Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: 2WbFzcoLAGvRWdRlMpRnIwCWhSK9TNwPdwrsXHh5/V4=
Subject key identifier: 0A:54:F8:A9:15:D1:0D:2C:37:57:D3:D6:BE:02:DC:85:B5:EE:DF:91
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 0194BA8484A78EAA2DCCEE7F41954EDD6A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 04:00:34 +0000
Manifest this update: Fri 31 Jan 2025 04:00:34 +0000
Manifest next update: Sat 01 Feb 2025 04:00:34 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: wK74+GHmsx1X4+Fq0o0/ctHa+aCYXn2smz2wfTseqUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:84:a7:8e:aa:2d:cc:ee:7f:41:95:4e:dd:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Jan 31 04:00:34 2025 GMT
Not After : Feb 1 04:00:34 2025 GMT
Subject: CN=0a54f8a915d10d2c3757d3d6be02dc85b5eedf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:48:d1:ed:e3:c8:a0:bb:16:29:dc:b9:b2:
bd:36:e4:e5:2e:ad:4c:5b:69:0b:9b:9b:87:8f:b5:
23:89:d8:50:5f:18:5c:80:73:a8:bb:45:f8:69:b4:
14:f2:c3:20:1a:7f:7e:61:67:13:83:70:7d:9c:03:
db:61:bc:b5:fa:93:fd:15:bb:cb:e2:6e:27:a9:2a:
e1:4c:1f:53:69:f1:b2:6a:7a:56:ae:87:38:71:10:
d8:dd:81:ad:61:ca:c8:42:c1:42:6c:e0:72:1f:4e:
c4:67:51:fb:21:14:d4:a4:95:ef:6f:e4:c2:1a:8c:
e2:36:9d:6e:db:d3:2d:2d:f4:95:42:b3:6c:a0:7e:
a2:7d:47:d6:61:ba:06:31:7e:81:72:73:54:eb:aa:
92:42:eb:61:97:9d:99:9b:eb:b3:d7:33:69:ea:2b:
f9:c7:01:ef:46:78:8e:f2:8e:45:ca:db:76:29:28:
a2:85:76:e2:39:41:75:97:ee:19:4d:d0:a5:1d:cf:
d6:0f:66:2f:30:cd:6d:bc:84:6b:70:97:25:55:11:
80:33:1a:d9:f8:cc:b9:ac:f4:49:cf:28:c7:60:77:
3f:7e:3b:64:43:5f:16:ea:4e:08:39:3d:81:96:94:
e0:64:17:c1:8c:63:4e:c4:78:13:25:c4:e3:fb:e0:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:54:F8:A9:15:D1:0D:2C:37:57:D3:D6:BE:02:DC:85:B5:EE:DF:91
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:a5:5b:de:2f:dd:f6:c0:d3:97:1d:80:ef:8c:65:e7:e0:
e4:cb:55:62:62:cd:9a:e3:f9:bd:cf:97:73:fe:e6:fa:53:9f:
f3:20:12:61:06:a9:e9:52:8d:5c:b4:2e:96:29:49:f7:9c:65:
73:48:7d:ff:6d:1e:de:0f:db:cb:ef:1b:bd:a5:ad:95:ac:73:
3e:69:53:a8:0d:f3:ce:2a:53:7e:e7:a8:57:a1:37:93:4e:c1:
7d:93:72:7e:c0:13:bd:c9:bd:ec:14:1d:15:89:05:60:59:d1:
26:fc:79:f6:82:bf:4a:f0:7f:2f:5d:51:5b:ba:ef:f8:31:ff:
6d:25:ea:98:74:13:b5:74:d6:2c:e7:cf:d5:2e:19:b0:eb:73:
67:13:de:5b:45:0f:be:9c:58:36:09:91:28:56:08:fe:ef:4d:
96:14:e0:a2:d5:27:94:e9:89:af:54:5a:0f:5c:7e:92:b1:ee:
6e:19:98:88:70:b2:91:96:8c:14:97:a9:6a:b3:88:a6:3b:0b:
3a:42:24:96:e4:56:8d:25:57:d4:b9:4c:77:03:a2:9d:53:1e:
63:c7:d8:46:1e:48:48:11:8a:0a:fa:69:f2:e4:45:d5:81:4f:
44:80:cc:30:53:16:b5:19:89:00:ea:49:77:30:fd:08:43:37:
2f:ba:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:26 2025 by rpki-client on console-fra.rpki-client.org