Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File: uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier: X3NJFtgqrmxxNd8wytpTWAQquPiMkq431axYffrN+18=
Subject key identifier: D0:98:2D:29:77:FB:6E:91:39:B0:17:D3:45:B0:0E:07:CD:46:C3:76
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer: /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial: 0194BB96DFAABC40765597986FF4C330B03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number: 02DB
Signing time: Fri 31 Jan 2025 09:00:14 +0000
Manifest this update: Fri 31 Jan 2025 09:00:14 +0000
Manifest next update: Sat 01 Feb 2025 09:00:14 +0000
Files and hashes: 1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: aBhuYNJSuGyP01qwWyXPRIKn0iyNeBICEIpDAIM4D5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:df:aa:bc:40:76:55:97:98:6f:f4:c3:30:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Validity
Not Before: Jan 31 09:00:14 2025 GMT
Not After : Feb 1 09:00:14 2025 GMT
Subject: CN=d0982d2977fb6e9139b017d345b00e07cd46c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:c6:96:b5:8f:66:ca:57:60:fd:fb:35:5c:
13:61:11:8a:a4:bc:ab:ce:b6:be:0c:1d:74:66:f3:
66:2c:b6:9f:70:3f:7b:88:db:71:45:5b:0d:d6:7f:
6d:fa:89:2f:93:28:d5:0b:74:a6:86:65:69:ff:93:
f8:1f:8f:1e:c5:a0:5f:3a:0d:2f:a1:8a:41:0d:3f:
92:be:8d:88:7b:5a:59:76:26:30:bf:ca:23:ec:1e:
0f:98:ec:08:2b:4a:fb:d3:01:7c:1a:75:f6:8c:96:
4f:69:5b:4b:fb:3e:f0:64:2f:49:36:53:54:49:26:
75:10:0a:e9:7b:02:82:13:8a:94:8b:84:9f:b8:f6:
60:3a:a0:39:47:d0:13:ef:c0:f2:44:e6:0f:cf:6c:
ca:e3:be:41:9e:c9:29:85:19:df:23:61:ba:ae:fa:
eb:53:63:cc:cf:24:3e:40:5e:58:bf:26:ee:41:9a:
a5:f9:f0:e7:3a:37:9b:8a:f3:ec:fd:ab:c5:97:20:
05:f3:69:87:0d:6f:0b:6c:0a:11:16:2e:16:40:a4:
6a:0c:61:5c:da:5b:97:73:f3:8e:71:f7:3c:4a:53:
0d:f5:c1:73:60:de:97:24:35:f5:53:2b:d1:dd:5e:
bf:a5:d1:7a:ef:51:c7:fd:45:c9:f8:84:fb:f6:bf:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:98:2D:29:77:FB:6E:91:39:B0:17:D3:45:B0:0E:07:CD:46:C3:76
X509v3 Authority Key Identifier:
keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8b:f6:4f:be:93:f8:f6:24:03:f7:d2:94:18:3c:30:38:4a:
26:ef:ea:c7:71:19:5d:7a:6b:c5:ec:8a:b9:f6:a1:27:ea:74:
e4:f7:aa:53:21:45:86:a8:c1:4e:51:c0:b1:ee:ba:96:f2:f8:
64:b4:c3:77:9e:33:02:01:5d:6a:dc:65:8e:1f:b5:d8:01:fc:
be:0a:51:43:db:93:a5:15:8a:01:7b:a4:82:09:90:ff:03:ab:
6c:79:7e:ba:91:2c:f6:9b:ee:ee:25:82:87:4f:c4:ad:10:ee:
ad:14:a7:0b:42:c4:2c:e7:02:16:d1:18:63:ad:2a:9a:7a:9b:
10:bd:47:7e:26:16:29:89:36:8b:2c:b8:ac:6e:ac:9d:fd:e4:
a7:91:5e:be:89:a9:2b:6f:5a:91:06:a2:72:5b:3a:b6:38:f9:
88:99:33:bb:2e:12:93:29:c5:58:13:cc:06:b7:59:62:ed:0d:
fe:ff:17:12:43:67:a3:0b:3e:e8:d0:72:ba:b0:fe:87:e4:05:
2e:32:56:0e:9e:81:a0:b1:0c:2a:b2:05:4d:54:c7:17:65:ff:
5f:b7:1e:62:f5:cc:d1:29:90:ce:d6:1a:ee:2d:c4:00:bc:ea:
b1:6a:b6:c6:6a:90:7b:ae:c7:52:96:76:3c:d9:d6:af:67:1c:
95:03:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:09 2025 by rpki-client on console-fra.rpki-client.org