Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
File: R_0xZFbhuX__wjKZ9uvNoF93nzw.mft (raw, json)
Hash identifier: 7DJDlcCkz0BnCUoc8kg9KDEJzCFzmvCOz2ZcgwCQWHA=
Subject key identifier: 37:4E:23:35:DD:82:18:DC:4A:A2:96:38:AF:55:57:62:92:72:62:CB
Authority key identifier: 47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
Certificate issuer: /CN=47fd316456e1b97fffc23299f6ebcda05f779f3c
Certificate serial: 0194BA84B21C73E2B795A9BD8DF6C51F4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
Manifest number: 0B0E
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:45 +0000
Manifest next update: Sat 01 Feb 2025 04:00:45 +0000
Files and hashes: 1: R_0xZFbhuX__wjKZ9uvNoF93nzw.crl (hash: PSHafVMJ3haoIrP2PCExQYBCSEQEoF0kkrto+P7+hk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b2:1c:73:e2:b7:95:a9:bd:8d:f6:c5:1f:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47fd316456e1b97fffc23299f6ebcda05f779f3c
Validity
Not Before: Jan 31 04:00:45 2025 GMT
Not After : Feb 1 04:00:45 2025 GMT
Subject: CN=374e2335dd8218dc4aa29638af555762927262cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:6e:e5:78:5f:11:3e:ab:93:3c:9e:f8:dc:
9a:31:67:47:1e:29:02:bb:da:5d:27:7a:a3:af:25:
e8:e5:f1:40:3d:4b:7d:39:50:d0:91:a3:81:11:80:
ff:e7:1d:32:78:68:7a:85:b8:8d:88:80:4e:ea:ad:
9b:d6:25:a8:c0:f7:ce:5c:c2:05:48:17:18:25:b3:
b3:65:96:20:4c:ef:5e:c3:43:57:ad:ed:4a:07:95:
1f:13:2f:7e:fe:bf:6c:50:52:84:0a:eb:f1:95:07:
94:3d:b4:37:3a:e7:30:c0:0d:55:c1:4e:6a:a0:a8:
76:62:32:d4:5d:06:81:89:ac:6a:c6:b2:75:03:c2:
62:2f:76:ea:94:ec:8d:5e:90:9e:46:cb:81:00:ce:
3b:7e:1d:1a:f9:98:b4:5c:62:27:49:3f:05:a5:9b:
53:97:65:fb:0e:f3:a7:ae:74:0f:80:60:16:df:47:
71:ab:0b:cb:49:37:51:c8:ff:5e:0b:ab:b5:bc:d7:
99:00:6a:84:3c:b7:8f:49:bd:2d:20:46:9c:9f:bf:
09:f1:38:78:b9:d5:56:dd:18:67:0b:e7:26:7a:bb:
b1:d6:b4:9d:08:69:d3:91:74:1c:cb:19:21:1f:9d:
47:64:a0:52:30:8a:b9:c8:21:39:66:ab:ba:7d:df:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:23:35:DD:82:18:DC:4A:A2:96:38:AF:55:57:62:92:72:62:CB
X509v3 Authority Key Identifier:
keyid:47:FD:31:64:56:E1:B9:7F:FF:C2:32:99:F6:EB:CD:A0:5F:77:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_0xZFbhuX__wjKZ9uvNoF93nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/742f7b-a946-4c22-8581-dc5a86564da9/1/R_0xZFbhuX__wjKZ9uvNoF93nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:32:09:d8:25:a2:6d:68:8e:9f:7b:e0:6a:a1:fb:11:fa:
70:70:d2:dd:ec:df:c1:09:49:ea:95:a3:a4:f0:e0:db:0c:ca:
79:24:08:5b:37:66:30:f0:d6:70:c8:8e:c6:e8:fd:ac:92:98:
20:c3:7d:bc:40:28:7e:16:90:13:01:e6:6f:de:6e:c3:3d:d8:
08:7d:88:c0:d3:6e:d8:86:d8:2a:b7:32:e4:4a:09:08:ee:5e:
d7:03:5a:3e:70:a5:fd:3b:2d:d2:34:4d:af:83:8d:d9:aa:e5:
8b:5a:05:c2:6d:1e:0b:b6:32:81:e5:2a:dc:91:3d:c7:0a:9f:
fc:41:07:c0:ce:28:ff:20:d7:ae:3b:98:00:e8:22:e7:3c:0c:
17:bb:ab:e1:28:c1:87:e1:86:1f:f7:a8:b2:ea:a9:0a:13:34:
cd:5c:02:bb:1d:c7:ef:f1:81:75:b4:fb:d0:f2:5d:08:05:5b:
88:f1:2a:fc:2d:4e:2a:7a:78:be:65:0e:2b:d6:97:1d:68:9b:
89:24:8b:af:de:b7:69:a9:b4:e1:e1:95:e0:8f:3d:76:42:ff:
79:78:a3:a4:fb:db:d4:e3:d2:50:75:28:0b:36:b5:8f:52:f5:
21:ca:82:18:f9:4e:8e:cc:ec:29:3a:ae:5a:1c:f3:a5:f8:6f:
d3:34:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:06 2025 by rpki-client on console-fra.rpki-client.org