Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: l+nCA7HBYmB2YjLIC67E8Xy7Y7YY65r5iQCZqOsoKqU=
Subject key identifier: 6A:07:AC:C2:13:64:01:3D:AA:3A:DD:29:6D:DA:81:1C:78:3A:6A:6D
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0194BB96E6471D532F43CD4441A28025CFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 09BC
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: Zch8jOqfkL5VZi3-XuE4AZj1UWQ.roa (hash: Gr5X2Rmhr1oI9Q5+L8dhJwGmpeVsMSPTaTpb15ko9Pw=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: 4n6vrOcyiFLI+Ei1Ba+u72qVo9KvgSCo6d7u9O1g2pE=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e6:47:1d:53:2f:43:cd:44:41:a2:80:25:cf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=6a07acc21364013daa3add296dda811c783a6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:80:1c:dc:22:9a:70:a1:fe:d5:95:f2:e2:
14:e9:4a:57:4d:51:4d:13:63:e1:e9:94:ab:af:cd:
ac:53:f8:14:65:8b:e8:91:37:20:58:95:49:a6:57:
ab:ff:1f:9d:88:3d:cd:65:5f:9a:5e:31:d3:11:a8:
35:01:fe:91:c3:00:db:b4:f9:e2:a8:3c:89:3d:ce:
ed:e1:83:5e:ca:50:f4:ca:d0:dc:c0:db:6e:3b:cb:
f7:7f:55:d3:65:e7:bd:cb:97:bb:7c:47:2b:fd:27:
4a:07:34:ce:ef:26:6e:55:e2:f6:7f:eb:06:fb:f4:
e1:5e:ef:52:3d:0c:e7:ee:3e:ae:cd:95:7b:2a:d0:
e9:03:ee:40:9c:f0:b6:19:f2:63:ee:c8:94:2f:6e:
e3:17:17:db:da:67:e1:32:10:3b:fe:0d:a6:e2:a6:
b8:f4:e0:e1:0d:29:07:55:47:67:60:05:da:bc:ba:
93:e0:02:61:43:c8:10:97:6d:43:34:d8:04:48:4c:
2a:e9:ee:fb:6c:c5:91:1d:ee:bc:8d:b1:d0:ee:24:
b6:bc:9e:8c:e9:6c:25:5f:f3:9b:2c:cd:67:ea:22:
ae:b7:c3:ef:e3:50:6c:ef:bc:2c:51:60:f6:bb:2b:
d5:f0:92:55:7f:12:44:4f:4e:ae:be:2e:45:b7:3d:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:AC:C2:13:64:01:3D:AA:3A:DD:29:6D:DA:81:1C:78:3A:6A:6D
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:d7:b1:b6:ad:f5:4e:3a:27:1d:79:8d:43:7d:47:dc:38:
50:ea:3f:37:aa:70:e2:3f:91:f8:1f:73:43:ad:ed:0f:32:7f:
b7:26:94:e6:fd:26:a8:89:49:e5:61:9f:b2:5a:2f:08:1c:5f:
bc:8b:06:1b:71:e5:af:e7:76:d9:1d:00:11:ca:22:5a:f0:de:
29:0a:ba:f1:67:be:39:8b:25:7b:f9:ed:3f:f5:9e:6c:a7:49:
6f:02:a8:c3:fd:8a:9e:9c:e3:cd:73:59:8b:59:72:ee:90:43:
4b:c5:1e:84:d1:7b:76:b9:56:2a:6e:4e:08:3f:7b:91:4e:7a:
cc:eb:41:5e:11:3e:9a:1d:fe:8c:b3:04:e7:01:db:98:e2:58:
8b:0b:e9:02:18:6c:9a:7b:73:f9:e3:d1:4b:59:5e:d4:34:85:
e5:71:9d:37:11:96:80:32:69:b2:55:53:11:d0:95:b4:77:cb:
30:1f:29:14:9d:ea:48:1f:bc:7b:11:ca:16:60:9e:ea:89:92:
85:08:0d:fe:a6:35:49:41:e9:03:8a:1e:7c:02:36:67:19:55:
d4:a0:17:5e:61:5b:b0:b9:75:8e:03:70:03:bb:91:8c:8a:62:
50:bc:34:14:23:bc:94:15:0b:a8:b7:34:ab:2d:e1:37:9b:7f:
45:4e:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:07 2025 by rpki-client on console-fra.rpki-client.org