Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: rBpzhmK2EHeUBdcFYoTirAa+bhO3vpGhzebIBTmpOQo=
Subject key identifier: 27:33:81:2D:41:E3:98:50:F2:8C:2E:6A:20:BB:86:9C:A2:B7:07:74
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0194BB2975077050EDD80C2B3D7BD5885CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0CDC
Signing time: Fri 31 Jan 2025 07:00:43 +0000
Manifest this update: Fri 31 Jan 2025 07:00:43 +0000
Manifest next update: Sat 01 Feb 2025 07:00:43 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: OgDe1pIrgS1FXCgCK0ryFHsAT2GlWC6UOIiI9pF7IEE=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:75:07:70:50:ed:d8:0c:2b:3d:7b:d5:88:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jan 31 07:00:43 2025 GMT
Not After : Feb 1 07:00:43 2025 GMT
Subject: CN=2733812d41e39850f28c2e6a20bb869ca2b70774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:25:fe:f9:1c:78:6e:55:a6:33:1b:3f:cb:
78:f1:86:e1:fc:5d:62:bc:51:d7:98:d9:67:24:d5:
ae:00:d7:61:2a:80:76:b1:3d:b6:bc:37:2c:94:4b:
53:b9:54:51:81:67:49:42:d9:50:4b:ff:3a:64:f0:
77:8d:45:3c:ef:cc:97:02:46:d6:73:65:8e:fc:74:
dc:38:a8:32:4c:3f:38:7f:cf:01:2f:f6:01:5c:fb:
16:41:23:90:2f:b0:ad:21:c1:2c:e7:e2:bb:44:d6:
84:81:23:64:ff:e0:42:2b:a5:c4:c4:93:76:d0:61:
c8:fc:fd:aa:91:e1:bb:db:68:81:87:ba:65:ff:70:
ff:53:84:0f:00:f4:66:90:de:ed:81:2c:6e:19:ee:
77:2c:ad:ce:84:16:00:ec:56:62:38:e2:7d:bc:90:
88:b0:fb:de:03:2f:fb:5e:23:8c:3b:9c:73:7f:5b:
cf:e6:25:81:aa:c2:15:e7:38:9d:b3:75:f5:60:f1:
5b:7c:f8:1d:4d:8a:53:b5:d8:53:fe:27:e4:8f:8d:
eb:a9:91:9a:58:d3:d2:f3:81:a9:97:ac:26:b0:96:
53:7a:66:4e:b3:96:63:9a:9a:8b:9f:83:d1:c2:a4:
c9:b0:54:73:50:7a:f8:3b:04:84:a4:8f:52:87:2d:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:81:2D:41:E3:98:50:F2:8C:2E:6A:20:BB:86:9C:A2:B7:07:74
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:12:b3:1f:a1:8a:55:37:ce:68:85:53:9d:03:12:99:4d:
47:b8:ac:35:40:58:89:b5:e8:9b:5f:d2:eb:21:31:99:29:2d:
7c:2e:1b:ca:94:15:be:90:c0:33:d3:68:02:5a:48:cf:e2:25:
9a:b8:7b:e1:a2:5a:1e:a2:78:49:0a:3f:f3:71:f7:d5:40:bc:
14:38:be:bf:1a:5c:c0:d8:0a:36:e4:47:80:3c:35:34:94:5d:
c6:27:4b:72:1f:22:fa:24:be:4c:08:e7:5d:e4:6f:fe:49:a4:
60:20:0e:13:4f:ad:02:48:76:17:ed:61:65:8d:ef:46:6e:70:
cd:1b:a0:67:d8:08:7f:74:a4:73:f7:44:bb:9e:c5:09:34:e3:
e2:42:3c:22:6a:4b:2e:74:67:5c:f7:72:8c:9b:4f:d5:a9:79:
c0:24:92:d3:46:05:5b:a1:60:6d:90:98:5e:49:b6:0e:77:21:
2b:e1:8e:02:fe:64:7f:14:da:eb:61:a2:98:ca:6a:20:aa:b4:
12:58:c9:80:18:fd:2d:fa:cb:c8:7d:07:d7:da:44:90:08:73:
fe:ca:45:c4:25:17:bf:55:ff:9b:6d:9c:c7:4b:e7:a4:3f:66:
94:51:dc:c4:6b:97:24:56:bb:28:af:30:79:36:f9:93:b1:02:
d3:c8:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:32 2025 by rpki-client on console-fra.rpki-client.org