Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: yWoTpMNX3l9OXKOCXYmFBRoHnJpjDwECN1MtKk+x6BU=
Subject key identifier: CC:53:39:71:58:6F:8F:4D:41:0A:ED:A7:56:B7:C1:2E:07:5F:15:9F
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 0194BB604E57F96A3969024022A2A26FA3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0A17
Signing time: Fri 31 Jan 2025 08:00:38 +0000
Manifest this update: Fri 31 Jan 2025 08:00:38 +0000
Manifest next update: Sat 01 Feb 2025 08:00:38 +0000
Files and hashes: 1: KvErQkIa-7bptS15YPSXyRA9CSc.roa (hash: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: +PXCfcZpYvl3o1FgvtwC2E+Dy6NGLupJ+dDvUOjz8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4e:57:f9:6a:39:69:02:40:22:a2:a2:6f:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jan 31 08:00:38 2025 GMT
Not After : Feb 1 08:00:38 2025 GMT
Subject: CN=cc533971586f8f4d410aeda756b7c12e075f159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:8b:c6:ea:a5:c5:a2:7f:2e:e8:3a:0f:c0:
8b:cb:06:f0:ea:a2:cf:66:df:98:c8:2f:74:72:4d:
35:63:cc:1f:f5:c1:cf:b4:73:a9:bf:c3:c7:96:a6:
3e:e2:de:70:29:8e:de:60:44:f9:5d:01:c2:c5:a3:
15:41:6a:41:a1:5f:3b:38:6f:ee:3b:cc:4c:b0:da:
54:81:da:19:f5:55:41:50:ec:72:1c:98:df:1e:d7:
5e:6f:68:2f:3f:7c:59:95:3a:77:68:f2:a7:ad:45:
40:ff:c8:98:75:bd:ed:a7:49:eb:67:7c:69:f3:65:
2a:73:8a:cf:1f:73:de:cb:71:2b:de:78:ff:c4:44:
f7:52:26:2d:b1:8a:20:ef:e0:b6:d1:05:ed:17:4c:
a5:eb:c5:9e:1d:c3:47:4f:e9:64:ae:24:3b:da:93:
81:45:29:85:14:d6:bc:d3:36:37:4c:44:41:25:6c:
3f:cf:c9:ae:96:04:57:fb:a7:92:aa:53:e3:bc:80:
fd:0f:21:f9:e9:1b:6a:3d:e4:85:e3:29:8c:5a:3c:
e2:06:00:f0:5e:b8:91:28:cb:ac:40:0d:e0:66:83:
0a:c0:c4:7b:dd:1d:90:16:4a:2e:2b:d8:e5:65:90:
22:d9:69:85:14:80:e4:56:c7:58:78:76:c1:60:04:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:39:71:58:6F:8F:4D:41:0A:ED:A7:56:B7:C1:2E:07:5F:15:9F
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e1:58:a2:fd:8b:bb:f0:61:bc:4b:45:03:b0:5c:35:d2:9d:
90:76:6f:c6:28:25:2c:cd:79:9d:8e:9a:6f:aa:42:49:b2:00:
fb:1e:99:04:20:a5:ca:85:68:ca:a5:df:b8:c3:04:ae:69:be:
2d:4b:d8:6b:ec:58:19:39:79:22:35:9a:62:1d:44:e8:fa:09:
8d:f5:0c:3d:ed:28:23:a2:b2:7f:ab:06:a2:78:b6:ae:af:0b:
98:b4:3b:73:f4:b8:c2:2c:0b:d7:de:11:06:31:c2:06:ad:e5:
6c:e3:74:d2:2e:45:ae:a9:e8:e9:bb:d2:05:d5:38:d8:36:94:
4a:dd:45:3b:38:d2:54:c0:3d:d6:d2:c8:76:9e:4c:e3:23:84:
71:5d:eb:47:a8:81:3e:53:41:01:a6:f4:a5:cd:68:cc:13:d1:
62:7f:2c:1e:de:17:7c:50:78:1c:0c:6e:5d:b1:9f:11:47:d3:
d9:ca:9c:df:0e:92:ce:6d:fd:32:e3:80:9b:e6:44:e4:9f:93:
8b:e6:97:01:85:a3:c6:74:a1:4c:50:85:fc:2c:90:05:fe:e1:
02:bc:f1:5b:91:73:02:5f:70:b3:52:bc:12:87:77:ca:3f:b2:
3f:4e:92:0a:61:94:d1:31:5e:17:50:62:67:2a:60:1d:66:58:
d1:95:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:26 2025 by rpki-client on console-fra.rpki-client.org