Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: 8V2uTQug/M07Zot0y/UpgaKEHvnT9o64/L5RK3j6L8g=
Subject key identifier: 3D:F6:45:C5:3D:0F:89:D7:A7:74:D2:A8:50:34:0F:15:C0:DD:E0:EB
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0194BB603D7523BAF9996D0F949DC9B5CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 08:00:34 +0000
Manifest this update: Fri 31 Jan 2025 08:00:34 +0000
Manifest next update: Sat 01 Feb 2025 08:00:34 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: hmscK/WUArRC6fIYVSeaNvb+3RXBwkU/iXXmfz8iqsA=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3d:75:23:ba:f9:99:6d:0f:94:9d:c9:b5:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Jan 31 08:00:34 2025 GMT
Not After : Feb 1 08:00:34 2025 GMT
Subject: CN=3df645c53d0f89d7a774d2a850340f15c0dde0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:ea:4b:98:5e:46:ec:16:9f:cf:b7:90:51:
4a:b8:4c:b5:f3:16:5e:db:e8:fe:e4:dd:e3:81:d8:
b7:0a:e1:2b:c3:5a:30:38:fa:a2:7a:31:15:ee:24:
39:e3:21:d6:af:95:5a:68:3f:8f:29:ad:d5:74:db:
45:83:3c:c6:f3:05:1f:92:e9:1c:98:91:0f:72:d1:
7d:f1:af:9b:e9:2b:b9:78:9a:d8:d4:0a:0f:3c:81:
28:01:45:0e:93:1a:4d:6e:78:79:a2:e3:9c:0a:47:
86:44:7a:3a:88:20:3a:c8:24:00:35:18:ab:17:a5:
a3:64:64:f9:8a:32:9a:16:47:af:a4:dc:7e:7e:59:
05:19:b9:a8:c1:af:ec:76:47:06:7f:8f:c5:23:e7:
09:a8:46:5f:b4:bd:05:3e:f5:d3:55:be:ff:94:cf:
9f:c4:31:50:49:23:c0:5e:9a:89:50:48:84:a8:a6:
56:d4:eb:64:3b:6d:92:f0:d1:e2:12:c6:66:73:5d:
7f:4e:fb:8e:cc:ab:a8:68:8f:51:4a:b8:f8:bc:1e:
c3:7b:47:b7:61:5a:65:58:fc:ee:9f:ec:67:8b:e2:
ea:11:03:05:00:37:3f:87:bb:5e:38:88:01:37:cb:
ce:90:25:36:38:57:99:9f:fb:f0:91:7b:27:9d:b9:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F6:45:C5:3D:0F:89:D7:A7:74:D2:A8:50:34:0F:15:C0:DD:E0:EB
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ca:bc:88:be:34:35:6d:23:fb:55:08:2e:ca:f5:a7:ce:25:
2b:6c:9c:ad:40:87:73:bd:bb:d7:c2:64:2c:3e:45:0a:3b:65:
7d:e0:79:5e:6c:c9:91:72:fe:4c:f2:9a:71:31:02:4b:6c:14:
14:a5:74:62:53:bd:3a:c6:d0:07:56:e8:fe:b5:15:de:87:d3:
98:dd:70:81:1b:21:36:63:1c:fa:05:72:e8:f3:5a:33:54:18:
f9:60:31:09:75:7e:e3:e2:0d:ed:c4:ba:06:cb:6d:d7:32:43:
e4:68:2f:e1:91:a8:8c:f1:a8:1b:8d:b1:27:c2:b1:80:ce:d8:
50:7f:01:4c:28:6b:84:9c:c1:48:fc:8e:6c:38:4f:a5:bb:ce:
cb:46:a4:8d:28:b6:1d:50:53:18:db:9b:83:c5:74:22:43:d6:
ba:bc:c1:67:3b:3d:b0:00:81:4c:c5:d0:4d:4a:36:98:69:67:
b5:1f:99:72:30:05:e8:54:44:c4:96:49:23:8c:4b:9e:c2:a7:
e5:9d:55:77:00:65:47:68:9e:d0:06:1a:85:41:95:c1:e0:45:
24:2f:af:b8:8f:21:38:f5:4b:c8:1e:00:0d:2c:0e:6d:d3:58:
b9:99:2d:f4:65:e0:fd:60:9c:af:f2:50:b9:68:2d:0b:cf:5b:
08:73:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:06 2025 by rpki-client on console-fra.rpki-client.org