Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier: C8elyGOnShUt3qpnQBfaVv/Pf9+cyrxbZKSQOOipCoU=
Subject key identifier: AE:68:AE:02:A9:44:5F:2F:A6:E5:AC:14:46:DF:04:FA:C1:7F:6F:22
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 0194BB96CD463FB80B9CBB2187295471DD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number: 10C4
Signing time: Fri 31 Jan 2025 09:00:09 +0000
Manifest this update: Fri 31 Jan 2025 09:00:09 +0000
Manifest next update: Sat 01 Feb 2025 09:00:09 +0000
Files and hashes: 1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: dkKhHdJ33H+SHo/oEN3/W4AzAAPmhYg44ljAvB7Gd5c=)
2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:cd:46:3f:b8:0b:9c:bb:21:87:29:54:71:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Jan 31 09:00:09 2025 GMT
Not After : Feb 1 09:00:09 2025 GMT
Subject: CN=ae68ae02a9445f2fa6e5ac1446df04fac17f6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:2c:0d:d7:7b:5e:31:4f:a1:22:e5:fa:1a:
ba:7f:67:b4:f2:ba:cd:15:13:0b:52:d5:42:58:25:
48:c6:e0:df:32:18:7b:60:7e:7b:cb:5c:28:91:e7:
4a:11:81:39:f7:97:d4:19:42:42:74:d0:99:54:82:
97:07:e6:27:5b:2d:ae:bd:1e:71:e5:30:1b:0d:3b:
5f:83:f0:4e:6c:b2:13:68:5d:53:cf:15:af:c1:1b:
70:da:3b:98:b1:a3:47:54:47:82:4a:dc:fe:87:a1:
d9:53:f4:db:17:0f:12:f8:19:e2:b5:fe:2c:f5:02:
2c:d5:23:78:35:57:95:3d:4b:f9:2f:1d:d4:25:82:
a9:09:87:07:52:b9:f5:13:b3:e9:c7:54:4f:4d:b5:
5d:a4:97:73:81:c5:00:bd:8d:77:dc:eb:27:1c:8f:
61:09:c3:d9:c0:e7:44:80:36:fa:ad:ad:db:7c:12:
fa:28:7b:b4:e5:b3:42:d9:e2:ed:83:6a:f9:a2:64:
52:f6:d6:a3:91:07:19:1e:ea:d3:d3:6c:72:1e:52:
8e:2d:5c:a7:4d:6d:b6:b3:4c:7c:b9:a0:d5:8c:96:
b6:77:ea:28:9a:00:4a:c5:65:0f:d8:18:66:47:ff:
1e:d5:89:e0:72:59:9f:77:d9:ad:a3:80:b7:5d:d6:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:AE:02:A9:44:5F:2F:A6:E5:AC:14:46:DF:04:FA:C1:7F:6F:22
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:6b:82:ee:7a:19:83:be:54:21:e3:29:91:d2:04:36:08:
4f:08:e7:71:f3:94:13:e3:8e:2e:33:a7:19:7f:f4:c7:df:70:
9a:00:2b:36:9c:24:63:00:eb:eb:6f:f1:03:8c:90:7b:31:6e:
98:d0:88:59:80:49:88:c2:15:62:25:1f:91:e4:44:a5:52:81:
0b:fc:c1:a1:41:cb:0e:0e:d9:77:2b:dc:bf:6c:bf:c7:24:57:
51:7b:4c:14:08:c7:0b:02:b4:47:7a:a2:49:35:50:26:11:4c:
95:33:5d:f9:11:ec:56:44:e6:82:c3:5a:51:3b:94:07:02:1e:
41:3d:2e:17:d9:c7:c1:d3:33:68:02:93:1e:5f:6a:18:bc:fe:
c1:44:ea:ce:58:26:b4:2a:85:4e:01:b1:c7:0f:69:49:48:68:
bc:e5:ae:58:eb:e6:71:4a:4e:fd:4b:d7:41:e7:ba:ad:ea:9a:
6e:42:48:fd:5d:32:43:fc:46:e1:cb:91:8c:6a:09:c0:97:d4:
30:07:e7:6b:17:17:39:23:62:f6:4d:21:73:87:75:a1:40:96:
f6:0e:0a:c6:3f:80:01:4f:80:33:fe:17:17:bb:fb:07:29:9e:
cc:14:75:3c:70:d8:c7:02:e8:1d:29:6f:85:f6:38:81:3d:1e:
bd:19:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:37 2025 by rpki-client on console-fra.rpki-client.org