Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: K/+/tE2g7ExRDmTKfjtzv3AhjDDIf0OW0q9YByTQsfA=
Subject key identifier: 36:6F:06:6C:48:C6:08:7B:58:FD:4E:AF:30:04:C0:FC:49:8F:C9:E7
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 0194BB974C973F875102B5F89BD668BD6C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 1209
Signing time: Fri 31 Jan 2025 09:00:42 +0000
Manifest this update: Fri 31 Jan 2025 09:00:42 +0000
Manifest next update: Sat 01 Feb 2025 09:00:42 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: k1INn40x7j/jzzshCzWkNEFfy6uQpZX5kITEQfELDuI=)
2: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (hash: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4c:97:3f:87:51:02:b5:f8:9b:d6:68:bd:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Jan 31 09:00:42 2025 GMT
Not After : Feb 1 09:00:42 2025 GMT
Subject: CN=366f066c48c6087b58fd4eaf3004c0fc498fc9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:cc:02:36:f4:fe:39:e1:b4:82:2e:62:fb:
42:ad:30:3d:0d:9f:60:b7:16:80:13:24:7f:31:ef:
0e:f4:72:93:d2:29:bf:68:48:79:b9:60:67:3f:4a:
df:af:88:e0:93:be:ab:41:a3:c1:c3:87:c8:78:e6:
77:a9:21:c4:e1:a5:48:55:74:97:84:48:73:7a:f4:
92:03:8e:3d:e8:c5:e2:81:30:9a:23:d7:f2:58:a3:
99:0b:f4:71:55:dd:1d:37:5f:68:ed:9d:d1:3c:94:
ff:36:46:ab:bd:99:b5:1b:12:67:a3:c7:8e:84:b2:
a3:09:9d:48:e7:8a:14:38:ba:46:71:8a:9a:1f:43:
10:18:86:ff:3e:57:89:4c:dc:fe:49:ef:f1:ff:47:
c3:2a:e0:ca:8a:c8:ef:9a:64:b9:1a:f9:65:3d:b9:
e9:50:36:6a:89:e2:ee:9d:e2:a0:a7:0d:21:65:d5:
60:dd:2a:b1:c9:5f:28:11:6e:48:c0:fe:ff:af:fb:
93:dc:46:1d:e5:e7:74:d9:ce:9c:82:6d:e6:6a:4a:
14:e2:10:48:ad:a9:d3:f5:66:0e:59:aa:65:c4:ab:
7f:82:85:a3:08:00:1d:d9:54:0d:83:26:1f:8d:8f:
91:9c:c6:94:17:44:ed:da:d8:0c:7d:dd:7c:d8:8d:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:06:6C:48:C6:08:7B:58:FD:4E:AF:30:04:C0:FC:49:8F:C9:E7
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:88:18:85:86:ca:fc:80:b0:b6:0c:e0:d7:a9:7a:60:d0:ef:
d2:1c:a2:01:11:d5:05:4d:c8:d0:2c:f6:f5:18:00:97:c4:74:
85:f5:e5:95:24:13:65:35:28:23:39:fa:07:9d:c7:cb:10:1b:
84:c2:1c:58:09:c1:28:64:3d:92:91:29:9a:c6:b8:50:b0:a3:
07:f1:3b:1d:cc:b7:2a:23:91:c8:de:a9:e2:bf:b2:25:ef:1a:
1f:24:94:bd:5d:f0:20:2e:74:30:13:1e:13:b0:69:e4:e0:2d:
2e:43:2b:6b:c2:b5:6a:4f:95:c2:48:5a:81:49:7b:ce:e1:fb:
6a:18:0b:15:26:b9:cd:bd:ee:df:f5:87:b4:28:c9:2a:90:cc:
98:ee:89:90:be:50:71:0c:c2:e6:09:30:ad:90:3b:e1:9a:d8:
40:8d:c8:a0:f1:35:49:21:61:07:1a:fc:08:4e:e2:30:b0:81:
b9:eb:7c:ba:23:3a:92:69:99:e6:f3:83:bc:b6:99:f8:59:f7:
59:d0:02:9b:3d:01:a4:0a:97:a8:76:9e:fa:0e:10:c7:b5:46:
00:41:ee:68:b9:14:9f:a5:af:ad:55:a3:a7:87:0f:4a:fd:56:
ee:92:9c:69:1a:ef:69:01:dc:a6:21:10:f2:6a:eb:27:a0:3e:
f1:33:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:21 2025 by rpki-client on console-fra.rpki-client.org