Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier: 08u92ZJ+P9tAElHGoVPfprtZwciaaiTZ+f+cOnkYhig=
Subject key identifier: D7:C9:66:5E:36:43:A0:F7:9B:8C:F8:E9:0B:C4:C6:8D:0B:3C:BC:CF
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 0194BA848BA58027ECE098C22FC1C8E0ADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: w7/bmir4G2e83YiGQsZT2aR3p1PFcurrjSqm3R1j+8I=)
2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8b:a5:80:27:ec:e0:98:c2:2f:c1:c8:e0:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=d7c9665e3643a0f79b8cf8e90bc4c68d0b3cbccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:69:a1:4f:15:80:cd:3c:f9:ec:e4:f1:18:
92:04:c1:6d:b6:ef:b9:f2:a1:89:a4:fe:bd:17:da:
64:43:53:9c:9d:02:8a:a5:fe:ac:da:f7:d6:f4:d1:
e0:cd:7d:71:73:d1:ca:77:28:2e:5a:df:46:20:1b:
fb:d2:4d:ff:69:70:6b:ad:84:cc:04:5d:88:aa:28:
0e:5d:44:92:d6:2e:37:b2:be:b7:cc:08:46:06:90:
7c:51:53:2a:cc:6d:0e:03:c0:d5:f1:44:d1:b5:73:
68:e1:15:e4:d8:1c:35:04:ca:81:07:c5:ab:29:32:
2e:88:38:ad:75:00:c2:6c:3f:71:68:75:3b:2e:9b:
dd:25:1a:00:67:5b:7b:65:4d:63:33:f8:76:c3:8c:
f3:61:ba:07:c1:cd:a1:6a:97:43:e9:15:11:64:8b:
54:10:13:f4:38:8a:63:5c:77:cf:6d:17:ea:53:24:
c9:09:b5:03:b8:0b:21:97:fd:3e:36:cb:01:0c:22:
0b:d2:51:4d:eb:84:09:e3:77:53:ea:09:b7:b3:02:
e0:b6:ca:86:35:58:4e:55:53:17:59:7d:90:85:72:
ca:f1:5b:b6:8a:2f:a6:71:8e:8b:4b:1c:bd:d5:e7:
0a:8c:fc:8f:38:8d:cc:fd:22:96:8c:c5:3c:1f:65:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C9:66:5E:36:43:A0:F7:9B:8C:F8:E9:0B:C4:C6:8D:0B:3C:BC:CF
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:29:15:ee:7f:f5:22:b5:47:d5:52:73:68:69:f0:24:4d:
34:24:95:f1:2d:b9:f6:e1:77:1c:da:8f:0f:5c:ad:9c:35:38:
ce:b3:03:03:d8:14:e3:69:98:a5:34:4a:5b:c1:56:ea:6c:df:
00:45:12:c8:7a:22:6d:bd:87:d7:6a:0d:62:5a:08:da:cd:6d:
ba:a8:36:10:f9:d6:8c:09:72:96:03:71:1e:11:0a:cf:ec:19:
bf:29:ed:66:fd:04:ec:43:ea:82:ec:67:80:68:8f:bf:a5:0f:
0c:51:81:55:9a:57:a6:99:ed:4b:8e:ac:81:1c:0d:fd:63:e5:
74:a1:16:4c:cc:c3:9e:f8:c9:e3:40:f5:5f:be:32:b8:9e:c8:
79:5f:a9:a6:81:2b:86:6d:b3:bc:43:fd:11:20:01:4f:ff:13:
5f:cf:89:8f:41:4c:1e:34:b9:5a:d0:0f:da:ae:3b:4c:85:32:
2e:0b:cd:f6:33:24:68:22:04:06:bf:06:d2:5a:22:aa:5d:35:
92:bd:08:fe:68:ab:d2:7a:c1:59:08:bd:b1:e4:40:c0:77:30:
a8:a3:de:40:51:f8:9c:94:e7:6a:0f:8a:15:f1:cc:d2:99:8c:
ff:f6:75:ce:53:09:41:2b:67:85:cd:6c:c2:10:53:26:2e:a0:
21:74:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:47 2025 by rpki-client on console-fra.rpki-client.org