Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: gCZMRltwBxH0rvJd8N9uY3zMo7Yk0u8UuntjvEkxdL8=
Subject key identifier: 9D:A9:61:C5:52:AE:73:6D:39:C9:74:6A:B2:6B:16:88:2E:54:16:0E
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0194BABBD18B03DFDEC98F04C6425D798D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0C41
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: mueOA9I1zC73RbFxowPopU9CGs9DOsqH4j2wDXPeIfU=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d1:8b:03:df:de:c9:8f:04:c6:42:5d:79:8d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=9da961c552ae736d39c9746ab26b16882e54160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:9c:45:88:4a:d2:2e:5c:50:9e:b3:c4:16:
c6:94:20:e6:09:f6:8b:c3:1a:9c:93:ea:56:fb:b5:
9b:a9:b9:0e:99:28:9b:f4:c8:fb:9a:e6:1a:a8:53:
22:94:e6:2c:5d:b8:3f:85:e2:e4:d1:e2:1a:5d:05:
98:07:53:2a:78:68:91:f1:42:46:95:08:d3:44:7a:
24:90:25:4e:36:50:3a:12:cc:32:91:a2:9e:79:45:
23:26:e9:36:b0:e5:d8:49:d6:1d:ef:79:39:8e:76:
64:27:1f:cf:63:4c:a4:c0:9a:b3:1d:50:5a:aa:ec:
d0:89:85:52:ad:3a:73:07:d0:73:8a:a2:ea:c5:7c:
bd:c0:1d:96:9c:d8:28:a1:96:2a:27:24:00:87:05:
b9:6c:12:4d:8e:08:da:40:9b:fe:35:3e:25:08:a6:
05:d2:64:34:a2:a6:84:6f:40:4e:b7:76:ec:0f:72:
e8:50:89:ab:95:a4:c7:55:23:3f:7f:58:51:26:e3:
b4:f5:39:fc:cb:6c:64:8a:ef:6b:01:d2:14:14:9e:
b8:77:d5:93:41:56:d0:68:b4:41:ec:e3:76:48:7a:
3e:9c:56:de:78:73:c0:80:c1:eb:da:fa:5a:af:28:
55:e6:a9:1c:7a:ae:5c:4b:e1:61:52:6c:35:65:40:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A9:61:C5:52:AE:73:6D:39:C9:74:6A:B2:6B:16:88:2E:54:16:0E
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:d2:2b:f3:9c:a3:a1:2c:c7:57:c2:aa:00:6c:aa:a4:90:
ba:38:72:87:1b:db:6e:62:94:21:eb:08:2a:f2:ee:d4:7d:53:
38:42:03:97:14:1e:54:d8:26:ed:38:2e:e3:ea:7e:30:fa:49:
2c:66:ce:5f:d3:66:d5:ef:d0:8e:15:7e:4c:f5:24:1e:22:a6:
f2:4f:fa:42:61:c4:ec:db:2f:b3:6c:fa:68:a1:20:7c:fe:9f:
e0:89:1b:8a:d2:2a:7c:a0:a7:eb:ae:56:a1:fd:f6:19:82:82:
32:05:a9:0c:38:d1:87:33:60:98:fb:48:e2:ac:19:bb:47:cb:
1a:35:ff:25:5f:0b:77:e0:17:db:e4:b4:52:21:9a:ed:26:72:
c0:e4:62:ef:2d:e8:fe:f9:57:1f:43:fe:df:5f:4e:3b:9f:f2:
cd:a2:c1:0d:87:b4:78:00:13:3d:a7:32:55:6b:83:c7:b8:88:
38:c3:71:07:64:4a:3c:4b:e8:7c:39:2f:34:a0:5d:8a:38:05:
b3:bc:fc:8b:97:e8:61:2c:1f:5e:61:6c:24:09:02:f4:a3:30:
fa:db:02:d1:ff:51:a6:5c:fd:09:9d:40:7b:ef:69:26:2f:a5:
f2:f2:5e:d8:2a:4a:4b:f0:87:d7:d0:04:a6:84:94:4b:0f:b9:
e5:55:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:32 2025 by rpki-client on console-fra.rpki-client.org