Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: /HMmhmJA3CFQ5BXx1o0Nequ2ob94Gp2gaR+ws9lrY/g=
Subject key identifier: 54:AF:40:D2:46:97:8D:0C:37:F7:F2:67:7B:FC:1E:B8:87:11:16:3C
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 0194BA84190B8E20B2AD5154FCE324010963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 0F07
Signing time: Fri 31 Jan 2025 04:00:06 +0000
Manifest this update: Fri 31 Jan 2025 04:00:06 +0000
Manifest next update: Sat 01 Feb 2025 04:00:06 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: 0oro0WMWzvqduhXCgdygn+fMcUDDaIWkchVuPMlkPHI=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:19:0b:8e:20:b2:ad:51:54:fc:e3:24:01:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Jan 31 04:00:06 2025 GMT
Not After : Feb 1 04:00:06 2025 GMT
Subject: CN=54af40d246978d0c37f7f2677bfc1eb88711163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:b4:7e:87:fc:07:f7:68:cb:3d:82:44:f1:
4b:83:bc:31:8f:e4:60:ec:d2:0a:33:9f:6e:3d:bc:
7d:5e:b2:20:57:41:6b:8c:13:b6:33:37:cf:09:16:
3c:7d:9a:cb:d0:d9:df:20:e5:a3:92:95:0a:2a:0d:
11:44:32:0e:75:9b:eb:13:ed:c8:38:97:e9:52:75:
35:30:7d:8b:ab:e8:79:63:60:09:c0:68:b6:de:09:
25:00:f3:13:bf:13:0a:10:26:0c:56:a1:62:14:f5:
58:15:76:66:05:26:56:33:6f:27:3d:17:4e:fb:d2:
88:7f:a1:93:e9:1f:9d:16:e4:78:73:cd:82:3e:35:
cf:a2:6d:32:13:e3:a9:fd:b3:73:fc:1e:b0:83:ac:
98:ed:a0:b4:16:5c:c2:af:68:d2:7e:59:ed:e6:f7:
6f:2c:bc:bf:cb:28:4c:ee:9c:70:22:93:a9:dd:b6:
fa:de:4e:ef:f1:71:90:b8:82:2b:31:46:29:05:d4:
eb:a8:66:5b:88:b4:4c:15:e7:88:aa:08:02:25:3e:
af:da:9c:ec:da:6d:fe:51:b1:0b:b1:c8:4b:63:e4:
41:8b:e9:ed:b6:0e:e3:e8:7d:5c:da:4f:4d:4c:54:
60:08:c6:03:df:9f:be:64:b2:e6:41:77:22:21:4f:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:40:D2:46:97:8D:0C:37:F7:F2:67:7B:FC:1E:B8:87:11:16:3C
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:31:55:d6:b9:24:fd:3b:2f:0e:85:4e:f8:76:90:b7:5f:
65:2f:5a:d7:06:c0:93:d8:82:24:0c:7a:e8:16:4b:ff:70:cc:
a0:6a:88:8c:e3:28:e1:d9:21:98:c4:1a:70:f3:d3:7a:7e:bc:
0f:9b:44:69:4a:f2:ee:9b:ba:1b:d2:4c:cf:b5:92:2c:3b:8d:
61:7d:7d:3a:a7:9b:72:8a:f2:78:0f:55:d5:25:1d:00:d9:27:
d6:fe:ad:e8:25:a4:42:71:93:c1:15:ad:a2:76:a0:81:67:ae:
fb:25:b8:69:5d:a2:6e:25:ce:4e:95:0e:42:48:3e:66:f4:16:
d2:ed:24:f1:86:4a:74:98:f3:ff:44:b3:b2:47:22:be:19:40:
4d:5a:0a:ba:8d:5d:57:75:6c:3e:dc:2d:f4:3c:cc:83:07:ff:
be:81:ba:96:2f:b2:74:1e:7c:88:ef:1c:bd:6c:87:ce:d6:5c:
40:9e:8f:6c:9c:47:72:80:a9:19:23:cd:0e:e1:58:ec:7a:60:
96:59:62:73:f5:71:f1:b8:10:82:90:e8:55:bc:0e:9e:30:98:
21:17:81:ba:bc:60:a2:43:d6:0d:97:7e:fe:de:7f:df:00:e7:
3d:3e:ed:3a:07:81:1c:01:9e:b6:d7:25:c8:42:df:48:9d:a1:
a3:c8:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:38 2025 by rpki-client on console-fra.rpki-client.org