Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: Wxp3zwjr56SuCLManDjtM3k+oaQRmAZbn2akxVmGRj8=
Subject key identifier: B9:66:5B:B3:71:63:8A:EB:A6:EB:7A:D6:B5:4C:63:C9:A6:14:87:77
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0194BB296DBF7C3654D05B14EDCA424C3B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0317
Signing time: Fri 31 Jan 2025 07:00:41 +0000
Manifest this update: Fri 31 Jan 2025 07:00:41 +0000
Manifest next update: Sat 01 Feb 2025 07:00:41 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: 72BxffHRqsTeeRgGLO7ukwMKZ8UR/562d0Whjx0mWQ4=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6d:bf:7c:36:54:d0:5b:14:ed:ca:42:4c:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Jan 31 07:00:41 2025 GMT
Not After : Feb 1 07:00:41 2025 GMT
Subject: CN=b9665bb371638aeba6eb7ad6b54c63c9a6148777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:20:fa:da:9c:b3:cd:3d:e7:ff:56:8f:3e:
ac:4c:5c:22:b5:ec:0d:f9:e1:a8:e4:c0:22:bb:ec:
e0:4f:a2:94:65:17:fc:ca:d2:93:58:69:f1:84:58:
c3:09:ec:c8:c6:f6:16:be:e8:d4:8b:7c:86:56:82:
fd:90:e6:76:fe:9e:5b:97:83:de:73:5a:3b:6d:18:
c7:df:d6:9c:80:34:f4:20:f1:92:a8:dd:c4:ba:f2:
2a:c2:73:54:f2:4d:3f:22:10:f0:17:25:d6:69:36:
74:fe:31:1e:b9:2f:46:ca:5d:29:1b:25:37:a8:1b:
e6:4a:48:89:80:f8:fe:2d:3b:79:73:93:97:d3:3d:
35:97:9c:2d:77:d8:09:50:e6:5b:d0:d2:1b:3c:06:
e5:92:b2:24:35:ef:36:df:42:b5:92:09:6c:0d:b1:
e1:a2:eb:fc:bd:d4:2a:c1:10:3f:91:db:8e:aa:5c:
88:49:7e:83:db:cb:96:47:c8:53:06:fc:e7:a9:2b:
bc:60:2f:42:e6:9f:33:28:7d:c9:bf:3a:1b:99:69:
ba:2b:f3:9e:68:1e:3c:87:b3:22:7a:4f:15:4e:e0:
f7:cb:13:3f:22:c4:6b:56:b9:a3:01:f1:67:c7:70:
72:92:65:ec:4f:f5:98:31:50:b9:e2:dc:b0:45:81:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:5B:B3:71:63:8A:EB:A6:EB:7A:D6:B5:4C:63:C9:A6:14:87:77
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:f2:57:00:ea:8e:0b:ef:a6:06:88:d6:f5:b9:20:b0:c7:
62:a1:48:b3:1e:4e:46:1f:88:b9:78:c4:a0:74:c6:23:5e:83:
6b:22:08:76:18:10:d7:bf:d1:23:03:92:09:3a:7d:a8:68:10:
12:cb:53:39:5e:0b:e6:24:e4:17:90:4a:6e:2b:0b:bd:1c:27:
07:6a:08:1f:31:13:97:db:f1:5e:65:ac:2a:3f:4d:1f:33:6d:
7d:12:7e:83:68:b2:5f:46:37:c9:b9:64:90:cd:a6:b5:b5:59:
21:47:d8:0d:48:ab:20:cc:21:70:fb:ce:5c:7f:09:99:f7:4f:
db:b7:0b:79:79:fd:01:3d:de:9b:80:d4:32:f8:40:35:d7:4f:
9c:52:c2:9c:64:bc:d9:77:de:06:45:53:72:f3:cb:97:1e:60:
9a:22:79:1d:34:52:97:b1:c5:8b:77:71:19:3a:c0:bf:0a:16:
ae:83:60:2c:d3:f9:23:85:59:8d:c4:89:33:de:6e:6f:53:9f:
7c:fa:08:ee:25:20:d9:81:34:e9:74:35:17:37:4e:75:58:10:
82:89:78:d3:21:4b:4d:1d:9d:b2:f5:d8:71:5c:85:3c:3e:4b:
d6:e6:82:95:d9:a7:4b:40:ac:2a:dc:ac:8c:cf:eb:f9:9d:2a:
d6:ed:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:14 2025 by rpki-client on console-fra.rpki-client.org