Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: RpC3/qfvCdfiX+XYCOT14B9DASP2XukpTcrYjOBglfk=
Subject key identifier: DD:1B:44:B1:E5:50:4E:BB:40:F5:11:89:69:DE:4C:06:40:03:13:59
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 0194BB96C11EA1201B368AF9DDD934B1FB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 03FA
Signing time: Fri 31 Jan 2025 09:00:06 +0000
Manifest this update: Fri 31 Jan 2025 09:00:06 +0000
Manifest next update: Sat 01 Feb 2025 09:00:06 +0000
Files and hashes: 1: Hp67PMrclU6Oy8HoEk9-JZtx1cc.roa (hash: li29o2DTl2tNGox92xw6fMg+8v2QWgjsqdhJ8rxpiwA=)
2: qUlLIE5OvssPved2_GU9Z8GFglU.roa (hash: S7bFZ1rRYB+JTmrHRfuu5cY821Jfik9JjzyPO/AFRnM=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: NpzvbeZe3i6akifyZ7CAg61NXwb5Os72tbpK2RePE9I=)
4: uYiiAg8Ud-0oiDfgxqXqon1wC9o.roa (hash: rUWimPluoRLQyYZlx7uTTf4NkeDJ7x9s+vizFEzBobk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c1:1e:a1:20:1b:36:8a:f9:dd:d9:34:b1:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jan 31 09:00:06 2025 GMT
Not After : Feb 1 09:00:06 2025 GMT
Subject: CN=dd1b44b1e5504ebb40f5118969de4c0640031359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:db:3b:57:cf:bf:ec:4c:4d:01:de:d5:52:
3f:a6:cc:ae:63:a8:32:ad:6f:31:17:65:62:52:2d:
12:bd:b9:c2:33:55:db:68:17:a1:dd:8e:a7:9f:4e:
fb:6d:fb:a2:bd:6a:5f:83:f2:23:01:f3:e3:3b:57:
9d:7f:e0:fa:68:32:7c:2f:2f:d0:4b:e2:dd:a1:c0:
9c:dc:27:b4:16:8c:c4:37:17:43:c3:4a:5c:b8:b8:
10:7a:e3:f8:d3:ea:85:06:36:0d:6d:4d:06:f5:07:
2d:05:c1:a9:57:45:1a:85:ae:09:0a:9c:23:f6:b4:
97:16:96:42:7a:cb:9a:86:ef:41:ab:00:1f:e8:e1:
58:64:5f:75:2e:a2:72:35:00:8f:35:5a:fd:3a:b3:
71:eb:9d:ea:f7:3a:a2:17:c9:2f:23:15:cf:50:eb:
88:f3:49:35:15:87:d2:cf:99:b0:56:83:fe:0a:3e:
f0:14:a2:e0:d6:f4:90:6b:83:69:4d:15:19:59:47:
a0:d8:2d:42:90:30:99:7b:af:e6:ee:a9:4a:0f:b2:
cf:b7:c4:1c:ad:2a:98:be:41:42:b6:67:49:67:1c:
62:37:3d:41:44:f9:29:17:f8:a4:6c:a0:dc:19:ad:
cf:2d:72:38:6b:8a:ea:8b:aa:1a:88:51:6c:5f:e0:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:44:B1:E5:50:4E:BB:40:F5:11:89:69:DE:4C:06:40:03:13:59
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:8b:c1:08:b8:94:89:b5:9f:c4:27:07:29:17:a2:36:ba:
91:c7:d7:8f:a6:a8:c1:92:7b:b5:3b:2f:27:9d:e4:8f:10:55:
45:13:94:12:35:df:71:d3:f9:f6:39:2d:46:23:44:79:fc:51:
e8:39:c5:f3:60:2c:6c:fe:b0:66:b7:32:aa:64:75:33:37:23:
65:ee:d5:75:54:4b:24:86:3e:0c:c9:9b:2f:61:ae:1d:56:3b:
b9:b9:4c:90:f8:de:c4:5e:44:30:c4:86:9b:10:55:0d:6d:49:
32:d0:60:b1:58:0c:eb:0a:f3:88:bf:b8:86:cd:9b:c8:92:a6:
53:e8:4b:89:89:46:ff:52:74:cc:02:b4:5f:29:97:8f:5a:9b:
67:b7:6d:cb:77:5f:a1:d8:1c:b5:a5:67:f8:90:81:ae:b3:8c:
47:5d:76:26:c7:30:a4:47:72:13:a3:c8:8b:17:99:0c:51:ce:
4b:d3:33:e4:b9:89:31:85:81:6c:60:a9:a2:63:ba:26:20:d8:
20:8c:95:59:41:36:c4:5b:e2:26:bb:82:4e:83:68:35:f0:a8:
fe:52:71:a7:b7:f4:4e:21:5d:d3:6d:ae:56:1d:b5:d1:59:ee:
f6:79:f4:cb:f8:6f:28:20:ad:82:03:66:21:1b:da:c9:e4:ff:
b0:d6:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:50 2025 by rpki-client on console-fra.rpki-client.org