Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: YmBaH/p/ziXK/wKe6NhUhw6ZsUooMgPYAHeh/hWNaMQ=
Subject key identifier: CB:76:34:3B:D8:B5:AC:D6:E9:05:ED:C3:B1:26:98:4E:05:F9:DA:89
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0194BB5FFFB3D4A97FBF5EB3D038358D3EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: YbcYIrOyzAEYfF7nNj2CUiUWQuzq1twI6eRGpnKoDc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ff:b3:d4:a9:7f:bf:5e:b3:d0:38:35:8d:3e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=cb76343bd8b5acd6e905edc3b126984e05f9da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:7c:eb:85:97:f6:61:f5:5b:69:41:d2:6e:
01:92:40:52:4f:ad:a6:c6:ab:b4:a8:1c:5a:43:bb:
8e:41:53:35:64:6f:0d:c9:74:60:63:0e:e7:93:16:
6c:f1:3c:4b:87:ef:85:29:cd:aa:78:19:e1:c6:09:
7e:6c:17:ef:a4:3b:86:55:26:bb:90:b8:22:ea:3f:
49:ae:71:c6:75:0a:59:73:18:f7:7c:55:2b:3b:f3:
5c:d9:c2:99:d1:57:e4:23:43:6a:2d:44:0a:03:c7:
8d:ba:54:16:38:eb:d8:b1:fe:36:1e:f0:3b:c8:b2:
32:57:f3:44:85:2d:15:b4:a8:f5:01:20:e0:47:0c:
5f:b3:1e:48:cd:02:d6:a7:e8:b8:a2:4a:76:c7:7c:
fc:ba:1d:5f:a2:31:33:36:e1:36:50:a9:01:de:12:
7c:dd:70:18:01:dc:50:fc:e7:2f:2e:43:fd:45:be:
67:12:50:18:87:a6:62:8e:24:1c:10:5d:24:3c:97:
85:45:e6:f8:b3:7d:43:b8:1f:9a:90:35:10:01:93:
70:b6:d5:8e:88:c3:57:e2:66:f7:6f:98:2b:01:9a:
6b:2b:45:cc:c8:80:bc:d3:a7:29:b4:ac:3a:61:70:
cb:f3:8a:1b:dd:46:2b:99:01:9a:de:0b:ce:09:3c:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:76:34:3B:D8:B5:AC:D6:E9:05:ED:C3:B1:26:98:4E:05:F9:DA:89
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:70:9b:a2:bd:e3:27:5b:17:70:cc:64:d8:79:11:06:6a:50:
5f:7c:27:dd:1f:18:db:9e:50:e0:a9:a2:59:08:9e:c4:56:2f:
e9:7a:b7:e1:42:b7:29:e1:a4:e1:2e:0e:84:66:50:e3:9b:99:
34:bb:1d:6a:78:28:56:aa:3b:b1:66:6c:12:b9:7d:ce:e2:6f:
e2:bc:b9:35:78:b9:a0:2e:a9:fb:17:66:43:33:c7:dd:fa:11:
f4:c6:aa:60:9b:d4:e3:74:34:dd:15:77:63:dc:ad:df:3b:56:
ab:f5:9d:5b:d0:94:ee:ec:d0:fe:73:a9:96:82:8c:9f:bf:bc:
49:1b:4c:6a:77:70:87:12:cd:39:a0:2f:a6:75:34:c3:ff:88:
86:6c:af:06:58:b4:b8:d3:dd:2a:d5:df:2f:07:ad:0b:3c:e3:
31:ee:fa:8b:83:9b:11:d6:45:45:00:be:dd:18:d6:12:03:b3:
89:1e:c6:d7:20:f1:ab:a8:48:03:70:6e:07:e2:9e:87:4d:d7:
48:8c:8c:22:74:2a:bf:94:cb:03:f5:25:23:c8:d5:90:f1:a7:
4b:13:65:5a:33:c5:cb:3c:f1:80:a0:05:01:7e:24:63:37:d4:
ef:cb:08:7c:81:3d:f1:dc:3f:42:5a:08:1f:65:91:7e:b5:5f:
7d:17:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:10 2025 by rpki-client on console-fra.rpki-client.org