Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: re97fPg2+w9PDvSGVFC2n/RZ/YqSRAE127x3RU2UZVI=
Subject key identifier: 1E:5E:9C:81:05:A1:24:97:B1:12:FB:21:CA:86:34:94:2D:CC:0E:12
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 0194BABB7161A331D7AB8764A4A27FAB2716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0BB0
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: YSDyPO7jPNTpl/S/vGIbAqazMiwAvqx7uN+INuaEeUs=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:71:61:a3:31:d7:ab:87:64:a4:a2:7f:ab:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=1e5e9c8105a12497b112fb21ca8634942dcc0e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:83:f8:34:99:a2:f7:63:3e:15:2d:1c:3b:0d:
96:db:aa:a4:91:aa:d2:d4:64:a5:c0:d8:46:c8:ae:
26:e1:ac:85:ed:f5:8d:40:57:5c:c2:a4:58:ec:04:
9f:a1:fd:d6:0b:b9:1e:14:f1:8b:d7:4e:4d:94:a5:
b7:03:c2:6c:fe:95:eb:35:67:18:7d:f6:ab:22:90:
d9:df:ed:c3:0d:bb:7e:e2:45:b0:4f:25:67:a6:23:
6b:37:34:cf:9a:f1:c2:f2:dd:fa:fc:a5:2b:af:06:
49:a3:b6:cc:e0:2e:9a:9c:ad:9f:d1:cc:9b:21:1b:
a4:9d:8a:cf:04:57:e6:ff:b9:6c:3a:64:56:6d:09:
83:50:75:6c:4e:51:d1:9d:bd:40:e8:ab:31:f5:07:
0a:72:50:2e:4f:2f:34:16:3b:57:ab:06:01:d8:69:
c2:7c:92:a7:c4:03:3a:5c:87:f4:4f:b5:2e:3a:df:
55:89:96:44:ed:20:13:10:a6:c9:9a:2d:ec:21:2e:
fe:e4:e1:41:0e:9b:b6:80:bb:7b:a3:01:61:01:23:
10:3a:b0:2f:cd:6e:f0:62:84:c5:91:79:34:45:14:
e8:24:61:ac:4c:75:4d:3b:20:5d:7e:77:56:25:1b:
aa:c0:a8:59:7a:6b:64:a2:16:91:7b:1f:c6:18:72:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:9C:81:05:A1:24:97:B1:12:FB:21:CA:86:34:94:2D:CC:0E:12
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3b:f3:d7:99:34:4b:11:df:e4:88:31:3c:48:ee:0f:83:e3:
4e:ee:7e:ac:1b:9f:00:15:07:17:2e:49:46:ef:12:7d:50:f7:
10:47:86:21:15:e2:ff:a5:bc:49:02:fc:b6:e0:33:ea:c7:0b:
43:59:ff:9e:9f:48:82:e9:8b:72:6f:6d:8b:0b:6c:be:2b:fe:
3d:7c:a5:40:12:4c:54:8c:82:e9:59:8f:ce:ff:5f:f9:81:c1:
44:2e:a3:bf:82:be:a1:b8:ed:bb:25:88:f3:e3:5d:7a:48:b5:
93:b3:69:24:cc:9a:ee:62:1f:81:d9:c1:06:7b:2a:f5:94:6c:
93:c7:69:90:ff:8b:5b:18:ce:8d:08:14:1a:f4:4c:3d:aa:2c:
b0:da:3c:66:49:60:47:4a:df:c2:f4:c4:00:1d:1e:ab:ea:e9:
7c:c0:cb:af:d0:ff:2a:bd:95:6d:88:cd:ba:cb:d2:c7:fc:b9:
d2:41:42:09:8b:59:41:33:e8:78:40:51:41:d4:1d:e7:84:b0:
fa:e7:0f:0b:fb:e8:0d:ee:fc:8b:60:1c:01:92:39:3a:ca:48:
e8:93:90:d4:b1:80:dd:a3:34:80:e2:3a:d2:51:9b:35:f7:6f:
1c:06:f4:9d:8a:ac:53:8e:74:54:47:3b:33:c3:00:a3:2e:bb:
f4:a9:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:25 2025 by rpki-client on console-fra.rpki-client.org