Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: DlG8NYElV86hcGg5okviBi5mrtuKOHKJrEfE2u7HnQI=
Subject key identifier: B6:2F:CE:A2:08:95:B3:4D:52:CD:23:26:65:81:A6:16:26:20:DA:03
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 0194BB28E7641E4BCD5991005958813446F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 13F6
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: 5ywEF70/1YczEM3EL2umxcngcQ47Lk34ysPcm+b5HLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e7:64:1e:4b:cd:59:91:00:59:58:81:34:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=b62fcea20895b34d52cd23266581a6162620da03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:f5:1d:74:07:99:2a:e8:a1:b2:5d:91:2c:
a7:c4:90:56:68:35:8c:29:f1:ff:24:f5:14:74:49:
fa:a6:07:36:ba:5c:4c:8b:11:5c:e1:d3:1d:71:49:
67:1e:81:0d:b9:45:bf:e6:98:4d:03:8e:5c:c9:70:
30:73:3f:40:57:2a:0d:ea:d8:91:7f:76:80:f9:d8:
d3:22:e5:b2:b6:e1:ce:f3:aa:f4:b4:96:f9:a3:b0:
19:39:d9:9e:e9:26:d8:03:da:92:b5:36:b9:d4:a4:
3e:b6:18:61:4c:86:51:c9:57:35:d9:40:79:86:74:
05:95:32:d6:2e:7f:28:52:5a:8a:e0:73:0d:fe:86:
5b:fa:5e:34:72:40:d9:a7:f4:86:ea:e1:8d:63:6a:
7e:7d:d3:ce:76:a9:9b:d9:65:d4:b1:63:64:2b:7d:
88:81:d3:9e:a1:64:98:b2:1b:af:58:bb:83:45:12:
96:a3:0a:32:af:ef:f2:5e:4f:e2:d4:61:ed:58:cd:
72:2a:9e:43:73:ad:83:d5:b3:e1:fa:25:c1:01:bc:
d3:0d:d0:d5:94:b6:f7:3f:a6:84:17:bd:60:22:1b:
ba:61:03:62:96:25:d1:9f:14:78:4b:9e:a9:f6:29:
f4:da:e7:9c:9c:d0:02:01:7c:ed:5a:2d:da:4a:20:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:CE:A2:08:95:B3:4D:52:CD:23:26:65:81:A6:16:26:20:DA:03
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:98:75:b6:63:8c:72:c5:06:cd:8d:6e:21:4b:45:31:0e:99:
11:7d:8e:90:75:5b:07:80:be:db:5c:7f:a2:0f:f7:48:71:9d:
33:e9:96:32:fa:f3:1b:3b:37:79:89:f1:ba:b4:3a:b9:f4:37:
0c:48:77:c6:dd:4f:a1:f4:dc:ac:87:53:03:a0:13:e2:2b:ac:
de:7a:d9:b2:25:5b:4d:3f:b0:50:70:41:64:ce:b5:6f:6d:05:
d1:42:a1:02:c6:57:51:44:76:2b:bd:d3:6e:d4:58:eb:15:9a:
5a:15:b9:db:3e:19:31:5c:01:31:e7:21:e8:48:06:18:d4:ca:
15:31:55:47:57:78:e6:99:8a:59:95:76:5f:d6:14:42:8c:36:
c0:59:01:ab:8d:74:c5:78:1d:18:59:16:32:ea:e4:96:6d:f4:
eb:e7:c9:fa:d2:5f:20:2f:1a:7d:bb:51:0c:14:d9:7c:01:71:
33:7d:96:7d:db:9f:17:cb:cf:93:e1:97:81:a1:d0:ee:bb:b8:
9a:40:91:c7:9b:76:43:20:1a:c1:cb:c5:d1:a3:87:ca:ff:d4:
7f:4a:f0:4c:be:8c:e8:6f:de:2e:84:26:c0:36:0c:eb:b5:51:
a2:0a:30:aa:a5:df:40:07:55:ae:00:d2:77:46:17:84:7f:31:
8b:8d:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:44 2025 by rpki-client on console-fra.rpki-client.org