Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
File: DoNbiW2nHS2q3_E51ltymPhBJBc.mft (raw, json)
Hash identifier: RlsbctJrtskbCzq6rgFksKDdMciwxTAUTUD9pvsiwwg=
Subject key identifier: 6F:C8:A9:D7:81:F6:C2:35:40:7C:F6:AC:65:63:4D:5D:BF:2A:B3:D6
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Certificate issuer: /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial: 0194BABB2FAAFBF03ED466670A9A6EB6864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: DoNbiW2nHS2q3_E51ltymPhBJBc.crl (hash: 1Gm8eaRX3v9Kd3YrkMqTQRELrMIJT2GVA5VsCzy2DC0=)
2: jBckqPQFaXVG0d-H_hcaAGH7CKM.roa (hash: +uEvgPae+lRjbvXvv3CmkwknC6+ftUjZQH4oSS8SHfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2f:aa:fb:f0:3e:d4:66:67:0a:9a:6e:b6:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=6fc8a9d781f6c235407cf6ac65634d5dbf2ab3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:c2:ea:df:3a:a6:8c:69:b1:a5:63:86:e7:
98:bf:4c:a7:42:f0:c5:70:45:37:84:cc:81:30:ba:
70:e4:df:e8:15:39:b6:bd:6b:71:b9:85:b0:5c:e9:
73:c7:fd:4a:a7:38:ed:64:54:b8:7e:39:29:1c:ff:
73:f1:be:19:7e:e4:2a:39:68:9b:3c:46:ae:41:46:
08:92:85:bf:e6:43:54:16:14:c2:c4:3d:13:00:cb:
fb:b3:4b:18:8a:af:fb:a4:9f:1b:05:bd:88:32:9f:
b6:79:25:22:03:1c:53:9c:2c:46:5e:68:7d:94:40:
18:2b:84:73:31:1d:c7:cd:90:3d:a5:8a:f8:d0:fc:
82:a9:4e:01:21:df:05:e4:8d:4f:53:55:c0:67:29:
c0:49:46:79:6e:c5:4a:6a:1d:c1:4d:e8:af:24:e6:
c2:1f:47:d1:a2:0f:0c:33:db:5c:f8:a3:aa:66:83:
45:59:99:ef:14:f8:b2:d6:ae:c1:86:46:95:f7:8c:
e5:61:33:0c:23:58:3c:fe:a2:4e:5b:03:ec:e6:68:
64:1c:42:91:1f:03:81:f9:ec:33:e1:cd:48:41:3d:
0f:62:1c:fb:80:fa:bf:97:ae:81:2f:ff:e0:2d:b6:
dd:f9:f3:13:26:f4:2b:47:43:7f:fd:a8:ad:f8:09:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:A9:D7:81:F6:C2:35:40:7C:F6:AC:65:63:4D:5D:BF:2A:B3:D6
X509v3 Authority Key Identifier:
keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:5c:ea:58:10:01:f7:ea:27:fc:93:0c:5a:24:9e:98:27:
df:1a:e1:91:fd:20:87:23:12:16:20:c9:bf:25:87:b3:0e:cc:
aa:a2:4d:84:52:f8:06:c6:30:44:4f:41:60:e1:29:c5:06:83:
df:71:2f:80:ee:cc:94:d9:da:19:bd:25:c3:75:5f:d1:6c:0c:
58:ff:40:ba:d8:43:86:f2:81:ba:68:ba:71:2b:e0:f4:fc:c6:
b6:37:57:b2:89:88:ef:a0:49:68:d7:b0:a3:99:de:2d:86:fe:
7c:59:ee:60:9a:63:61:21:b3:1f:6a:50:2b:cc:fe:0e:e9:87:
0e:c7:95:ef:a1:cd:c3:7e:00:d2:86:b0:89:c7:bb:e6:a7:0e:
8b:a6:0b:16:73:bf:10:39:67:51:0a:d7:18:cf:13:bc:cc:43:
a9:4f:4c:0a:0f:dc:cf:21:ce:62:1d:30:e0:4d:8a:ec:23:94:
f7:45:a7:8a:c7:54:ec:67:be:ef:22:3a:c3:7e:bb:c8:82:86:
33:a6:05:97:d9:ed:2d:71:03:cc:70:af:ee:76:3d:c5:8e:ab:
33:99:0c:3f:ef:e2:c4:8f:0f:6f:b8:19:6e:dd:95:a9:d5:6a:
1d:53:84:35:8e:9b:6b:0a:f6:a1:58:75:28:34:6d:0a:3b:ef:
ae:6f:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:21 2025 by rpki-client on console-fra.rpki-client.org