Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: OJie5Zc9NQTnf0elAajTrYPj+hFD2QpVK05vK9wqR88=
Subject key identifier: 1F:41:C6:0A:F5:45:EF:C3:CA:ED:F6:B5:8A:31:9D:3C:27:AC:D3:EC
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0194BB2964FAEC57BD5E661AC87FD4519D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 049B
Signing time: Fri 31 Jan 2025 07:00:39 +0000
Manifest this update: Fri 31 Jan 2025 07:00:39 +0000
Manifest next update: Sat 01 Feb 2025 07:00:39 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: O4jwwqnX5KuS7llnhBnJzxIqVkGl/XTs80oVWk+UBKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:64:fa:ec:57:bd:5e:66:1a:c8:7f:d4:51:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jan 31 07:00:39 2025 GMT
Not After : Feb 1 07:00:39 2025 GMT
Subject: CN=1f41c60af545efc3caedf6b58a319d3c27acd3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:e0:20:33:d9:32:3e:c8:77:17:8a:da:71:
3d:55:7c:28:c4:d0:ac:a1:a5:ef:d6:c8:cd:4d:4d:
b2:2d:8f:67:ef:b7:28:ed:1d:b6:7f:f2:d7:58:7b:
5c:ae:63:f2:fc:df:f0:90:c6:c1:1b:1e:99:dd:b9:
8b:ff:e9:03:72:5e:95:e8:fe:ea:db:1d:dc:f6:ca:
da:50:e3:6f:76:41:bd:c4:e1:bc:6d:a7:4c:03:80:
a6:ac:d5:d0:19:37:ff:ae:83:24:01:dc:a8:d6:9a:
15:20:5c:63:34:50:6f:9b:1b:b1:e3:a5:46:91:3f:
d2:98:73:74:ff:3e:6d:6b:9b:04:21:6c:a0:0d:68:
19:46:d6:4c:27:7e:04:54:b9:6f:7d:ad:fc:88:a4:
cb:3e:21:0e:4a:3a:6c:e3:96:df:1c:5f:1c:1c:da:
f0:42:5e:42:5e:05:2f:3a:c3:3a:69:f7:45:7b:f1:
5d:73:5b:d8:d6:a4:79:6a:63:58:e2:4b:b4:ef:de:
ae:85:d6:a6:91:58:b8:04:b9:4d:eb:0d:66:d8:fe:
dd:29:ea:d0:89:ad:b0:aa:80:a3:aa:7a:4a:07:47:
53:10:5a:7c:67:81:2f:ec:99:bc:e8:0f:6a:a8:56:
75:9b:d0:eb:55:64:2c:f1:88:f9:ce:c0:c7:78:a9:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:C6:0A:F5:45:EF:C3:CA:ED:F6:B5:8A:31:9D:3C:27:AC:D3:EC
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4f:bf:6e:e2:d9:2b:69:c2:9b:6f:93:75:5d:cf:60:7c:66:
88:a3:da:e7:1d:a9:8a:bb:c2:cf:5f:2a:c1:d6:9f:9c:09:27:
5e:26:3f:f8:7f:30:c5:2e:9b:01:34:7d:82:0b:ad:46:8d:4f:
56:cf:de:25:4a:85:24:f6:b9:de:ea:57:7b:e0:6e:fe:3a:43:
1d:49:fe:96:ea:f7:a4:6e:02:b9:3a:f5:0b:33:43:6a:85:28:
9f:44:aa:e2:ab:48:26:6f:6b:fe:44:c5:a6:10:bc:84:6e:04:
06:ab:40:4c:aa:6c:87:15:83:b7:64:9e:d9:1f:8f:f8:38:36:
1b:8c:43:e6:cc:e7:42:0c:c7:e3:92:8a:07:44:1c:31:c4:2e:
72:3e:ff:be:ea:60:dd:89:1f:b5:a0:9b:72:3c:d5:b6:fa:1f:
5d:3f:08:c4:36:e8:1d:22:7e:27:74:57:03:e0:86:6c:06:9a:
41:1b:ac:eb:29:60:2b:cb:38:6b:1b:05:09:bf:33:dc:6c:89:
d9:b7:83:93:be:87:85:01:93:66:55:21:33:08:68:55:3c:6e:
ee:57:01:49:78:a8:07:42:8b:ab:63:0e:7b:d7:9f:fc:1c:b8:
1e:f0:0b:70:b1:32:1c:a7:fe:de:74:bf:09:83:20:f9:fa:ce:
cf:fd:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:24 2025 by rpki-client on console-fra.rpki-client.org