Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: nhmNcLHW2om24zpstTTIciNZpM1ODdC/1/cIQGrWwQ8=
Subject key identifier: 2B:E5:4E:D3:64:38:80:35:55:E4:33:2A:02:80:3B:95:A2:E0:37:0B
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0194BB29874AEEE2D8D86D5895DE65B8FBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 04F9
Signing time: Fri 31 Jan 2025 07:00:48 +0000
Manifest this update: Fri 31 Jan 2025 07:00:48 +0000
Manifest next update: Sat 01 Feb 2025 07:00:48 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: t8Z8KqhT155F+BJTVa4M2d5TOY0zdJeM6GoPGuJOkHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:87:4a:ee:e2:d8:d8:6d:58:95:de:65:b8:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jan 31 07:00:48 2025 GMT
Not After : Feb 1 07:00:48 2025 GMT
Subject: CN=2be54ed36438803555e4332a02803b95a2e0370b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:68:4c:87:9b:a2:a3:2b:4b:b8:af:83:c7:
ab:5e:8e:53:db:5f:af:b6:2e:f7:74:e5:25:9c:05:
d3:85:44:a9:56:88:0d:f6:1f:63:40:a6:59:cf:69:
36:14:73:69:49:2e:fc:2e:e6:c3:82:20:46:83:c5:
9c:79:52:b6:9f:27:31:c0:2b:f8:2b:36:9b:d2:f5:
64:f1:75:9a:95:85:6d:65:d4:ef:e1:a8:e9:73:9d:
64:fc:9c:b4:44:42:bd:ff:1e:16:ac:f0:b0:32:8b:
77:da:60:e3:4d:83:29:db:07:7d:ec:ad:56:f7:0b:
31:0c:d7:60:2b:9c:c1:cb:7f:68:fb:6d:72:bc:0c:
33:5e:23:5c:64:4e:f6:ca:51:b1:7b:6b:72:9e:94:
ba:40:75:06:03:43:fa:1e:35:8d:36:a5:7e:a5:4b:
28:ab:d7:00:b5:7e:3f:81:7a:d5:df:f4:9c:2d:60:
ec:81:32:9e:14:64:5b:6f:e1:c4:6a:1c:02:8e:4e:
05:0e:78:50:81:68:a4:d3:74:57:82:f0:28:6c:d4:
77:b5:5d:20:b8:4e:b6:15:e3:c1:f0:85:3e:f4:bc:
48:b2:c4:9c:2a:3a:13:4c:c3:0e:46:78:a3:21:cb:
12:3c:74:e7:46:d1:40:87:f4:5c:7b:ce:70:6d:f4:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:4E:D3:64:38:80:35:55:E4:33:2A:02:80:3B:95:A2:E0:37:0B
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:24:7b:86:3a:46:7e:c9:0a:9c:79:5f:c7:2c:ee:4e:85:
61:56:e3:86:e0:fe:cd:93:be:0a:5e:41:a3:7f:54:9c:55:1b:
82:ea:05:16:fb:1c:d5:08:cc:05:a8:77:0b:e2:e6:4d:de:83:
77:b7:80:c3:55:12:7a:71:46:a9:df:a8:67:60:38:fa:6a:8e:
27:f5:91:f1:49:71:fb:3e:f5:a3:ea:e3:79:23:34:07:43:03:
8e:05:fb:98:8e:00:c0:f2:0a:25:b5:8a:04:72:d9:01:20:d6:
c1:83:cf:80:54:ff:0c:63:d7:0a:e8:67:88:5b:e9:7f:45:d7:
e1:a0:6f:ed:ec:a5:f5:62:c5:4d:c6:77:0b:2e:65:24:97:d2:
d5:b0:d1:8c:37:04:8f:0a:0a:e9:9e:06:14:8a:98:88:b9:b3:
67:2d:a7:c0:3c:78:82:06:8d:e2:48:e1:67:ae:25:22:9d:49:
88:06:0b:aa:e6:52:ec:eb:1d:8d:77:de:e6:fa:b4:c2:7e:73:
dd:ea:97:b3:86:ba:a9:5a:23:f2:83:f9:4c:4d:75:41:44:ca:
b2:43:0b:73:a7:29:18:9a:7c:94:df:2c:5d:ba:ea:fd:f8:ef:
5c:aa:9d:7e:e6:f3:b2:d3:29:cb:7e:40:13:fb:9f:55:ea:6d:
a5:e0:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:45 2025 by rpki-client on console-fra.rpki-client.org