Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: p9wWP4FfHpSF/k3r/4133LpjN62FjriIxOLstOvTCtw=
Subject key identifier: 47:A1:9D:C7:D7:A6:E0:01:37:05:FD:36:86:63:D1:D2:EE:CB:E2:FF
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 0194BB96E83CC76A88230B922A5A9E8126FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: NcqWpD5Y1FbnhvClc5Kx9uIy8T/UIY8Fv5Cn6ZUlJjQ=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e8:3c:c7:6a:88:23:0b:92:2a:5a:9e:81:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=47a19dc7d7a6e0013705fd368663d1d2eecbe2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:6f:7b:01:08:6b:27:3e:13:bc:c3:3f:a4:
42:ae:d1:f7:af:c3:bc:b1:4f:ae:b3:7d:46:5c:88:
09:cb:15:29:bd:39:27:7e:14:ce:4f:46:e3:e9:42:
2b:39:67:c2:41:73:31:9f:a5:e3:65:bf:b0:37:12:
2c:3d:4c:a0:2d:0a:c2:ff:a7:7c:ee:a3:59:78:04:
41:3c:09:7e:24:36:14:89:99:f6:81:d5:34:36:44:
a3:2f:17:07:ee:c7:8d:fc:f5:9f:bf:a3:dc:42:41:
b9:69:b1:e9:9c:6d:0a:27:6e:38:2b:cd:32:43:a9:
17:a2:1d:6c:6b:4f:2f:14:d4:27:2c:ab:64:40:16:
04:b0:c4:72:1c:8a:17:a4:8b:11:32:e2:5d:7a:d0:
4d:7f:8a:98:5e:61:c8:9a:87:2e:18:db:18:3a:86:
9c:55:99:bc:39:e2:b1:ba:04:f6:a0:52:e5:1a:62:
07:7a:21:81:15:73:47:c0:c9:4e:5c:6c:c8:2c:f5:
bb:3b:55:8e:3d:79:e2:82:68:a2:14:17:5a:02:0a:
7d:de:17:f6:ea:3c:e8:92:cb:9e:ba:aa:43:40:20:
81:72:ff:72:94:57:46:77:fd:08:9d:6c:2b:6b:6b:
6a:9d:2e:e5:6f:bd:f1:3b:f3:27:0d:4f:f2:76:b6:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:9D:C7:D7:A6:E0:01:37:05:FD:36:86:63:D1:D2:EE:CB:E2:FF
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5a:ce:f2:24:d5:35:11:e2:1a:c7:45:74:e5:c9:60:6b:82:
d7:87:6a:91:7f:79:b8:93:59:a7:a4:3e:c2:b4:df:22:64:bf:
f3:a8:d2:4c:75:0d:e0:ef:55:89:69:a0:ce:54:24:48:cf:31:
59:14:12:d2:36:85:2e:3d:94:30:8e:67:75:22:68:5b:59:36:
72:13:76:5f:f2:be:1b:cd:23:0b:5d:c9:56:bb:dc:22:d3:15:
9a:b6:ea:80:10:55:c8:07:5d:0d:28:67:28:b2:c0:c2:89:45:
ec:06:d6:1d:1b:8d:c6:b8:2f:da:1e:87:50:00:c1:92:bb:6c:
f5:e7:99:62:65:0d:06:94:8a:41:b9:45:19:c6:d8:40:e8:00:
d0:90:0c:ba:02:43:4c:4e:a8:09:46:b3:7d:d8:7d:07:62:77:
03:5e:6a:94:12:9e:09:d1:35:a0:d7:89:42:d0:7e:cf:21:a2:
ff:b9:c2:46:7d:7f:c7:88:15:26:ff:7d:ad:b9:6b:fa:d2:09:
41:6f:bd:bf:bb:35:ca:0e:e5:e1:3a:eb:88:3d:22:19:84:92:
ac:c7:11:b3:3e:be:db:58:5a:c2:80:f3:3a:8a:76:4e:4e:5d:
c6:d0:82:ff:18:7e:72:05:f5:43:c7:50:cd:ba:8a:52:6a:ea:
ef:07:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:22 2025 by rpki-client on console-fra.rpki-client.org