Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: 1+khdE/47eOV8dfFnLyT3f/ocdqEj2AUK615wg4klrs=
Subject key identifier: 00:20:1A:E0:39:E5:A2:AB:7B:24:27:3B:1E:E5:78:28:B8:E2:EC:B4
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0194BB602207F798CDE46239B7DE7CA24E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 09F0
Signing time: Fri 31 Jan 2025 08:00:27 +0000
Manifest this update: Fri 31 Jan 2025 08:00:27 +0000
Manifest next update: Sat 01 Feb 2025 08:00:27 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: wYHU8wHKmQviMgkaVOGUqWWxNm153rom1kNvH2HZcvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:22:07:f7:98:cd:e4:62:39:b7:de:7c:a2:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jan 31 08:00:27 2025 GMT
Not After : Feb 1 08:00:27 2025 GMT
Subject: CN=00201ae039e5a2ab7b24273b1ee57828b8e2ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:36:5f:20:33:0e:c6:16:fb:36:31:9a:7b:
5a:74:5e:f5:54:78:c4:e2:a7:fe:74:b6:40:42:eb:
2b:df:b4:b4:9a:2b:f3:ce:c2:5e:bf:e1:8f:94:3e:
39:71:16:2c:88:75:12:d5:06:ab:e8:d9:f9:af:a8:
58:24:8e:83:f6:57:41:3e:fe:d6:e1:fc:c5:08:8a:
6d:bf:38:45:6f:8f:86:ea:87:b8:46:21:37:ba:ce:
c7:56:ab:e1:0a:e0:0f:44:1d:c5:16:bf:74:78:0c:
c9:af:4c:67:76:68:76:13:ea:47:a5:15:88:70:d2:
1c:1b:88:dd:ae:a3:5d:66:6f:5b:38:6d:3c:cf:a4:
a1:b7:36:0b:95:c0:f2:c8:3c:f2:c4:f1:c0:9b:0d:
21:19:c6:d1:3a:cb:f9:4c:9b:5f:47:08:15:0f:a9:
34:e4:f6:82:83:35:1c:f5:93:a4:d9:85:aa:7a:95:
3d:94:7b:ff:32:98:71:66:ef:0a:55:e5:fe:9e:64:
31:14:fe:04:b9:30:85:74:9c:48:52:68:65:1d:6f:
ef:1b:43:2b:ef:ce:83:f9:a3:6d:5e:ef:3a:94:53:
ed:5e:cd:ec:8e:25:02:97:a9:d1:15:d9:d4:be:82:
8e:2b:b6:33:6d:65:2b:84:f8:e9:2b:14:07:94:6b:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:1A:E0:39:E5:A2:AB:7B:24:27:3B:1E:E5:78:28:B8:E2:EC:B4
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:a1:74:9d:3d:d7:cc:a6:a9:e6:4e:8f:f2:d2:13:e2:80:
79:7f:77:26:f3:17:72:a7:e2:ad:4a:b6:d2:09:4a:96:bf:5a:
1b:e6:86:49:75:8a:78:41:df:81:a3:f9:75:27:57:f5:93:58:
a6:5c:f1:84:80:6e:8a:6e:15:53:74:00:33:2b:f5:11:87:4b:
f1:29:1d:02:a3:b3:20:bb:fb:68:84:90:ff:74:6d:93:3e:f6:
e0:a2:b7:bc:20:7d:a2:2d:0a:06:b8:75:d0:18:e3:a3:97:18:
3a:0c:de:8d:92:58:8d:66:60:57:6f:31:de:7f:d4:c6:17:d8:
61:b3:8d:3a:8d:ad:1f:f4:59:71:25:be:a0:49:50:82:86:1e:
b6:8e:50:c6:5a:d1:b7:89:0a:70:09:ec:36:70:b9:3e:70:78:
f4:c2:be:40:2c:c0:d1:38:80:77:30:a1:02:dd:2a:2e:b4:ee:
04:79:9f:62:4c:aa:d4:34:ac:1f:11:94:83:2d:78:e3:4d:0f:
e3:c7:1e:c7:db:37:d0:ff:e8:34:7f:5e:c3:e7:f0:92:bd:6d:
71:9a:71:7a:2a:32:bd:f2:d0:86:ff:3d:58:af:a6:36:3b:a3:
59:35:b7:bc:62:6d:70:8a:76:74:32:a1:e2:28:f6:99:45:e8:
f5:25:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:11 2025 by rpki-client on console-fra.rpki-client.org