Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: WOMi+jz+mD811pNk/t8VntLWjXcpoFZO4pZ/QtTRdJU=
Subject key identifier: FB:F1:5E:F4:66:F6:6A:B2:EB:00:1B:83:38:C1:D7:7B:A4:8B:A9:AE
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0194BA847803D997845156951A96AB72ED85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 04:00:31 +0000
Manifest this update: Fri 31 Jan 2025 04:00:31 +0000
Manifest next update: Sat 01 Feb 2025 04:00:31 +0000
Files and hashes: 1: Ha4iqiemRVs4K0apcX26aGgxEQM.roa (hash: Y9w0WT6CR9hlG1wNToGxOj1Wt0I5gYiZH++6mqrNiy0=)
2: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: wjsXg/LxS9rZS9mNJ+lUOMd2iAwsjAEdkQNvQVJjIWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:78:03:d9:97:84:51:56:95:1a:96:ab:72:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jan 31 04:00:31 2025 GMT
Not After : Feb 1 04:00:31 2025 GMT
Subject: CN=fbf15ef466f66ab2eb001b8338c1d77ba48ba9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:62:83:5b:79:98:d1:bd:f5:07:57:7f:71:
0b:1c:49:90:be:d1:cf:c9:35:eb:63:37:af:e7:05:
8b:40:fe:cd:b3:c9:7f:41:0a:dc:c6:e0:c2:9d:f2:
1b:7d:62:86:9a:23:d5:5f:b6:a3:8f:19:5e:e2:2b:
f9:dc:3b:3b:34:f6:86:03:f3:fd:9e:b3:93:77:cd:
aa:ed:c7:a8:d5:55:ff:ce:40:f6:b7:d0:7d:4a:4a:
b1:0a:9a:76:bd:12:0e:35:33:98:8b:37:03:80:62:
e9:99:85:47:74:f6:ae:e7:6d:cc:d5:9e:be:b1:a4:
b5:64:3e:e5:da:3d:58:bb:89:6d:0d:b5:8d:38:2f:
93:83:78:2c:9d:8c:22:1a:00:dc:33:4d:5d:c3:5b:
b0:ca:a0:8e:37:db:89:e2:b7:a9:c0:39:cb:db:42:
63:dd:bc:b5:2f:03:7e:cc:90:6a:e5:00:8d:f9:65:
3f:e3:56:5a:1e:4e:41:56:10:f3:fc:93:15:51:37:
46:71:a5:30:13:b3:ff:f5:e2:c6:36:5f:f4:ca:7c:
11:46:a8:44:cf:ae:0e:6a:02:b3:79:b1:4f:ca:8f:
ed:d1:56:e8:cc:b6:11:46:fa:2e:b2:d6:9c:13:4c:
99:16:6e:ed:82:1c:a5:52:b0:ce:ef:1e:42:d5:b8:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:5E:F4:66:F6:6A:B2:EB:00:1B:83:38:C1:D7:7B:A4:8B:A9:AE
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:46:2c:2f:18:04:33:72:44:ab:bf:a4:08:f7:db:e7:18:
ca:76:c4:00:ec:7d:60:80:94:f2:2d:6b:9f:f6:a7:eb:47:bc:
6e:01:a9:09:df:9a:d2:d4:b0:b8:b0:a8:4e:5e:b4:d9:00:95:
be:d3:53:93:28:02:57:4f:c5:8e:88:56:0f:3f:b4:94:87:ef:
52:49:14:9c:f6:7f:fb:4b:a7:cb:b1:58:43:3c:a7:03:88:8f:
52:6f:ad:5f:ce:49:0e:9e:08:6d:a3:aa:1c:f4:dc:47:d0:73:
16:95:3e:9c:10:b4:ca:16:f2:5f:88:8c:55:59:82:ed:9a:a9:
85:85:32:b5:2b:22:bf:33:13:1c:4e:0e:ad:25:1e:a1:0c:58:
b7:4d:67:a7:e1:c8:10:1c:ae:f0:7e:df:b2:74:47:7c:a0:37:
4c:30:7c:fe:11:1b:ff:2e:a0:c7:c3:b0:b8:0c:e9:32:25:5e:
57:da:fd:4c:25:4c:c8:5f:d4:c3:10:8c:f2:f6:d6:af:71:b3:
80:77:5a:f6:1c:11:dd:85:c7:ec:b1:0e:41:48:3e:2d:00:72:
a1:f3:a7:39:30:3e:b4:e7:fe:d7:8b:ae:12:5c:ac:f0:41:38:
e2:21:6c:b6:20:28:2d:48:43:09:68:27:e2:63:e1:cd:0e:e5:
93:f7:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:13 2025 by rpki-client on console-fra.rpki-client.org