Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: i4HNd8jhk7XAT66pGjVndZRyNNMBxN/yZ+QuBZNAB+4=
Subject key identifier: 86:47:1D:00:DF:BD:53:98:5D:D5:EA:92:11:77:E3:40:79:C4:AB:7A
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 0194BABB91C18177D0C86C13184EC27F7C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 0BFF
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: jt1d6woC66Jj+DWN9GHeoB5b6B8mA+JWXOWokUpSVuk=)
2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:91:c1:81:77:d0:c8:6c:13:18:4e:c2:7f:7c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=86471d00dfbd53985dd5ea921177e34079c4ab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:c5:6c:64:96:4e:cf:cb:36:3e:f3:98:68:
b2:77:d0:b6:c8:57:9d:80:c6:28:f8:27:89:ad:71:
14:87:71:93:3f:a5:a7:d2:03:59:1d:01:1e:87:f9:
8e:4f:03:5e:8b:29:6b:32:14:6f:54:5b:11:c5:d8:
99:87:00:6a:ae:5d:d2:f5:ef:a2:33:3b:06:7c:a0:
03:78:22:5e:35:0b:ed:cf:cf:ef:59:13:8e:68:2c:
ad:45:93:44:d3:26:c5:d7:db:e5:e7:af:1f:0e:12:
be:cd:55:57:7b:32:a7:a4:23:2b:ee:a4:dc:cb:b4:
38:06:d0:1b:01:cc:e2:fe:b4:3f:0c:db:29:8f:79:
da:85:f8:d2:dd:bd:28:fa:b1:95:68:a6:86:bd:ba:
15:b2:5b:3f:8a:0b:d1:f2:bf:38:65:8b:5b:eb:11:
3d:7b:43:79:e5:cd:b3:89:a3:90:94:c6:ed:80:ca:
d2:bb:09:7d:77:c6:f5:99:d2:af:06:4f:d9:d3:24:
2f:5f:3d:e9:55:57:06:51:c6:9a:e6:96:08:7f:de:
25:d1:8c:e4:90:81:ff:37:77:6b:98:4b:0a:9e:45:
39:42:e5:c6:dd:aa:d4:4a:8c:4e:f3:c2:41:42:b2:
96:55:98:59:d6:e7:40:5a:93:be:9a:69:c4:fa:28:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:1D:00:DF:BD:53:98:5D:D5:EA:92:11:77:E3:40:79:C4:AB:7A
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6d:6c:89:0a:bd:f7:2c:99:ca:4c:dc:32:6f:39:b1:f6:9f:
75:55:97:65:50:f6:e6:29:04:f2:96:0c:6c:71:a4:c7:f3:aa:
42:90:72:b4:38:0f:7f:8b:41:55:a9:0a:8b:36:6d:27:79:92:
f3:f5:06:26:85:b1:fd:e9:e9:aa:d7:fe:c1:f0:20:99:ab:e0:
59:8b:2b:3f:d5:aa:8c:8f:44:9c:5e:ba:0d:47:3c:63:7e:3f:
05:1f:ae:d3:0b:1e:68:23:fd:47:48:f7:82:d1:d8:93:12:d5:
56:a6:47:18:05:41:09:c1:07:32:fd:f1:b3:24:a9:16:5a:c6:
9c:a4:c3:fe:f5:e4:15:56:28:ea:fa:29:2f:cb:e8:a7:5a:49:
29:f9:05:84:7b:7c:79:b8:58:0d:aa:df:76:ff:1d:74:6e:9a:
5d:86:55:cb:d9:57:d9:80:99:da:23:55:89:ad:55:bd:a4:e9:
29:64:6e:64:98:b8:6e:a6:43:92:ff:db:2a:2d:21:d7:73:5d:
72:ba:0a:e5:43:14:30:7d:90:0e:fa:66:a0:1c:14:49:e0:db:
46:b0:4b:b0:82:b8:51:82:64:5b:5e:0c:1d:fd:61:31:a7:cc:
a5:4a:10:31:29:9d:d5:ff:26:28:44:04:ac:46:8f:28:97:dd:
ae:bd:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:46 2025 by rpki-client on console-fra.rpki-client.org