Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: N7URGORDMGUXz6MXTz7RGtns4T00XCb1fNEiOtqzhbc=
Subject key identifier: F3:5E:3A:14:4A:2F:F6:AF:99:9F:7A:06:54:34:4B:BF:85:E2:7B:70
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 0194BB2950A89D9401575F8486417615355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 07:00:34 +0000
Manifest this update: Fri 31 Jan 2025 07:00:34 +0000
Manifest next update: Sat 01 Feb 2025 07:00:34 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: XXMrRGtqhp6hbkn64IhpVUZemhK8pLQaiFYEIlBM87A=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:50:a8:9d:94:01:57:5f:84:86:41:76:15:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Jan 31 07:00:34 2025 GMT
Not After : Feb 1 07:00:34 2025 GMT
Subject: CN=f35e3a144a2ff6af999f7a0654344bbf85e27b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:de:b7:54:c7:1c:2b:1c:a9:58:b9:db:eb:
21:d8:0e:27:d5:aa:f4:8b:c6:dc:7f:48:46:15:aa:
b9:45:70:7b:a3:f3:c8:12:dd:9c:d0:04:14:f5:f3:
90:7d:ca:8a:c5:3d:8f:c1:0b:dc:ce:28:3f:6a:ba:
f1:01:db:ca:ab:df:a5:17:ba:2e:3f:d0:16:ba:af:
3a:44:11:c6:d2:cf:f4:27:6b:ef:c2:bd:97:7e:63:
84:f7:0b:1b:85:c8:60:a9:35:f3:1f:28:75:1c:3d:
2a:0d:69:59:01:a3:48:8c:19:c4:6f:dc:65:0b:05:
d6:5f:c6:1a:44:e3:f6:dc:95:ab:a9:2f:34:02:03:
81:dc:67:ff:b4:c0:60:d7:71:03:0c:d2:21:6b:ea:
c5:a3:61:58:e7:28:11:27:c7:e8:6e:53:d0:72:67:
6a:f8:60:f8:0c:38:b9:17:f9:69:33:45:bc:83:97:
19:71:0d:f7:5f:c6:50:57:29:99:2b:6e:63:c0:c7:
64:55:41:a7:8d:b0:d8:8c:00:77:7e:e5:b4:ed:1b:
71:6e:98:9e:7e:c5:8e:fe:8e:ba:8e:0e:ec:f0:70:
9f:83:ab:82:68:9b:84:80:51:01:7b:2c:fe:53:6c:
3f:b4:43:3e:7d:f3:5d:da:fb:4b:61:aa:94:86:f3:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:3A:14:4A:2F:F6:AF:99:9F:7A:06:54:34:4B:BF:85:E2:7B:70
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2d:a2:5c:e3:a2:34:81:e2:b9:01:b9:ce:b4:ca:d4:71:3f:
9e:70:0f:8c:6e:16:0c:7c:9a:1a:76:bc:77:70:30:d3:8d:99:
ed:95:fc:0b:97:48:c1:91:21:56:6c:7e:f7:11:27:e5:ed:c8:
af:b8:9e:37:e6:39:5d:f7:a7:fd:cc:e6:a0:06:aa:f2:f0:40:
f1:06:4b:f0:68:46:17:bf:ac:86:1b:f4:22:f9:3d:64:2b:6c:
d2:80:9b:13:3b:a5:03:61:a1:1e:9f:2e:f3:ac:ee:c4:cd:d4:
f2:f3:35:b4:61:0b:96:8d:8d:35:a8:25:7e:27:1b:dc:56:35:
50:f0:ef:69:37:46:e9:a6:6c:eb:45:02:9e:b9:f5:cf:ee:f1:
2e:58:94:14:1d:4f:02:ac:83:9f:19:42:e0:4a:2a:13:46:03:
a7:91:79:12:4a:2a:d0:d9:5f:ac:98:de:0a:67:d0:81:98:c7:
40:a0:90:08:d9:f1:4e:c5:6f:9d:e3:37:a1:18:0e:2d:fa:40:
67:bc:30:05:c1:29:43:b9:6e:f2:46:d4:da:06:96:2e:45:0f:
b0:77:29:fa:49:87:f9:0f:91:b4:c7:2d:f0:54:05:e1:d5:37:
87:54:f5:bf:5e:ba:e8:58:77:16:91:f1:41:1c:2a:df:6c:0c:
fc:bc:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:15 2025 by rpki-client on console-fra.rpki-client.org