Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: b2ihPi/CdcvqqDlyVTvA8oQn4M2MjvpM5jq2uog2i+k=
Subject key identifier: 0F:CD:08:B7:0A:4A:AE:25:A5:98:B4:5A:F6:0D:2B:A6:8C:FA:41:EE
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 0194BA842F1A4478C0AAA69379C94A8A38D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: ntl/SEsRJJ+kos+JM5M9RFtdx7WPdib7NHyW4QbiYss=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2f:1a:44:78:c0:aa:a6:93:79:c9:4a:8a:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=0fcd08b70a4aae25a598b45af60d2ba68cfa41ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:a4:87:54:66:5d:e4:b6:df:de:1b:d8:fb:
f4:ea:5f:61:37:ef:10:5f:7b:c0:eb:5e:c5:06:e5:
b0:39:c3:5e:b8:a3:49:6d:f8:08:2a:3d:bb:37:b3:
c0:90:a7:d7:52:ee:c9:fd:e5:96:f7:9a:ea:8a:a0:
f9:aa:d9:44:73:06:eb:a6:6a:61:12:8e:17:71:96:
09:37:c4:b5:8e:36:8a:06:04:6b:9b:31:df:c4:e6:
f6:36:ad:9b:91:88:d9:44:0c:86:26:0a:56:89:5f:
37:f6:64:e5:fc:6a:5b:2d:28:af:94:6d:04:c5:eb:
59:ad:71:4b:5e:91:06:5e:02:27:4a:4d:10:74:92:
ae:6d:49:c7:88:71:9f:4e:da:ff:c8:55:05:9e:c2:
4e:87:1a:64:36:62:e4:f5:e6:11:50:68:a3:30:6f:
5d:c5:41:69:fa:50:cc:2d:bc:ae:d3:db:cd:1c:04:
78:bf:11:f2:12:d2:d5:80:44:eb:df:4d:50:c1:b2:
8f:19:65:b1:47:c2:4a:57:20:9d:b4:85:85:5c:41:
36:2e:05:02:14:d4:4d:ef:7d:61:f4:28:c5:95:88:
7b:5d:e8:f6:33:2c:7c:b7:0c:ee:55:0d:e5:0f:03:
eb:8f:9b:6a:b2:f0:ac:bb:b2:db:c9:d0:c7:03:0f:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:08:B7:0A:4A:AE:25:A5:98:B4:5A:F6:0D:2B:A6:8C:FA:41:EE
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0e:2e:24:42:85:90:77:35:e4:ee:93:a8:cd:a7:af:10:d1:
f1:0d:e0:0c:cf:25:de:c2:b3:ba:cd:a7:e6:5c:28:ba:5a:13:
09:53:a5:e8:0e:0b:a9:1f:bb:b6:a9:d2:46:17:94:ba:45:5d:
6b:59:88:71:a3:07:0d:12:7a:16:fa:35:82:bd:5a:a8:30:95:
2d:79:2b:98:64:21:94:19:9b:86:c3:8e:9c:da:fd:6f:39:8e:
5e:86:df:f0:e8:f8:bd:2c:ac:8b:e2:36:ea:dd:01:d2:39:6d:
15:23:5e:c9:3c:86:65:dd:5a:b2:ea:ce:51:73:8a:04:5c:61:
2e:1f:ac:9e:d6:17:77:5d:16:73:a7:b1:29:18:31:51:fc:0d:
64:1e:a4:e4:64:32:c9:5a:8e:bd:51:e2:8c:f1:7b:5f:7a:a9:
d0:02:ed:33:b8:de:7a:4c:c2:fc:9d:99:ff:f8:c4:25:44:8f:
b6:bd:b4:21:f1:40:87:78:20:d4:16:79:75:b2:5a:9d:16:46:
22:02:a9:ed:26:56:28:b2:03:3f:4b:92:52:24:04:0b:42:a7:
01:2a:d4:d7:f0:5a:ed:df:18:67:8d:68:7c:b8:f7:f5:5e:0d:
68:a2:fa:17:c9:31:33:49:45:76:2e:89:eb:90:f8:02:e2:c6:
63:30:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:52 2025 by rpki-client on console-fra.rpki-client.org