Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
File: UnrRl4bdVLNaS5atP7xXkyeORHQ.mft (raw, json)
Hash identifier: IPXRniFuXh5j+xx98JGegyMxvI2tRPE4HdQh2sA2F5M=
Subject key identifier: B4:E5:DF:7B:F2:03:B3:B8:7F:96:1D:3A:89:78:CD:6D:4B:95:91:4E
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 0194BAF27E9823FE85A01F3B56BFA714DBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
Manifest number: 12C6
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa (hash: AJw2YCH/VuTSNYo91kTytnKXtEZrdqVQkspms9NQoho=)
2: UnrRl4bdVLNaS5atP7xXkyeORHQ.crl (hash: dLn7IVfbw7A1CO6R8345Li9qk5qVwrlcqk906zYrU1I=)
3: bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa (hash: 7MucZNPxoy6xDKGVNK0X6Z3pxNOoq8ocl4uzKyv0GQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7e:98:23:fe:85:a0:1f:3b:56:bf:a7:14:db:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=b4e5df7bf203b3b87f961d3a8978cd6d4b95914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:c5:60:cd:02:61:47:20:83:c8:90:4d:09:
ef:c5:62:82:7f:5e:53:5c:7e:a1:f5:a1:59:d0:9f:
3a:89:37:3c:24:f8:e8:96:90:c2:1c:29:58:8d:e6:
1d:be:c7:02:68:17:a3:fd:fa:81:19:5c:7e:f6:b2:
c3:18:74:31:d0:9e:85:e7:83:82:40:7b:65:33:1b:
c1:01:f6:a5:a9:1f:8a:ff:c5:88:8a:7f:72:7c:1d:
75:bf:92:fd:85:94:fe:d8:75:3a:8d:3a:a8:03:e2:
de:d0:ef:ed:06:f4:12:30:bc:52:7a:5f:a8:a2:bc:
02:40:17:c2:20:9f:93:2b:3f:1c:8a:4a:c2:9c:18:
73:8a:56:00:0d:a6:c4:b6:64:4e:b5:7e:1d:7c:14:
c8:37:ea:d6:e2:71:c9:10:8c:3f:cb:b9:a6:05:39:
1b:36:7d:6a:eb:42:68:ad:6c:7b:c5:e2:60:4e:2a:
62:f0:3c:66:22:c5:32:78:c2:15:90:68:f2:75:f5:
73:8c:a5:be:ff:96:c9:3e:36:ad:53:2c:19:7b:e6:
c0:bd:95:27:d2:ba:8a:3a:86:23:19:04:62:02:f9:
1d:a1:bd:70:8e:30:8f:23:c2:6f:90:78:70:ba:3e:
1f:10:9e:38:79:be:55:12:6d:3c:0c:0c:33:db:ec:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:DF:7B:F2:03:B3:B8:7F:96:1D:3A:89:78:CD:6D:4B:95:91:4E
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a2:35:1e:fe:c2:e0:f8:a9:fb:25:ef:d4:a0:4e:03:4f:b6:
cc:93:26:82:74:e0:d0:da:03:2e:d6:46:47:55:65:45:06:e8:
06:8f:2d:07:a8:e6:a7:17:d9:3d:37:3e:36:bb:e2:4f:91:65:
41:66:05:80:b0:25:44:ea:3f:01:e7:22:7c:be:ce:fe:4c:da:
2b:fe:b8:0f:93:f3:97:6a:08:5b:ab:a1:6a:f5:d2:f7:22:85:
12:c9:d9:15:49:67:ed:a2:af:ac:4c:44:c3:66:3c:dd:e9:35:
2f:36:ed:14:cc:50:df:49:04:7e:1c:1b:73:93:6d:b9:86:84:
b0:8b:96:04:9f:26:29:6a:53:e8:54:5d:68:f8:f9:4b:5a:16:
7d:19:23:ec:e4:a4:79:10:8c:fe:34:5e:81:3d:e2:8b:c1:97:
0f:36:4c:96:33:db:7d:32:34:7e:96:b6:fa:4b:87:3a:6f:8f:
84:5e:13:e7:10:5a:8b:95:11:05:74:80:9f:1e:e1:0a:df:d7:
11:f7:03:fe:2a:43:72:9d:4f:19:66:40:01:0d:ae:8f:f0:30:
d4:dd:1f:ae:68:39:bb:6a:56:c8:db:0b:80:08:89:5c:67:2b:
2a:42:be:84:3f:41:45:f3:d8:81:e0:96:d6:57:1c:94:91:80:
cd:08:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:00 2025 by rpki-client on console-fra.rpki-client.org