Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: S3B5kuU2EkeAghhklPRaaCVhoaw0Pmo3IgKDMfFkBLQ=
Subject key identifier: AF:EB:39:24:59:C2:F5:58:EB:67:1C:29:CF:F1:57:C9:9D:E7:DF:78
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0194BAF21087292C759146019FC3C0015E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:13 +0000
Manifest this update: Fri 31 Jan 2025 06:00:13 +0000
Manifest next update: Sat 01 Feb 2025 06:00:13 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: SplVomzRDP9Cd3ohRq4ah3i+l5vLK0k19WsL1re4OVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:10:87:29:2c:75:91:46:01:9f:c3:c0:01:5e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jan 31 06:00:13 2025 GMT
Not After : Feb 1 06:00:13 2025 GMT
Subject: CN=afeb392459c2f558eb671c29cff157c99de7df78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:97:5c:fd:89:e5:27:1a:2e:99:e7:c5:db:
2f:07:eb:6f:9d:21:7d:6c:3f:c5:a3:77:47:23:63:
ca:ba:1a:4c:c7:df:02:cd:5c:82:b8:44:9e:85:c4:
4a:5a:7c:38:47:3d:9c:52:b8:24:2a:89:08:f4:fb:
31:db:ff:36:e7:ad:fc:1c:2d:cf:cb:bd:4d:14:79:
1f:9d:de:bf:20:16:9f:17:1f:07:99:2e:5f:70:b9:
a2:25:4e:85:19:7c:c7:bf:a6:74:8f:a3:8b:1e:21:
44:0f:75:fc:5a:b1:d5:b0:8f:be:bd:00:c2:1f:70:
df:26:6c:ef:82:81:be:92:a3:3c:3b:d0:de:ad:4f:
fd:7d:8f:47:3c:7a:cf:8d:72:5d:b5:f0:49:ba:c6:
82:3b:50:83:f2:bf:ba:1e:00:85:80:32:fe:a3:90:
96:a1:15:12:7b:5c:11:b3:09:94:a0:f7:46:f7:95:
c8:a2:49:e0:fd:7a:38:bc:5f:cc:7a:d1:ab:c8:59:
58:67:15:66:37:1b:d4:46:45:2b:65:ea:d6:5c:be:
a0:d0:27:8d:99:b9:b9:e2:ef:d5:51:58:b9:41:09:
98:e0:39:19:5a:18:b3:b0:8a:ad:ba:47:d1:b9:bb:
ae:d6:d7:af:4a:8d:75:1b:73:51:c6:bf:f5:55:4c:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:39:24:59:C2:F5:58:EB:67:1C:29:CF:F1:57:C9:9D:E7:DF:78
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:0c:bc:18:d1:c9:39:46:5e:89:6f:64:29:5b:a6:a5:cf:
fe:be:fd:71:c1:b2:47:a6:8a:84:32:07:f7:2e:fa:4e:89:66:
88:9b:d8:b1:74:44:44:f8:0a:e6:d0:a9:9a:4f:07:41:77:36:
03:90:8a:9f:ba:32:06:46:4e:8d:4e:33:81:32:31:a9:5f:8b:
c7:1e:32:1a:35:17:2b:12:76:ad:11:f4:4a:09:43:e7:10:ff:
d5:c7:4b:0f:04:c5:53:f3:e0:78:26:c6:33:2a:6b:ac:bb:96:
88:88:6c:0a:34:0f:00:b8:45:f4:41:21:26:38:dc:6d:58:24:
7a:d5:f6:57:ee:ed:1d:97:7a:c2:fe:0a:6e:b3:87:f7:35:a6:
d9:8c:37:33:f5:9f:e6:c6:74:ac:37:8b:42:25:5e:78:fd:e5:
8b:e9:5c:cb:81:5d:d5:65:65:2b:de:ea:05:be:62:18:bc:34:
bc:82:40:39:d6:de:41:bf:aa:d4:8c:93:bb:74:d6:86:a3:de:
2d:84:09:0c:1c:81:f5:a1:b8:05:b5:a8:0b:e1:b6:89:83:ce:
f9:81:08:7b:c9:c5:b8:7d:52:9f:b5:f6:46:5d:f7:27:e6:db:
26:4c:bc:26:fe:13:db:a2:1a:b9:8f:d3:41:8a:df:2e:eb:6b:
1f:d0:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:43 2025 by rpki-client on console-fra.rpki-client.org