90:ab:a5:4c:50:ba:b5:
35:77:b8:e0:f2:a2:74:68:48:15:6f:5d:56:c3:1e:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:66:B9:02:FF:28:5A:F7:CD:6E:47:D4:A7:26:1A:33:BE:54:1B
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:18:59:7e:6a:06:1a:17:9a:36:c4:4e:f7:ee:7f:79:cd:
3b:d1:c3:c0:c1:6a:9f:cc:11:1f:b6:2d:00:47:ce:a5:b3:e8:
6e:e3:f0:4b:2e:f6:3d:ec:04:45:4d:a2:69:47:eb:e7:7f:53:
9b:9e:9c:a7:40:a3:39:d6:93:71:62:70:b9:43:c9:93:3a:48:
6c:0e:c2:34:d6:28:5d:87:3d:37:6e:ed:7c:5b:0c:fa:35:30:
d9:be:cf:69:d9:ff:b0:c9:94:33:1b:02:e4:d9:5a:90:e6:ae:
ef:3b:25:da:5f:df:2a:a6:89:7a:33:b5:a8:6e:08:3c:61:01:
0c:c5:52:96:41:eb:b5:fe:5a:95:00:e0:4e:14:35:d4:2e:3b:
e2:8d:b6:f5:be:88:3a:17:c4:83:00:24:cc:22:ea:70:7b:38:
f1:1e:cf:08:09:6e:f8:c1:ef:75:3f:79:30:22:95:67:f8:82:
1b:cc:46:ed:1b:1e:0e:6a:3b:1b:3b:4b:94:20:4a:59:ff:23:
d2:07:7e:df:d6:f9:98:c0:af:1a:5a:1d:07:08:c5:0b:c7:ee:
0a:a4:61:ed:f7:18:2e:07:ee:47:dc:26:83:a8:9c:b7:cc:0d:
87:da:6b:3e:6d:06:66:81:80:2b:11:8d:42:12:a9:a5:1c:f9:
4b:e5:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:00 2025 by rpki-client on console-fra.rpki-client.org