Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: WzxTqMoXILqO+BVttxVk1DqrT4Bvv+DQf5sSdVgOGrg=
Subject key identifier: D4:4A:87:02:10:44:1E:44:05:58:ED:3A:20:3B:3C:95:08:E5:C5:7A
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 0194BB5FEDE0A11FFD018BF962328E35AAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 0199
Signing time: Fri 31 Jan 2025 08:00:13 +0000
Manifest this update: Fri 31 Jan 2025 08:00:13 +0000
Manifest next update: Sat 01 Feb 2025 08:00:13 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: KHGrpIf1u+dKKujZen+vu2Q2UKyVvRyp/38mvI3iU5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ed:e0:a1:1f:fd:01:8b:f9:62:32:8e:35:aa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Jan 31 08:00:13 2025 GMT
Not After : Feb 1 08:00:13 2025 GMT
Subject: CN=d44a870210441e440558ed3a203b3c9508e5c57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:bc:60:dd:70:0f:1a:6c:8e:3f:d5:e0:d7:
de:57:6b:0e:cf:b3:87:57:5e:ae:c9:74:4f:9a:74:
ec:55:4c:85:75:ba:27:2b:5f:d8:b1:d7:39:3b:bd:
e2:18:11:63:26:b9:bb:e0:22:a8:e6:aa:1b:a1:55:
f2:39:24:f0:08:30:b5:d8:d6:c4:9a:ce:b9:63:e6:
e9:dd:24:30:60:f7:b4:5c:16:a2:05:3d:76:a7:26:
72:7d:1e:1e:ce:a2:cd:52:46:b2:c8:9f:6c:08:79:
9b:fd:0f:14:5e:e3:3f:c0:00:70:06:0e:52:18:74:
0b:ef:72:a1:d6:9e:e9:11:fd:68:d8:96:fe:59:ae:
3c:70:cc:04:d5:4a:41:f8:7a:23:23:a0:97:bc:21:
83:ba:fc:b0:ab:30:cf:11:64:05:59:b8:8c:0b:23:
5d:a3:e9:18:d7:ec:f3:65:0a:87:7b:3a:e5:ef:46:
9a:6c:11:49:a8:1e:e4:95:35:60:1b:23:61:2b:0c:
03:79:7c:58:d1:99:76:d3:ce:87:31:e4:94:bb:b2:
42:32:15:ea:58:ec:a7:0a:f9:9a:b6:13:26:fe:f8:
5a:00:4b:09:b4:a8:99:70:a9:8b:63:c8:fd:4a:e4:
ec:1f:a2:4a:0d:fb:f7:46:d9:21:6b:c4:29:42:fe:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:87:02:10:44:1E:44:05:58:ED:3A:20:3B:3C:95:08:E5:C5:7A
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e1:9b:1d:93:8e:3f:5e:83:fc:b7:f0:d3:c8:b3:2d:2b:0a:
5f:a7:f1:1c:78:e9:88:03:d5:5c:ec:e0:0e:9b:19:3d:56:c2:
a1:71:4a:ae:46:05:a2:97:29:28:dd:8f:6c:0a:f8:ad:d2:85:
86:32:fa:27:ee:e3:87:95:18:98:54:ba:86:de:42:8c:54:18:
d2:b1:ab:7a:31:91:17:e1:b0:91:91:85:b2:8e:51:35:e7:3d:
b5:c9:cb:63:ff:ef:2c:44:82:4b:56:53:03:00:b1:82:30:17:
e5:a7:3e:81:45:8d:37:f5:b3:56:f2:3b:6b:a5:e2:e0:1f:3e:
f4:5c:71:77:c5:03:0f:2b:7f:c2:22:09:84:c1:2f:71:15:93:
36:c6:26:cd:83:48:73:2c:8f:6b:7d:4b:fa:9f:17:14:b5:6f:
9f:5c:40:5e:c4:a6:7f:f0:bc:55:9e:70:ea:f6:df:e3:3d:d4:
6f:cf:2f:88:14:c0:b3:01:8d:cd:38:7d:f5:5f:40:60:79:08:
1b:df:ea:cc:e2:5a:5c:6b:06:7a:57:a7:ab:93:81:2f:af:0e:
a6:11:41:a9:dc:f4:94:ce:b2:42:12:00:16:fa:76:fe:b3:a6:
12:aa:ba:b2:66:1a:9b:8b:28:5f:eb:b8:01:5d:c9:21:d6:a1:
3e:13:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:45 2025 by rpki-client on console-fra.rpki-client.org