Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: tuuYbXHbqTT6g8740OJXQ5qB+jmcGcIsrxq9oNdTrwc=
Subject key identifier: 9F:87:69:59:2F:E8:5B:26:4E:86:29:95:76:1A:9D:58:AB:89:E9:DF
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 0194BB295B8A22B51FAEFF35C414CB3144D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 1129
Signing time: Fri 31 Jan 2025 07:00:37 +0000
Manifest this update: Fri 31 Jan 2025 07:00:37 +0000
Manifest next update: Sat 01 Feb 2025 07:00:37 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: NgJkYmCPc4iBtlmBC/G9BkmyOtYT6KTabKoqRUhpOq0=)
2: Vr2MHbk4BkpwijegPw7svFXxpY8.roa (hash: J4FlYQ16tBtXCX4bdbpdB9oishsKJVSj1Pc1U4pte9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5b:8a:22:b5:1f:ae:ff:35:c4:14:cb:31:44:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Jan 31 07:00:37 2025 GMT
Not After : Feb 1 07:00:37 2025 GMT
Subject: CN=9f8769592fe85b264e862995761a9d58ab89e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:67:a0:e0:73:a4:b6:c8:e4:16:b1:45:e1:
fe:29:1d:0f:e7:cd:23:ad:86:da:40:bb:32:d8:75:
68:90:2d:e3:5f:ad:35:de:ef:46:b1:96:02:68:84:
15:e5:00:81:cb:2c:19:56:e0:ae:c9:16:86:45:0e:
e2:d4:63:dd:8c:f6:b9:26:82:b3:b1:8c:fb:4a:94:
7b:ea:a3:d7:a8:c8:70:57:03:6c:4e:1c:69:cf:2e:
ab:ac:d2:67:0a:63:a9:10:4e:15:f3:ca:fb:e7:4b:
96:cc:a1:02:e9:b1:28:42:94:1d:65:82:c4:2c:88:
63:1e:71:e5:d6:1f:71:30:7e:5e:99:eb:e8:a9:3b:
d9:65:12:dd:af:f1:dc:b5:8c:1b:9a:d7:4a:26:65:
f9:f9:7c:f4:5b:4d:35:f7:69:a5:c4:45:91:36:04:
55:e3:3d:68:95:44:3d:32:57:e6:9e:72:48:d5:c2:
98:bb:8d:90:93:20:aa:4e:8f:7c:f7:ff:c4:cf:bd:
65:a2:50:da:9a:51:8c:7d:64:a1:c6:64:c2:38:fa:
e8:13:e5:c1:3f:ee:a9:bd:b2:14:af:c2:12:cd:8a:
3a:f9:ac:98:95:82:b3:bd:2c:64:0b:c9:85:2f:e1:
86:4d:bd:e4:14:1f:2d:a4:0a:25:4d:e5:38:38:66:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:69:59:2F:E8:5B:26:4E:86:29:95:76:1A:9D:58:AB:89:E9:DF
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:02:1e:29:4b:51:20:31:c6:14:4f:0d:73:f2:88:45:e6:1d:
65:74:d5:51:55:3d:68:fc:a5:b2:c3:50:4e:aa:f6:7f:1c:3e:
aa:f7:99:0f:d6:c2:88:5c:f7:ed:61:49:ff:f8:33:77:45:82:
d9:0c:07:c1:7b:d3:10:be:5f:0d:8b:34:30:09:89:6a:a2:16:
26:f5:da:8c:b7:d7:22:88:73:28:7e:1a:9d:e7:2b:1e:c1:20:
b9:23:8d:0c:85:5c:d3:6e:ee:12:c9:da:f4:91:ae:3b:70:b9:
a9:93:50:31:78:e0:30:f6:ca:a5:f7:dd:8f:64:a5:01:6e:5f:
35:34:32:8c:6c:ba:65:7a:fe:c6:f9:7c:d1:08:bf:53:a0:53:
0f:88:a3:d4:97:6e:f3:ea:dc:11:5f:f4:f4:11:fc:88:88:82:
10:89:db:7b:3f:2d:2a:08:bf:96:da:92:cd:4d:de:e0:eb:e4:
86:62:20:fb:ed:64:d4:27:c9:1b:8b:e2:d3:ec:cd:0f:94:92:
de:b5:e5:c8:ec:b6:a1:df:a8:e2:44:36:01:ab:e5:2c:f4:b1:
da:2b:36:4a:01:95:96:00:fd:5b:9b:50:8b:8a:08:14:58:32:
f9:48:37:8e:35:fb:e0:8e:e5:4a:ed:1d:01:41:78:6f:a3:7b:
6b:53:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:11 2025 by rpki-client on console-fra.rpki-client.org