Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: CQdAfe7uIC1xqnRlpn1+r7FbxxGgu9mM5VX6nbP/pEs=
Subject key identifier: 42:BF:E3:86:46:2E:D3:0D:DC:66:F6:A0:F5:A3:18:66:A8:DF:A1:CB
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 0194BA8430A408F67DCDB8F3EB5ED0DF1717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 109E
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: hzG9wjXyjX4+Q7U+F1npbYG5ar/HxTvrOIKxZxW+y8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:30:a4:08:f6:7d:cd:b8:f3:eb:5e:d0:df:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=42bfe386462ed30ddc66f6a0f5a31866a8dfa1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:35:65:fe:d3:ae:bf:51:0d:41:e1:8f:52:
c3:dd:a4:b6:9f:a6:aa:42:e3:0c:b5:ba:da:72:92:
2e:6f:a0:3b:9b:32:08:3f:88:76:df:ad:72:e8:f5:
30:8d:f3:86:a1:ee:b9:e6:51:3b:e7:a0:3b:df:a3:
f5:95:fe:92:a2:c4:db:ed:e3:7f:ee:2b:53:32:dc:
0e:40:1e:8e:89:0d:43:a3:e8:c0:e2:5e:69:3e:1f:
78:88:15:aa:e7:ba:3a:16:bc:18:61:05:54:d4:5d:
92:d2:f8:47:68:bb:68:45:e8:61:0d:06:cc:e3:6c:
07:30:ff:37:46:17:69:dd:fa:07:6d:fe:c1:a1:d4:
18:a8:10:94:a1:ce:e5:f0:13:46:70:57:e9:a6:53:
15:49:ed:a5:f0:af:1c:6a:24:ab:99:8e:b2:10:77:
cc:70:f6:9f:7d:20:b1:03:41:54:ff:8d:e8:35:af:
1d:01:59:0e:fa:1a:94:d7:d0:a4:2a:17:29:2e:ba:
7c:c2:9a:db:5b:f5:fa:ea:a5:72:d7:5e:c3:0d:05:
6c:41:ba:76:fe:2c:c0:15:34:94:62:3f:01:bb:b5:
ee:1e:6c:60:58:09:0e:b2:a1:f2:b2:f1:ac:10:9a:
49:f8:a6:37:83:ff:19:10:27:ad:cf:a4:6f:65:78:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:E3:86:46:2E:D3:0D:DC:66:F6:A0:F5:A3:18:66:A8:DF:A1:CB
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:22:f3:d6:5d:ff:b4:2a:75:c4:58:f4:cb:9f:0f:45:fa:
02:c3:0c:42:dc:0f:4e:d2:32:cf:ad:01:6e:15:22:3f:6d:89:
a7:f6:9c:c0:60:b0:87:63:ab:92:c0:89:b3:66:fc:24:8d:40:
d9:75:94:a2:77:43:1e:b1:20:51:0a:f8:48:fa:32:af:5f:0c:
b1:f5:ee:0c:0b:1c:99:56:9e:bc:6b:90:8c:eb:dc:11:bd:df:
b5:b8:4a:64:11:16:d0:eb:e4:42:9c:d7:37:59:02:3c:59:77:
ef:95:cb:17:3d:f2:95:5f:a9:e3:f6:f0:0e:f3:72:ce:1f:63:
31:38:b0:1f:db:4e:95:be:99:2d:53:77:b1:bb:21:d1:b7:6a:
a2:34:56:b3:41:04:70:e8:52:fe:ca:d6:ac:b0:e9:db:1d:f1:
5c:96:55:68:2b:ca:be:56:53:90:d8:63:c3:c0:b4:b1:2a:71:
14:1c:db:3f:79:ed:04:05:c0:2e:91:33:dd:5e:3b:98:b5:3f:
0a:fc:f4:45:e3:03:ae:68:ad:03:93:22:a9:56:b6:17:79:32:
f4:96:23:f4:0a:86:61:d0:d2:96:b1:d1:4a:46:a6:b6:e1:ee:
eb:ac:77:0d:6d:82:68:cc:38:5d:aa:ef:4d:0a:5a:3d:68:65:
a2:50:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:44 2025 by rpki-client on console-fra.rpki-client.org