Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier: penA3e9D6LaEMr4jBPeu8a3kiq1nTbTE2bbyyS7geKA=
Subject key identifier: DB:66:E6:8F:19:6A:E4:CC:87:47:8C:1A:EB:4E:98:E7:88:2F:65:63
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial: 0194BB29758F94B300B2B3273E9A7695ABA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 07:00:43 +0000
Manifest this update: Fri 31 Jan 2025 07:00:43 +0000
Manifest next update: Sat 01 Feb 2025 07:00:43 +0000
Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: F22YwV7uAJdvhhq609956JVZymwKu+Dr/23BIDynPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:75:8f:94:b3:00:b2:b3:27:3e:9a:76:95:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Validity
Not Before: Jan 31 07:00:43 2025 GMT
Not After : Feb 1 07:00:43 2025 GMT
Subject: CN=db66e68f196ae4cc87478c1aeb4e98e7882f6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:13:cc:9d:c9:28:55:54:a9:6d:5b:5f:ae:
b8:a3:cd:cb:81:3c:0a:f3:59:63:f6:d8:33:8a:69:
8a:b6:a1:0f:2c:9a:1f:88:76:18:c2:4b:07:49:81:
3c:ca:83:b7:d1:58:dd:4c:9b:e2:40:77:b3:f6:c1:
d1:45:ed:f7:1b:37:c8:da:ef:4a:10:aa:0d:71:4a:
47:d4:5f:3e:43:7a:aa:d9:1b:0b:c5:54:87:ef:4a:
f1:12:f0:e0:30:0c:5e:6b:5a:0c:a6:97:f0:9c:8f:
88:99:36:38:67:7b:cf:26:71:31:53:a8:dc:83:e9:
57:85:88:25:a1:73:23:80:59:e8:85:10:e3:4a:ad:
e1:3e:ab:04:71:ba:6a:05:b0:6b:7b:d9:c4:11:15:
3f:30:2f:b4:89:d8:d5:68:b4:89:e2:1d:5a:38:3d:
39:06:fd:c8:81:51:10:f7:63:d5:cd:df:3a:e3:6e:
7f:8f:da:69:41:58:75:37:76:e9:73:b7:38:30:b6:
14:45:6c:23:5e:59:15:bb:d2:8c:cb:cf:5d:56:29:
24:53:5f:41:c9:f3:74:22:37:42:ae:e9:9a:0c:27:
0b:f6:db:cd:65:54:53:80:3f:9c:c6:d3:62:f2:79:
5c:b9:4f:6b:34:b6:16:79:be:23:c4:04:83:a3:a9:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:E6:8F:19:6A:E4:CC:87:47:8C:1A:EB:4E:98:E7:88:2F:65:63
X509v3 Authority Key Identifier:
keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6c:2b:2d:ed:d9:6e:76:f9:c9:4b:0a:78:2c:f9:5a:47:79:
a0:2f:a5:48:54:ac:c4:75:ee:03:b5:ee:9c:9f:86:4e:54:1d:
72:c4:e7:63:7a:98:22:c1:35:03:9d:30:4f:b8:dd:3a:2a:47:
67:77:5d:bd:da:e8:e0:66:75:e2:76:99:e9:11:02:7a:51:90:
fc:a3:97:2a:7a:9c:77:13:c2:43:02:57:84:1a:f9:00:f7:2d:
f9:87:c0:3d:38:8b:e9:02:28:0b:05:b6:d6:27:fd:a7:03:9e:
d6:93:e4:ce:dd:33:2a:76:ce:6b:d0:e8:20:ee:66:fd:fe:2b:
52:7d:12:ba:73:5a:68:cf:f7:63:28:2e:b5:05:58:d4:1e:00:
0f:0a:e1:05:63:71:ab:62:c8:5c:5d:6c:e1:f1:48:b4:50:42:
4f:a8:29:62:a6:79:c9:b6:97:9d:46:00:ce:29:3a:10:e5:07:
a7:af:93:eb:22:ee:b5:91:43:98:80:77:d3:5c:7d:61:98:9d:
2f:fd:b2:6e:13:0c:c9:93:d6:24:e7:a3:f9:9d:75:34:15:37:
c2:e3:9b:a7:f0:7e:9f:5b:70:31:e1:d5:81:a7:80:96:a4:e6:
c9:5b:3f:18:c0:bb:b2:d9:7c:35:fa:34:87:45:55:61:a0:73:
87:70:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:48 2025 by rpki-client on console-fra.rpki-client.org