Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: GXbl8oX7gQUL0yn9YK9m9WTfCbkbPzzQpIEaQUC+D4U=
Subject key identifier: CD:7F:82:45:9E:A7:1B:72:58:4A:BE:B9:09:A1:FF:00:D1:50:58:58
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0194BABB2939658ED469FFBBBE116864B426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0C43
Signing time: Fri 31 Jan 2025 05:00:15 +0000
Manifest this update: Fri 31 Jan 2025 05:00:15 +0000
Manifest next update: Sat 01 Feb 2025 05:00:15 +0000
Files and hashes: 1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: yqLv8VWk0KztmJOM0ulbSQjY6hovKNVw7tXjrfezU4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:29:39:65:8e:d4:69:ff:bb:be:11:68:64:b4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jan 31 05:00:15 2025 GMT
Not After : Feb 1 05:00:15 2025 GMT
Subject: CN=cd7f82459ea71b72584abeb909a1ff00d1505858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:ab:4f:c3:86:81:01:6f:7d:e1:ea:fb:4d:
0b:3f:48:4f:5c:23:26:4a:fe:8e:8d:7c:ac:1d:ac:
a1:7f:b1:57:87:e9:5f:42:2d:78:e2:4e:4b:62:95:
00:92:ed:e0:da:73:c1:81:8e:b2:e3:54:6c:e7:b0:
9a:19:5f:d4:bd:7e:be:35:e4:ee:17:9b:07:d2:df:
dc:86:21:43:81:98:08:b0:91:89:23:b5:8b:10:4f:
fd:35:d7:3b:66:e5:b7:43:ab:e3:a0:0a:b9:cc:45:
3d:b8:4b:c4:50:52:3a:34:5d:9b:b9:9b:05:d4:78:
a5:a3:be:ed:3c:5f:f3:93:0d:35:3a:cf:cd:fe:6a:
e3:18:06:8e:ae:00:52:ba:7b:8c:e0:20:0e:af:14:
5b:35:b1:df:7d:0d:f9:ff:94:71:0f:5b:f0:9d:30:
96:94:f6:81:10:d6:67:28:a4:c8:fb:05:e6:0d:b5:
82:9d:5f:81:7a:a7:e5:02:2c:e6:05:d7:09:2c:3d:
6e:72:d1:84:c9:03:22:cb:17:3f:ee:4f:8a:a4:50:
96:f8:3c:37:81:45:d6:b6:48:20:a2:aa:f6:5c:55:
85:d5:e7:ef:ee:e6:f1:a7:2b:b5:f5:30:f6:27:89:
44:9f:38:cf:21:95:a0:9d:44:a6:00:2f:c6:22:e1:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:82:45:9E:A7:1B:72:58:4A:BE:B9:09:A1:FF:00:D1:50:58:58
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:1c:8f:0f:2a:dc:16:d2:4c:6d:4a:e2:42:26:19:da:cd:
c6:de:8c:8d:d3:22:6c:0b:26:26:03:71:e1:44:8b:e6:1f:eb:
ec:5e:68:e5:ed:3d:e0:25:7b:1d:81:62:4a:a8:f6:50:42:52:
52:52:67:8a:4f:b9:b3:dd:b2:b1:8c:8f:26:ca:ec:6f:05:da:
62:7c:31:ff:33:7d:4e:c4:0d:7b:2e:7d:b3:65:e8:8f:15:65:
0e:df:fb:b1:9f:93:6f:78:4b:ea:c7:5c:35:13:cc:2b:4a:7a:
e3:f2:7e:f1:d2:17:d1:28:f9:6a:6f:83:99:5d:6f:53:5b:96:
24:62:5d:10:e4:cd:9f:46:54:96:a2:23:c8:35:ec:ae:4f:c0:
69:c9:fd:4d:2d:7c:da:8e:7c:db:37:f5:5a:22:9c:1c:2b:1e:
ee:eb:8e:0a:7b:b2:51:f9:a7:9a:2e:ef:d7:fd:8b:4e:18:98:
be:98:3a:6f:2d:01:92:86:af:a6:e8:25:4b:cf:b9:3b:65:73:
6d:6e:e8:fa:84:3f:40:be:62:21:14:56:9d:5d:ad:0f:8b:44:
be:b3:eb:87:4f:f5:19:ad:35:d8:82:85:11:e1:85:91:32:d3:
08:14:d3:6e:08:9d:67:8a:5d:62:a1:e3:2f:6a:f6:3c:4d:59:
44:ab:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:16 2025 by rpki-client on console-fra.rpki-client.org