Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: MWD0f/1cfmZuVdR2vxObMnbaISLBjjKZ5nopAaJFRRA=
Subject key identifier: CE:52:53:71:92:0F:BC:C6:33:B0:11:99:06:7C:AE:F0:2E:31:54:3E
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0194BB296D5FE58CA0A86C770B76565352C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 02A7
Signing time: Fri 31 Jan 2025 07:00:41 +0000
Manifest this update: Fri 31 Jan 2025 07:00:41 +0000
Manifest next update: Sat 01 Feb 2025 07:00:41 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: WIUc91Vup8pOGWSE3S84Cc4lAJD8A7H4WVgU5elRQZk=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6d:5f:e5:8c:a0:a8:6c:77:0b:76:56:53:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Jan 31 07:00:41 2025 GMT
Not After : Feb 1 07:00:41 2025 GMT
Subject: CN=ce525371920fbcc633b01199067caef02e31543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:15:86:52:5c:de:4d:c3:a6:36:86:04:17:
8e:1b:e5:98:ac:65:8a:2c:46:ad:f6:6e:66:46:24:
e3:d2:6a:3c:97:1e:43:6b:51:61:bc:32:a5:3a:0c:
d4:d8:f3:34:15:ea:ab:77:49:0f:2f:98:8b:7d:27:
7d:d4:6e:65:31:2d:8e:92:e0:00:5b:5f:ca:d5:dd:
4e:72:0a:5c:55:76:f3:b1:eb:1c:ac:6d:90:1d:a7:
50:ef:5a:20:f3:6b:9d:c1:ba:7f:a9:55:80:f7:f8:
90:68:d0:ba:ca:a6:e1:59:6b:8c:c2:fd:98:18:80:
8c:90:df:43:69:7a:b2:15:a6:ae:29:09:f9:66:fa:
84:d9:72:8b:4c:4e:36:22:0f:97:19:87:3a:97:d9:
d7:7a:9d:3e:8f:79:b3:7e:b5:fc:be:1b:30:41:c1:
81:ed:48:fd:2c:17:c6:1d:4d:cd:6d:7b:50:4d:fd:
23:74:15:c2:bc:30:3e:e1:80:5f:0f:ab:58:01:03:
11:33:b0:4a:44:aa:b6:ac:e5:d7:85:ed:3a:67:24:
18:53:7e:a3:4a:5d:3b:ce:a5:09:b0:3a:30:8f:a6:
2c:33:53:9d:ef:06:00:6e:79:94:62:05:9a:6d:68:
e5:60:38:fe:06:fb:a9:0c:a2:ca:35:f7:82:25:22:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:53:71:92:0F:BC:C6:33:B0:11:99:06:7C:AE:F0:2E:31:54:3E
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f2:f7:e0:ef:64:c9:88:66:be:da:29:43:de:5c:8e:68:f9:
9a:0f:6c:ff:84:dc:7c:cc:51:31:a1:a9:f8:a1:13:8f:cb:60:
55:55:5c:d8:71:a1:7d:8e:de:d3:9a:7d:b2:d9:25:19:9e:f4:
e9:a9:a0:39:ba:50:44:ae:9a:da:fc:22:93:a6:0d:b1:4a:86:
ff:47:a7:2b:35:d2:c3:c1:65:40:72:2e:30:fd:83:86:0e:95:
d2:b0:53:27:f2:56:76:8b:00:0d:ca:f9:5c:a4:c7:3a:0c:af:
34:33:e3:d7:5f:09:5f:d6:aa:5d:7b:19:ab:a3:e1:9c:f3:b6:
58:0c:05:d0:1f:e5:51:8f:20:48:d2:1a:8d:0f:f7:3b:56:4d:
ab:2b:7f:84:76:53:45:a8:62:bd:d1:55:7b:0c:2f:f8:e1:04:
2d:73:39:a0:b9:f5:01:3b:64:b1:b9:a7:26:cd:68:59:e4:a0:
62:14:4b:41:8d:0d:52:0e:ef:4d:51:20:e4:8f:4e:0e:07:6a:
50:52:2f:30:c8:fe:f1:fa:45:f2:f1:6d:02:33:25:2b:ea:6e:
44:12:53:a5:78:3b:5e:1c:b0:9a:70:60:37:6c:cb:e9:54:ac:
3b:e7:b1:ef:3e:e8:0d:21:13:0c:28:88:2c:b0:54:23:61:33:
7a:98:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:41 2025 by rpki-client on console-fra.rpki-client.org