Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: 4ccm972w/CXGIDH9vPEqgb2ZLraCHgIqmSBBfowC7oI=
Subject key identifier: CE:E4:40:EC:1E:A0:D1:F8:C0:1C:24:74:AC:4C:D6:54:58:F0:E1:F0
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0194BB9728C1B09D2344521207AF84AE3DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 09:00:33 +0000
Manifest this update: Fri 31 Jan 2025 09:00:33 +0000
Manifest next update: Sat 01 Feb 2025 09:00:33 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: S5sscWgtdANrn7ek7RLR/skNYn69Jau+busXiKAyfRk=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:28:c1:b0:9d:23:44:52:12:07:af:84:ae:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jan 31 09:00:33 2025 GMT
Not After : Feb 1 09:00:33 2025 GMT
Subject: CN=cee440ec1ea0d1f8c01c2474ac4cd65458f0e1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:f7:19:3c:c8:96:89:0e:02:e9:eb:5a:03:
74:88:4e:3b:2e:98:b9:ac:9f:17:9b:6c:15:4b:89:
16:c7:0a:e4:61:10:94:3c:c7:93:dd:c1:c5:96:b7:
c7:82:22:e2:a9:bc:5f:22:de:7f:8b:cd:9c:1a:d3:
59:97:24:15:d2:8f:85:09:cc:70:42:09:4f:70:e5:
ae:ec:2d:ff:ed:9d:4f:e4:ae:e2:68:54:e1:46:f5:
87:7c:7f:5a:ad:c6:6b:9f:c3:07:59:69:29:fb:1b:
57:3a:a4:10:cb:0d:7a:b3:97:9a:47:24:a5:39:ab:
d1:f3:2f:b4:b1:2d:e3:3c:9d:02:80:53:ba:10:ab:
92:c6:bf:c9:16:e4:9e:90:36:32:bb:6a:6b:59:a6:
d9:05:7e:0f:f0:b2:2a:d0:0c:64:46:dc:82:7d:e9:
60:c8:12:30:76:70:a0:17:54:84:b3:05:80:a6:4d:
9b:89:6c:f9:c9:62:55:fe:a9:8a:2e:53:f0:86:1c:
fc:bb:6a:da:1c:b8:f9:6f:2e:eb:58:56:a9:fe:cd:
4d:c3:a0:49:f2:47:77:2b:d9:07:20:55:9a:28:3f:
0e:82:db:75:99:9b:39:6b:fa:45:98:3d:8d:21:c4:
33:7c:35:b6:a8:c8:ea:00:bd:84:7b:02:d9:ac:e4:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:40:EC:1E:A0:D1:F8:C0:1C:24:74:AC:4C:D6:54:58:F0:E1:F0
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c0:07:6e:41:50:a5:a1:9b:92:09:2d:fb:95:cd:6f:e5:c8:
aa:24:37:1c:d5:2a:8d:ec:b3:81:2c:9b:b0:24:0e:33:65:fe:
62:4a:b6:a9:26:0d:40:c4:ea:a9:80:75:c0:31:bf:2d:8c:22:
93:12:46:e2:c3:ea:87:3b:32:c7:c0:f1:06:1c:52:9a:8f:f5:
52:9f:88:d7:c4:70:3d:97:cc:4f:35:af:2f:60:8e:c0:cf:d6:
91:7c:cd:65:7b:93:f9:85:3a:f8:74:bd:a0:61:ee:de:d1:a8:
43:d2:9c:6b:51:c5:5e:98:63:30:e3:9a:7e:e5:5f:96:a4:cc:
ad:b7:0e:3e:48:c3:48:d5:8c:f9:23:47:8e:f1:96:74:43:85:
80:23:2e:f5:a6:0b:e9:26:9a:b7:62:eb:dd:dd:e0:5b:8a:4c:
83:3d:bd:da:53:f6:0e:5b:e9:50:08:9b:a0:9a:55:8b:fd:94:
23:f8:20:33:16:b7:05:18:86:81:3d:8b:64:38:e9:85:13:a4:
06:87:a3:83:aa:90:c4:62:f9:3f:a9:09:c6:2e:9d:19:6c:b7:
62:74:a1:3f:a8:f5:a4:13:97:5a:7b:e6:2d:4d:bc:78:de:b8:
e8:89:4f:4f:e2:c3:6d:e7:52:9c:40:71:db:a1:81:5b:1e:6f:
a2:c6:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:28 2025 by rpki-client on console-fra.rpki-client.org