Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: Tm8FDuY2PfLO42ehW9P3j830BUXuYoRROGy3+NZluL0=
Subject key identifier: 96:46:D7:F5:26:13:21:E6:A4:D7:94:A6:FD:48:16:99:9F:C0:FE:7A
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 0194BB5FF7B40B8177BAD08DB33ACD758FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:16 +0000
Manifest this update: Fri 31 Jan 2025 08:00:16 +0000
Manifest next update: Sat 01 Feb 2025 08:00:16 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: i+/XFQAxLtQMwNioLwKhNwML9DNtGsgkLa5rSRXMCfI=)
2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f7:b4:0b:81:77:ba:d0:8d:b3:3a:cd:75:8f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Jan 31 08:00:16 2025 GMT
Not After : Feb 1 08:00:16 2025 GMT
Subject: CN=9646d7f5261321e6a4d794a6fd4816999fc0fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:52:5a:e9:2c:84:0e:57:57:8d:c0:f1:99:
db:82:fd:53:71:e7:0d:dd:b6:9f:3f:d7:44:27:6a:
4f:9e:8e:35:17:05:22:df:13:80:e9:2f:02:03:78:
6e:6f:c3:ab:3f:89:f0:28:12:35:e3:11:3d:ed:3e:
dd:b0:7f:75:99:70:d5:b7:a4:b8:bd:16:6e:b4:ee:
42:62:bc:65:d4:19:bc:0e:1e:5f:5e:ec:2e:7f:28:
a8:e7:e3:ed:c6:b9:a6:4d:81:6a:06:df:4c:f9:1e:
a7:2f:b9:40:d4:92:2b:e8:f2:b9:e1:3f:a9:0c:82:
58:e9:75:30:bd:cf:68:28:d9:c2:b7:db:cc:54:54:
ae:1f:65:4c:63:25:a2:9e:3c:e8:5d:35:f1:a7:ed:
df:c7:8c:0a:19:74:cb:1d:42:51:f7:ff:a2:0c:f1:
c5:78:cc:8c:e2:c3:94:e0:44:fb:24:7c:d4:8d:3b:
81:46:33:fb:46:85:d4:eb:0d:f4:5d:27:0c:f4:61:
fd:a5:8f:c9:8c:2d:6a:3c:24:99:ce:93:5a:cb:b9:
21:05:4f:5e:79:56:85:70:ff:67:ae:12:90:ac:12:
94:c1:ef:53:05:03:ef:12:a8:58:0e:06:33:aa:23:
07:91:bd:a1:8a:39:b0:e6:20:70:96:e2:f1:ad:37:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:D7:F5:26:13:21:E6:A4:D7:94:A6:FD:48:16:99:9F:C0:FE:7A
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:31:8e:d9:bd:03:c3:78:af:6a:64:3d:e5:51:d9:05:cc:
5b:12:fb:7f:a9:79:8c:2f:2f:33:17:17:30:db:04:05:92:23:
c2:0e:52:22:26:98:10:b9:11:e6:1b:d8:33:35:0b:97:b5:68:
bf:90:6b:d1:f6:1d:5c:ac:fb:36:0b:e8:97:2b:9d:2b:dc:07:
d8:4e:78:b4:31:60:33:60:68:c0:31:38:03:b5:8b:27:b5:47:
53:3e:0c:4e:46:2a:29:fa:e9:94:90:d2:24:96:bf:de:b6:a8:
8e:db:4c:11:7b:15:b0:80:60:44:90:89:5a:89:08:b7:78:19:
cf:f3:2f:85:4b:c9:35:89:d4:84:69:fb:f8:fe:bb:b8:ff:79:
3e:84:29:f9:14:9c:63:3a:7c:53:20:12:e1:27:54:ee:02:88:
e4:78:3d:4c:50:1d:47:91:61:79:11:c5:94:40:3c:90:98:fe:
1a:df:1a:43:c8:62:db:a4:c8:0c:07:bd:ce:50:07:1a:10:18:
a4:77:73:0f:20:42:8a:7e:b9:f8:25:56:8d:a0:c9:74:70:80:
23:19:b4:27:54:30:b5:ba:b2:f5:3b:96:42:4a:de:df:a7:4d:
d1:96:7f:e7:f7:21:50:0c:83:9e:a2:bd:4d:15:35:f2:d4:d8:
57:d2:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:26 2025 by rpki-client on console-fra.rpki-client.org