Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: nthGvfcZDHjCG7t0GsjU7Oc+rEzLWl7fVi2pKNW1JJ0=
Subject key identifier: 35:1F:26:61:5B:30:31:C1:E8:13:E1:78:94:12:0A:A5:BB:13:F0:E3
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0194BB296883142D8768BA4F3ED0315F3D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0D3E
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: Fer1apbS1Cy6VPeGYBj4MID0wJ0qpM2HWpww0CjvLz0=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:68:83:14:2d:87:68:ba:4f:3e:d0:31:5f:3d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=351f26615b3031c1e813e17894120aa5bb13f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:68:37:25:c8:ee:c6:99:ec:45:e0:40:10:
78:33:04:b0:04:97:ae:71:e0:e0:c9:c0:98:2d:c0:
25:5e:5b:46:52:63:75:37:96:d4:7c:c9:22:9b:39:
db:27:60:1c:24:d4:63:b7:b1:b5:68:aa:a4:29:a0:
4f:7f:4e:b2:f3:b7:aa:02:8a:0f:36:04:cc:ae:c2:
ff:0d:e3:43:cb:e4:5c:39:74:c5:70:e1:8d:ce:db:
55:8b:0d:f5:9f:bd:91:dc:92:5c:8d:19:63:3f:2e:
43:46:b4:53:40:8d:b0:e9:3e:0c:f9:a3:26:4c:93:
bc:7f:04:03:49:f4:26:ba:96:17:4c:bf:e5:bd:c7:
24:43:39:be:78:c4:a4:b0:09:40:82:51:a7:20:e9:
31:aa:2d:d1:6c:57:c1:ea:5d:4a:c6:80:44:62:9d:
32:d1:1e:40:da:af:c3:fc:3e:47:78:f4:7f:51:96:
d3:66:91:62:41:49:2c:f6:fd:d0:2f:72:67:4b:b3:
ca:e3:89:b0:cf:a8:8f:ae:da:44:c6:d0:c4:fc:43:
d2:0a:d8:73:a4:9e:3f:7f:9d:60:7e:6a:ec:f2:fa:
76:7e:30:a2:50:8a:57:94:20:cd:13:e2:98:2d:2c:
f8:26:0b:74:19:98:30:01:38:3f:cf:94:3c:ba:b5:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:26:61:5B:30:31:C1:E8:13:E1:78:94:12:0A:A5:BB:13:F0:E3
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:ec:a0:45:a1:87:c5:c5:0f:9a:18:c7:47:fc:3b:78:24:
72:a4:93:1e:c7:17:22:67:63:d7:e5:f1:28:df:98:83:ba:e6:
39:e6:5b:11:fb:ce:9a:ba:e5:14:cf:a1:fc:d8:f6:fb:6a:30:
57:79:d2:24:4f:2d:88:6b:2b:3a:a8:d0:41:5a:68:e9:ed:8b:
25:f8:c1:5c:4a:e6:40:32:df:67:c8:96:c2:ae:dc:a2:c9:1b:
3f:a0:2d:4a:ea:1a:bb:7b:81:a3:fb:56:3f:1a:15:db:b8:b1:
d1:fe:af:7d:b4:0d:24:7a:ed:9d:67:4f:85:56:86:e2:54:3e:
47:d2:77:c2:d2:c2:02:21:6d:fa:b1:dc:d1:94:e2:10:ab:d4:
db:76:a0:bb:04:7f:69:b4:72:56:f2:65:34:57:09:0a:fa:7b:
06:0c:90:1a:12:f8:23:10:c9:4e:5c:67:31:28:07:bf:4b:68:
2d:91:ba:d0:5a:09:3e:9a:d8:cb:cd:d0:aa:37:77:e9:33:ce:
3a:b2:48:7a:eb:fd:73:fe:6a:3a:86:46:de:a8:27:31:ad:02:
2b:a4:fa:9b:46:71:55:3a:da:a3:aa:d6:2d:61:ad:10:60:0b:
91:9a:23:b1:68:0b:95:c4:a6:ab:ad:bf:47:41:fa:c3:f3:64:
a1:6b:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:44 2025 by rpki-client on console-fra.rpki-client.org