Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: 4WUtvrn1o8i8EWYiQMD5QV8aa7u4LqXI38XSWboho2g=
Subject key identifier: EF:32:02:FD:BD:30:0C:9D:8A:56:1C:D6:1E:76:D9:20:57:85:8F:B1
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 0194BB606F1B07BA3E6D84640326DE1F78FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 11FA
Signing time: Fri 31 Jan 2025 08:00:46 +0000
Manifest this update: Fri 31 Jan 2025 08:00:46 +0000
Manifest next update: Sat 01 Feb 2025 08:00:46 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: osSANUewnKJdUW6d7UiusrKk7VKxorHVq4A+NVoNy+I=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:6f:1b:07:ba:3e:6d:84:64:03:26:de:1f:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Jan 31 08:00:46 2025 GMT
Not After : Feb 1 08:00:46 2025 GMT
Subject: CN=ef3202fdbd300c9d8a561cd61e76d92057858fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:01:5a:cb:34:18:4f:42:45:43:79:99:64:
80:eb:e7:c7:86:5e:42:06:64:2d:d8:84:07:06:3b:
f2:08:8e:5c:0e:e2:b4:44:48:a8:87:4a:4a:36:6a:
c8:73:c9:6c:71:d6:29:2d:21:00:52:71:26:34:69:
fa:51:7b:04:f4:fb:e2:07:9c:e6:22:07:3a:73:7c:
88:a2:9f:c6:65:d5:76:49:2f:3c:ed:86:8d:3f:59:
27:29:63:5c:0c:70:11:4a:0f:16:35:ea:15:5d:2c:
8f:6f:37:21:86:4e:0a:79:ff:5d:0b:80:d7:ba:b2:
9b:6a:29:9c:a2:c4:57:50:59:88:cd:aa:d2:dd:a9:
90:53:81:a4:16:1e:69:30:bb:74:80:c4:74:45:7a:
f5:31:80:d8:c9:08:dc:cf:ef:20:4f:eb:5d:9b:8b:
59:e4:0b:95:20:b0:2a:0e:d4:26:17:1d:f8:79:fd:
1f:f2:06:0b:16:5f:99:52:17:1c:66:dd:41:aa:e0:
2d:4f:5c:8f:5e:52:5a:dc:76:69:79:11:7c:43:ad:
c4:d9:22:46:3e:aa:1d:ee:d1:06:c2:25:1f:6f:25:
55:7a:cd:d3:ba:b6:96:74:ff:01:59:5b:9e:30:e3:
e2:e8:dd:27:ac:2a:53:29:05:da:5e:7f:95:b1:f6:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:02:FD:BD:30:0C:9D:8A:56:1C:D6:1E:76:D9:20:57:85:8F:B1
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b1:8c:9e:4c:95:8a:c5:dc:16:aa:73:5b:90:c8:98:bd:29:
9b:5a:d8:bb:d6:35:80:fb:f9:57:d2:94:e6:a5:a9:06:eb:9c:
db:13:12:d1:c6:60:99:6b:a6:23:76:f8:b9:2b:e7:44:48:1a:
31:dc:a6:4e:b4:2e:4d:67:1e:1c:28:c3:7f:e8:a4:01:9e:92:
ec:30:9e:73:ee:01:00:89:05:e1:1a:45:44:54:75:be:e6:f3:
8c:ae:cb:e1:96:ce:fd:06:cc:64:2d:96:65:15:0d:88:36:2c:
10:64:4d:fc:9e:3e:ad:d9:99:aa:4f:aa:16:fc:48:df:0e:21:
02:6e:c1:5b:aa:95:5a:56:06:39:d9:26:a0:cc:42:aa:e3:84:
7b:91:53:a1:5a:25:e9:ac:f5:95:af:2a:92:60:58:97:52:b0:
f0:eb:d5:6d:d6:da:ea:40:a7:39:14:d1:a7:89:e0:16:08:e2:
1a:5e:b1:6d:95:a4:b6:f8:c4:88:da:d9:33:36:cf:7e:f9:02:
10:c4:48:1e:7c:44:e7:6e:72:a2:01:7e:c8:ea:8d:a1:22:f5:
89:6b:5d:73:55:3a:bf:0e:bb:92:6d:45:a5:aa:a7:2a:77:cb:
5e:45:d5:45:6d:38:5e:32:e8:fd:82:ff:32:3f:0f:38:e3:dd:
f1:1d:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:40 2025 by rpki-client on console-fra.rpki-client.org