Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: rzA02ilWl1KYCSHlOXUcNHpUuACkWJ+eeefE8N4MoQ8=
Subject key identifier: 9F:BE:9E:CD:E2:23:5A:2B:59:1B:9F:73:76:2F:75:B2:03:8D:50:90
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0194BB604C742B2EF6F4DE9C172EF7910E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 116E
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: twuFgVPCURbs4cDGw1V6oOltALqJx6bF14p0mJSWKjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4c:74:2b:2e:f6:f4:de:9c:17:2e:f7:91:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=9fbe9ecde2235a2b591b9f73762f75b2038d5090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:06:3b:7a:99:dd:65:b6:53:43:b8:83:ba:
a4:bd:02:08:2a:09:93:41:0d:ae:1b:14:ce:f9:35:
72:c2:c3:c8:1c:31:c2:07:3a:6d:a3:a4:6a:01:24:
87:52:11:31:ce:82:02:93:43:36:4e:16:86:3f:16:
28:47:d9:a9:06:1f:88:49:e3:6a:b4:7d:e5:70:14:
a2:80:24:92:8d:21:b2:86:4b:71:bd:00:76:90:05:
42:d4:1f:49:4e:6e:78:7f:ae:20:2b:91:3c:a2:93:
cc:62:a0:cd:20:08:2a:d6:8c:31:03:25:ff:0d:71:
98:ba:6c:74:c8:06:90:5e:95:73:c8:d3:3c:89:51:
07:51:32:6a:bb:f3:14:95:1e:26:90:c3:b2:4a:7d:
ca:f7:94:cd:cb:60:d9:f1:ac:3d:3c:99:a2:88:d6:
93:d8:10:f1:ee:23:05:d8:18:2e:37:04:4d:6e:2f:
0c:11:b0:26:a0:a7:9b:92:98:04:2b:de:66:94:40:
f8:1c:b0:ea:d8:6a:57:dd:a0:6a:15:e5:eb:92:f8:
67:0c:1b:e3:fd:75:e2:02:52:50:d8:29:21:2b:10:
4a:2b:42:59:78:f5:a1:0d:cd:9c:ba:45:9c:8a:f3:
b5:ab:15:78:9e:4f:49:18:80:a6:3a:a6:9c:06:88:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:9E:CD:E2:23:5A:2B:59:1B:9F:73:76:2F:75:B2:03:8D:50:90
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:80:9f:14:8c:d5:5b:8a:a1:3d:f3:c9:67:61:34:8a:15:
c1:05:88:b3:3f:2c:99:fd:a9:33:9e:12:64:7a:6d:ab:f6:7a:
ee:66:2d:11:8e:bd:bd:64:8d:a7:91:62:56:e5:71:fd:f5:13:
9b:79:75:25:8e:eb:0e:c2:3e:c2:66:37:75:e7:31:49:0b:38:
1e:d8:4e:4f:bf:56:ad:ee:ff:79:3c:38:ab:1c:3c:97:34:dd:
a9:08:9e:5e:39:93:c8:6b:88:18:8d:7f:43:3e:ab:8e:1f:21:
f1:a0:10:e6:b5:46:b4:58:db:b1:1f:ac:3f:0e:f4:2e:6f:42:
6e:59:53:c0:28:5d:d8:e9:7a:a9:da:3d:d4:21:ca:e4:fd:2b:
2f:b6:82:57:58:b4:ec:d0:84:2f:72:e2:77:c8:d2:67:66:bc:
24:1e:c6:8d:2c:fe:a9:a0:d2:39:cd:8e:1b:9b:a4:2b:86:e7:
89:22:d5:07:5e:96:e5:f7:2c:f8:44:0f:3c:5e:dc:27:95:5d:
16:70:c8:3b:95:52:ea:a4:67:f5:14:eb:d7:da:0b:19:4c:dc:
5e:28:11:97:39:8c:68:fc:95:90:2e:cb:97:79:00:42:e1:fa:
08:08:4c:d1:3b:41:ab:76:65:9e:68:15:9f:e3:98:13:3a:a4:
4d:16:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:25 2025 by rpki-client on console-fra.rpki-client.org