Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: Wklr9Gafmv4oN58r1chS2ONDhFdlU5nlZ77CxfjpMNM=
Subject key identifier: 1D:C9:66:7E:71:DE:AF:23:91:29:CF:A4:10:72:DE:D5:0D:73:61:63
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0194BB293B0B7198C4190F1F870A1C9DE4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 01A2
Signing time: Fri 31 Jan 2025 07:00:28 +0000
Manifest this update: Fri 31 Jan 2025 07:00:28 +0000
Manifest next update: Sat 01 Feb 2025 07:00:28 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 5MsDeQCLnyN51fhjccrVVWR/cOB/IEka4rrGBXG31P4=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3b:0b:71:98:c4:19:0f:1f:87:0a:1c:9d:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Jan 31 07:00:28 2025 GMT
Not After : Feb 1 07:00:28 2025 GMT
Subject: CN=1dc9667e71deaf239129cfa41072ded50d736163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:d4:e1:ce:96:61:92:30:3c:3b:ab:59:85:
a6:b3:84:cf:b5:e2:86:71:4e:9b:d4:32:88:9d:44:
db:91:58:25:18:27:0f:3b:10:6a:c6:1d:be:5f:23:
3c:34:9b:8d:68:1d:52:22:6e:fa:e1:0b:16:c3:28:
2e:c2:d9:7f:fb:11:23:2f:2b:5b:a6:5b:2a:d8:c9:
50:21:e0:45:79:e7:3f:17:38:c7:e3:9d:22:04:d1:
ed:50:df:55:e6:b1:a8:e1:6e:48:76:16:08:ab:44:
f8:f2:18:36:2d:83:3a:9c:b5:c4:b6:07:05:ce:2c:
a4:11:f6:ad:a0:70:6c:41:d6:30:fc:9c:12:38:f3:
6b:c3:fc:93:f4:a7:9d:f0:7c:1a:2a:37:52:e8:d3:
c6:ac:d1:0b:6f:bd:85:61:b3:db:c7:91:92:24:fa:
d9:70:8d:e1:66:c4:e6:af:a5:a3:23:9e:98:1f:40:
f8:0c:dd:6e:dc:a9:f6:12:d4:0b:fc:09:e3:6a:fa:
8b:fd:d4:88:7c:f4:4b:aa:18:63:fc:fb:05:34:b6:
37:d1:a9:4f:49:16:26:d7:3b:91:77:64:42:b5:c4:
36:91:a8:fe:af:14:4c:0a:d9:56:2e:a0:8a:23:c9:
06:a3:44:2f:77:6f:a1:5a:e6:99:33:ad:df:d1:d5:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:66:7E:71:DE:AF:23:91:29:CF:A4:10:72:DE:D5:0D:73:61:63
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:e6:af:40:7d:b4:f2:ec:12:20:a1:9d:d3:dd:a8:9d:91:
53:d4:de:9f:21:84:4b:41:29:c7:c7:a2:26:92:0a:0e:be:4d:
16:fc:10:b7:f8:2a:05:53:66:4f:10:74:e2:17:98:3d:99:67:
e3:d0:7c:4f:09:b0:ab:bf:fd:61:95:ad:4c:1b:14:a1:c6:9d:
31:df:74:ab:bd:9b:2a:44:8a:75:e6:f8:9f:ae:62:43:d6:d3:
bf:84:d7:d9:7e:c8:35:e1:af:98:9a:0c:8f:ef:25:14:3e:d1:
bb:65:3c:7c:93:57:fe:5a:f0:7a:60:84:da:c9:a4:af:5a:d4:
1f:a6:4a:9e:54:f8:3a:f9:fc:c9:9e:24:2c:9f:8e:e7:0f:93:
37:de:cb:ab:c4:82:fa:69:cb:92:bd:26:bd:10:54:e3:31:e3:
59:6e:49:c9:01:de:08:2b:97:b6:b1:79:27:37:e9:e7:c7:71:
b6:3a:62:42:d5:cf:50:c9:1d:e3:7a:05:69:f9:5c:33:5f:1e:
d2:4a:db:62:80:0a:9e:cc:97:e0:d9:6d:3d:0c:a5:20:7e:e5:
52:69:b7:4b:c4:98:46:96:59:47:d2:24:e8:9e:cc:c5:46:ea:
2c:2c:71:74:83:74:54:da:c5:30:97:40:33:ae:48:55:13:92:
a2:12:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:26 2025 by rpki-client on console-fra.rpki-client.org