Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: 2fhOsfFq8iHv0VCwUXodKaAMG9ODLYWNq6bd/cSHxaQ=
Subject key identifier: 89:24:48:B1:49:F3:6C:E7:29:80:0C:FE:61:4F:8F:71:5A:25:81:30
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 0194BB605672EE04EA693E2576E0069DBBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:40 +0000
Manifest this update: Fri 31 Jan 2025 08:00:40 +0000
Manifest next update: Sat 01 Feb 2025 08:00:40 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: EvpQejKgmvPPmNhtsg3bTVlvYmV7kLEC1fNZ+LFk4Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:56:72:ee:04:ea:69:3e:25:76:e0:06:9d:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Jan 31 08:00:40 2025 GMT
Not After : Feb 1 08:00:40 2025 GMT
Subject: CN=892448b149f36ce729800cfe614f8f715a258130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:b5:40:c0:4f:d1:e7:62:30:d0:06:6a:01:
7a:6d:c1:39:28:17:6d:d2:67:20:ba:aa:55:a2:57:
04:e8:b9:cd:f4:2a:14:12:1e:4e:1e:53:38:20:85:
73:1f:ca:10:8e:08:be:9d:75:66:14:28:99:b1:01:
6a:38:87:ea:7e:fc:8f:48:51:ed:71:73:bd:99:a2:
3e:36:ad:c3:27:8f:12:8c:33:6a:a6:fa:d1:fc:f5:
25:87:1f:aa:04:3b:83:d0:6c:d2:8e:00:4c:cc:6d:
7e:5a:95:04:97:60:79:27:ea:5b:52:90:08:e8:7e:
d1:52:cf:d8:66:7c:3a:a7:0a:ae:bf:3d:e8:e5:ed:
17:b3:1d:99:81:bc:4f:89:87:5c:48:5d:ee:a0:75:
c5:79:7c:53:8c:6d:17:6b:bb:12:8d:e5:4c:d3:b3:
25:c8:f1:68:db:c3:09:da:e5:ab:38:d6:93:cf:90:
a1:c8:3c:23:65:30:46:cb:0a:3a:96:1d:bb:83:db:
8d:55:99:91:b4:a8:8a:ab:bc:ba:37:c2:01:87:06:
e8:e9:42:74:ab:15:2e:c9:08:f7:17:65:0b:21:69:
2a:16:f8:15:82:f6:3a:7b:48:84:93:54:78:b5:ca:
54:6a:e3:4e:1b:34:ee:3f:2c:6c:a8:25:b7:b5:d6:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:48:B1:49:F3:6C:E7:29:80:0C:FE:61:4F:8F:71:5A:25:81:30
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d9:27:08:84:d2:39:f3:c2:c6:96:0b:10:a9:e1:ea:bf:25:
c5:21:49:8f:98:14:6f:f1:9a:b2:c5:b3:9a:7c:3b:16:d3:12:
b6:13:5a:aa:5f:dd:e9:e4:5f:ef:22:67:fa:f3:71:63:c1:46:
52:e4:71:ce:7d:e1:f1:e9:ff:dc:6f:8e:04:f1:a4:c8:ba:0b:
d0:6c:c0:d8:69:0d:f7:dd:8c:72:b1:4a:bd:ca:17:dc:54:1c:
0f:30:1d:5a:20:b3:6c:5d:62:dd:d7:d9:17:79:ab:77:27:47:
e1:b3:5c:07:db:b4:23:9b:64:cb:4e:dc:bf:13:d9:44:55:c9:
83:ef:24:91:f2:8a:ac:31:6f:90:b7:05:1d:d9:5e:0f:52:36:
60:f9:df:d9:9d:53:b4:e7:e8:9c:a0:5f:f5:07:2c:f6:0f:24:
e1:de:8d:1c:0d:0e:10:3b:26:6f:66:e3:44:dd:78:3f:17:b7:
49:f2:09:77:2f:6c:7b:d5:c7:d7:03:66:c9:bc:b2:9b:98:34:
cf:13:6c:a1:09:a4:ea:e2:f1:ac:98:9c:8b:48:95:bc:81:36:
6b:8f:bb:b1:15:39:0a:c1:37:75:cb:0c:f3:34:84:c2:40:0a:
da:9c:47:c5:b7:e6:3d:37:39:e0:10:b6:2f:07:fa:6d:e1:9e:
52:be:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:08 2025 by rpki-client on console-fra.rpki-client.org