Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: wYtRkEcWCROPiy1aho5E3kiG3QscSC8bPuQFSUBnqdo=
Subject key identifier: 8F:60:0C:D3:F3:4C:EC:14:8A:25:13:BE:FB:60:06:91:3F:63:B9:04
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 0194BB293FB4AD48F447C520A7EB715941F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 07:00:30 +0000
Manifest this update: Fri 31 Jan 2025 07:00:30 +0000
Manifest next update: Sat 01 Feb 2025 07:00:30 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: +thmJkSKui46mwy52AvDqfYMrayv0NlHY1+vGvHt07I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3f:b4:ad:48:f4:47:c5:20:a7:eb:71:59:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Jan 31 07:00:30 2025 GMT
Not After : Feb 1 07:00:30 2025 GMT
Subject: CN=8f600cd3f34cec148a2513befb6006913f63b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:6a:1f:d7:6e:a8:b8:60:59:1a:7a:dd:54:
b8:03:4f:6c:3f:92:fd:e4:4b:06:12:9c:14:3f:63:
02:eb:eb:67:77:3d:cd:f7:94:5c:2c:b2:b3:39:e1:
5d:ae:90:dc:da:36:55:e6:60:c6:28:0a:73:d7:e5:
9c:77:d3:01:57:7e:cf:16:a0:99:ba:9f:0a:29:54:
1e:fa:f8:41:98:57:33:12:77:7a:57:10:85:f4:6f:
a1:5e:d3:de:d6:32:60:12:17:45:09:81:04:a4:78:
bf:ac:ae:a4:d9:4a:d9:32:8a:a6:68:de:07:ce:25:
33:3a:44:97:a6:d0:90:52:bf:12:8e:2c:3b:b1:79:
f6:f4:36:5e:d9:6a:fb:02:8e:97:7b:d4:b6:6c:3a:
d9:94:9b:6e:13:fc:f1:3c:ad:a6:69:c6:7e:12:8e:
46:ca:5c:2f:ea:38:28:2a:68:33:0f:a2:9c:dd:25:
4a:94:a0:68:9e:8e:63:47:11:a4:25:46:bd:31:11:
ce:2f:c6:64:8a:88:27:5b:b9:43:28:da:68:1f:ff:
28:01:b1:45:b4:41:1a:31:11:db:95:ec:f1:fd:28:
1f:44:76:24:a9:38:f5:d5:f2:26:07:90:12:8a:28:
8f:89:ad:98:53:a5:36:b9:73:3f:12:7e:89:26:cd:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:0C:D3:F3:4C:EC:14:8A:25:13:BE:FB:60:06:91:3F:63:B9:04
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a1:ba:a9:3a:5c:36:34:53:67:8c:2f:c0:7f:00:0b:89:7f:
8a:58:81:61:10:90:7c:92:e0:ea:0a:e1:84:8b:fc:d4:c1:36:
32:80:bf:1b:15:b9:72:4e:a7:74:0a:d9:6f:b2:d3:1a:5f:63:
bd:76:6a:41:0b:df:a6:30:50:e5:bf:08:81:f0:42:5e:a5:f6:
0e:07:44:71:ff:28:95:d1:d8:15:25:02:10:2f:c7:02:4c:ce:
1f:e8:c6:c2:fd:0a:7d:7e:09:df:ae:87:c8:73:bb:a2:ee:06:
9e:aa:b3:6f:83:db:e6:ed:f4:a8:80:33:65:5e:e7:88:40:ff:
c5:a9:6e:7c:87:58:c3:65:67:29:91:b7:b6:a2:f6:43:e3:6f:
a7:a4:5e:b4:40:df:b2:f3:c1:cb:48:d8:ea:a7:eb:8d:43:ce:
0a:8e:db:a3:a0:68:c1:23:5d:63:2c:e3:76:fe:bd:ea:3f:0e:
f9:9f:82:a9:d8:31:61:76:c3:46:68:b9:8c:46:c9:be:37:ae:
bb:8d:0c:86:cc:11:86:31:66:38:e2:6e:26:50:81:0d:a8:89:
7f:62:cb:ab:b4:fc:40:a1:0c:87:bc:62:3a:cd:ab:7d:69:05:
0c:83:54:f4:d3:9c:c8:da:12:ac:eb:72:0b:99:39:43:da:bb:
80:4a:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:15 2025 by rpki-client on console-fra.rpki-client.org