Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: j3Jo3h+70FBSLiQDcN8isW76I2VNt+S+d65XRaEYuwc=
Subject key identifier: DD:C2:4F:1C:FC:B4:1E:CB:30:C1:F0:EB:39:68:C2:3A:87:E4:55:4C
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0194BB96D6D63AAE9C520F4943064CF91A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:12 +0000
Manifest this update: Fri 31 Jan 2025 09:00:12 +0000
Manifest next update: Sat 01 Feb 2025 09:00:12 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: kJo0tJ9LxiXwJEho+0EFvril//vNM86cFl/dE3qiXj4=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d6:d6:3a:ae:9c:52:0f:49:43:06:4c:f9:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 31 09:00:12 2025 GMT
Not After : Feb 1 09:00:12 2025 GMT
Subject: CN=ddc24f1cfcb41ecb30c1f0eb3968c23a87e4554c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:6b:f1:b4:4f:d5:bf:6d:a9:58:18:38:3d:
6b:1a:54:c6:ea:1c:e0:ba:b5:88:29:7b:97:45:e3:
dd:b4:85:99:36:82:47:9a:3f:7e:94:f0:f2:9d:ca:
f0:cf:4a:24:ef:03:60:7e:02:4a:42:f4:27:4c:e9:
12:5d:fd:88:29:5b:af:fd:62:af:a0:b7:5e:1a:17:
02:88:55:30:e6:42:67:e0:ea:6a:31:09:38:26:94:
00:af:af:21:16:b8:0b:e5:b1:6e:a3:86:ab:26:56:
43:fd:d7:eb:26:ee:84:db:9f:71:41:13:9d:72:60:
4a:0b:10:73:65:61:bc:03:20:27:6a:85:5d:aa:b3:
64:a9:50:50:e3:9e:7b:66:06:bc:eb:cb:d0:0e:16:
f4:ec:78:c6:02:de:ee:b8:8c:6d:c2:12:23:f3:8d:
7e:2c:fd:ad:bf:5f:24:b6:fb:ca:01:fe:db:db:58:
97:82:f1:ff:90:29:d8:8c:1e:fe:ef:ba:1e:22:93:
2e:22:81:29:62:d3:a9:07:4b:96:a4:cd:9d:e9:8d:
a3:17:b4:aa:6a:d8:36:29:bd:7d:71:79:00:f8:ee:
0a:a5:5d:67:40:7c:c0:be:96:01:90:28:f6:fb:a4:
08:5b:5d:5e:6c:c5:3a:31:10:33:38:9a:ca:c7:59:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:4F:1C:FC:B4:1E:CB:30:C1:F0:EB:39:68:C2:3A:87:E4:55:4C
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3b:bb:4f:b3:9d:bf:d7:88:9a:fb:7c:33:a3:a4:f1:02:17:
99:cf:53:b0:14:00:b0:b6:4c:08:8d:a7:58:30:91:b8:e4:9d:
ca:b6:86:e4:63:ad:2c:66:41:a1:76:13:fd:ae:63:fc:26:ca:
c5:52:5b:42:ad:ca:ee:1c:91:72:02:3f:e7:9c:9c:08:62:41:
c6:ad:d2:14:f3:56:9a:e8:ae:72:af:bb:cf:b3:d1:db:3c:b0:
d5:4b:81:22:0e:7f:b0:74:30:db:83:09:07:e5:e2:81:23:86:
5f:ef:79:4a:92:07:2c:12:b2:e7:c8:d1:b8:fb:1f:f7:70:01:
8b:11:6a:ad:38:01:5f:bc:e1:74:0f:b6:c1:1d:f7:97:e3:43:
d4:46:72:b2:85:5b:72:0d:bb:00:75:31:8a:aa:cd:01:c7:ef:
a9:df:5d:6e:35:4f:5b:2a:32:db:f8:e4:e5:0b:0b:bf:b8:82:
f5:57:d3:b4:80:76:ab:af:e5:a0:e5:dd:05:19:36:61:65:04:
e5:48:a7:0c:db:e7:11:9d:3a:18:90:4c:99:b8:ce:f5:94:b7:
50:a2:4c:51:14:9c:d8:3b:af:ac:e5:b2:e7:9f:51:9d:18:85:
83:8d:df:4b:ff:f6:e0:31:3f:b4:1b:a2:dc:9e:92:39:c3:e9:
2a:df:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:18 2025 by rpki-client on console-fra.rpki-client.org