Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier: 2p+NE2fcgoRzdw37biyWeQ3lxaA/VRtOOc2z7tH1IbA=
Subject key identifier: 04:A7:89:D8:5D:EB:D7:3F:F0:5E:7A:2B:86:E6:3C:7B:A6:BE:0B:E3
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial: 0194BABB1929B23C96208B8096BEA01B52C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number: 033F
Signing time: Fri 31 Jan 2025 05:00:11 +0000
Manifest this update: Fri 31 Jan 2025 05:00:11 +0000
Manifest next update: Sat 01 Feb 2025 05:00:11 +0000
Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: OYaGLInxfiGlsJEwaET02VQ+nX0UWVl+gVR6+qW306M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:19:29:b2:3c:96:20:8b:80:96:be:a0:1b:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Validity
Not Before: Jan 31 05:00:11 2025 GMT
Not After : Feb 1 05:00:11 2025 GMT
Subject: CN=04a789d85debd73ff05e7a2b86e63c7ba6be0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:5f:b5:01:21:3c:66:37:fe:64:02:f6:d2:
09:b2:79:8d:38:98:22:df:75:d8:e2:14:0a:6b:85:
f5:fe:43:89:07:8d:0f:9b:36:42:19:13:47:a5:8d:
23:cb:ba:57:f6:b0:3b:f9:5c:03:45:8c:29:51:28:
33:f6:2f:25:1d:17:65:fe:06:f2:92:34:e1:08:07:
61:dc:16:2b:f1:f1:57:19:69:e8:99:b5:79:12:46:
0a:b4:47:5f:56:3c:ef:9d:ad:e4:39:58:4f:0a:a8:
a9:2c:a4:38:46:5a:69:1a:a3:d4:64:d4:d3:52:1d:
51:4e:b5:de:8d:c8:15:56:13:92:c0:93:d9:60:0a:
67:6e:41:ad:cc:1e:3d:7b:8a:30:06:9d:4b:dd:51:
6a:9a:e6:41:45:fa:8c:0e:f2:f6:d9:37:99:ea:b5:
77:0c:75:e8:e2:89:fe:93:05:d7:15:5b:cd:aa:0d:
f3:23:8f:14:7d:60:ac:8f:c8:10:95:21:4d:96:5a:
8f:d1:69:cf:a7:28:f5:66:3c:76:0a:00:b9:8b:f6:
26:78:1b:5a:1f:1d:ce:44:ff:82:e7:c8:e7:01:17:
37:d5:51:ff:ac:36:13:6e:c2:44:9d:e8:6a:54:28:
cf:42:6f:1d:75:2c:5f:0f:c9:a7:4c:be:5c:4b:84:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:89:D8:5D:EB:D7:3F:F0:5E:7A:2B:86:E6:3C:7B:A6:BE:0B:E3
X509v3 Authority Key Identifier:
keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:26:e8:16:b8:eb:0d:cd:75:c7:5c:ce:2b:91:1a:b6:65:
4e:09:5c:cd:1a:be:75:1e:2f:ec:2a:97:10:71:90:3e:97:d9:
eb:42:d4:33:ac:49:3b:5c:4c:00:21:bc:fa:d8:72:36:d6:0c:
52:71:ad:bb:c9:0f:10:0d:5e:06:05:18:51:22:3a:a3:dc:29:
a5:53:66:78:f4:f4:5b:de:46:cf:64:26:f7:73:6b:89:73:a2:
90:1c:3a:56:d5:94:17:6c:2a:2a:00:f4:7b:9a:7f:b7:54:0f:
f5:de:8f:9f:67:c1:f0:b9:c4:fe:28:83:e3:6e:2e:17:00:79:
97:14:ff:50:30:b0:a8:88:86:90:aa:41:45:cf:ae:71:55:bf:
ed:61:7c:f1:00:b9:5c:9d:0b:e0:09:71:73:c8:00:e1:73:94:
8a:aa:86:a7:55:1a:67:6e:06:11:0f:e6:5f:cc:ec:ca:de:82:
7f:1b:7c:d3:ed:92:8e:f1:e4:27:52:74:ec:e6:42:ec:e7:46:
4c:7c:52:6a:60:7c:e3:87:10:da:cb:93:68:fe:e1:a1:8d:1c:
1a:13:2f:df:72:5f:b7:f8:9d:7d:7a:b7:16:ad:7f:21:bc:73:
f3:67:63:7a:da:58:b9:6c:f7:29:36:37:0c:61:0b:26:1a:bd:
30:d8:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:14 2025 by rpki-client on console-fra.rpki-client.org