Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: CSGy6koQSBmD4yZ9IyEk4nkzqHCKoKKZTlGtMs7ZXSA=
Subject key identifier: 88:1E:58:D7:B8:9F:F5:B9:66:5C:21:80:74:79:1E:42:C6:DC:50:61
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 0194BB972296A9B68F1ADFF988C391AB515B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 07B8
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: 790TFIsU/mqI0xXCLzoFmrdGj+39UoYiDeDScfZqsjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:22:96:a9:b6:8f:1a:df:f9:88:c3:91:ab:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=881e58d7b89ff5b9665c218074791e42c6dc5061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:fd:82:89:36:72:97:37:f0:bd:9f:8d:87:
cc:81:06:e0:b7:8e:e9:2e:37:f6:89:64:a6:29:0d:
e8:d7:17:2d:b2:2f:3b:95:12:b7:52:4d:64:9b:41:
ba:a6:81:8a:a0:ae:c4:7f:6b:c4:24:f7:83:2b:91:
96:61:e1:74:d1:81:b6:66:99:a2:88:39:79:87:8c:
54:5e:0d:b5:13:7c:e8:97:49:45:43:ec:37:93:f8:
97:6a:cc:cd:28:13:60:9a:b0:c3:26:a8:25:55:d3:
56:a6:dc:11:8c:48:2b:a4:24:ff:8a:28:a1:74:4e:
68:2b:9c:a0:c6:a7:b8:f9:00:e1:f6:bb:4a:cd:58:
ea:a7:7b:eb:2d:02:00:9c:32:df:34:9b:ff:66:17:
d9:1f:d8:d2:9e:0a:fe:2f:30:3e:61:28:62:2a:1e:
b9:91:1f:44:3d:dc:fc:4c:00:d1:c6:be:0b:9d:5e:
82:48:78:73:d4:ea:a7:8d:47:7a:27:d9:d4:76:c6:
46:a2:41:d7:98:3a:28:de:44:5e:3f:31:98:3c:de:
77:6e:bd:3c:a2:04:c1:a5:99:9b:43:ac:c3:d8:ae:
c8:c0:f0:19:a4:58:2b:34:0d:d2:a0:b8:43:07:0c:
ce:5d:08:d4:7e:6e:00:41:fb:19:25:6c:75:f8:20:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:58:D7:B8:9F:F5:B9:66:5C:21:80:74:79:1E:42:C6:DC:50:61
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:94:96:11:ba:ff:4e:f5:9a:df:4d:65:ae:2e:86:e5:83:3b:
33:61:fb:18:15:f4:cd:ef:23:92:a0:d6:be:b6:ef:c8:65:65:
e1:af:c4:d4:42:37:ea:50:4e:35:ce:01:a6:e1:aa:af:1c:02:
1e:40:64:8f:d4:dd:85:89:a3:f2:07:e9:9c:b8:73:52:ce:4e:
fb:84:67:5b:3b:0b:7d:ea:10:58:37:6d:74:ea:c1:a1:ac:3c:
25:7c:96:51:dc:83:c1:34:0b:60:34:cc:b8:95:69:5d:9e:20:
ec:fa:5f:ab:9a:8d:ac:0b:ee:4f:7d:ff:26:de:2b:3c:a8:62:
4c:75:3a:24:8a:7c:de:72:e2:83:15:83:39:32:ab:cc:66:cb:
1d:d3:10:1d:fd:34:4b:70:19:87:ec:07:ee:29:93:45:63:e9:
37:ef:ca:93:45:ee:8e:79:e6:fe:2f:79:d8:3c:2a:fc:9e:09:
a1:b4:5a:1f:12:2c:9d:79:0f:27:af:c9:00:e2:65:7e:bb:49:
86:03:6e:96:62:71:9e:55:38:62:08:0d:ba:95:6e:df:7a:2b:
92:13:57:44:04:f3:4f:df:44:01:1f:b4:a5:03:c9:46:49:1e:
14:55:29:61:61:a9:7d:2c:d2:46:09:d5:37:25:1f:52:61:c1:
3c:2e:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:51 2025 by rpki-client on console-fra.rpki-client.org