Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: 9HuTOQfoA4g5C73X4OZIdXe22LzDzo1r6ERqObU8FI8=
Subject key identifier: 7C:08:20:EF:3E:D3:8D:02:1D:84:64:0F:D6:E4:E8:98:50:8D:0C:A4
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 0194BB600B877B5CF2B73FD781B17B25858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 0316
Signing time: Fri 31 Jan 2025 08:00:21 +0000
Manifest this update: Fri 31 Jan 2025 08:00:21 +0000
Manifest next update: Sat 01 Feb 2025 08:00:21 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: QtC/8ose59sEAZmQKaEEXbyrKVdmesOrepLJUnPtc3o=)
2: mQBN2-oU2oudork8oow4c77Beac.roa (hash: FsVN//20JFkmpyNtdeWnGtk0kBJNGpFrlCSP7YEmOqY=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0b:87:7b:5c:f2:b7:3f:d7:81:b1:7b:25:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jan 31 08:00:21 2025 GMT
Not After : Feb 1 08:00:21 2025 GMT
Subject: CN=7c0820ef3ed38d021d84640fd6e4e898508d0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:7b:22:1e:76:fd:c4:c3:58:77:b5:41:88:
00:d7:bd:96:1d:92:2b:e8:5b:0a:4a:89:29:34:84:
93:26:81:a4:90:c8:f5:af:b8:5a:fb:05:7c:ca:67:
f6:99:7b:1b:48:f7:7f:4a:e8:da:52:71:e2:72:9a:
71:20:ec:0d:37:2c:0c:39:49:a0:61:50:14:c4:db:
9f:6e:13:35:00:4a:6e:29:99:77:c9:6d:05:d0:f9:
d1:73:c5:fc:5b:20:20:4e:da:ed:c7:50:99:7b:c5:
ec:cd:9e:93:4e:b2:f9:5c:0c:96:0e:26:10:5e:09:
50:b2:d8:59:e9:55:7f:e9:06:78:48:d0:77:b4:99:
cc:6d:66:e4:92:c8:57:e7:2a:8b:14:07:68:3d:df:
2c:04:06:ce:1a:4a:6f:16:0e:cd:52:64:9d:46:bc:
26:d1:26:cb:4e:0e:cb:5c:5f:c6:3d:23:7f:da:c7:
24:36:2f:d7:bf:83:11:6a:67:64:58:64:e3:c2:d2:
87:0d:f9:7b:af:66:fb:eb:83:23:66:c5:22:00:9a:
d2:28:64:fe:ef:c4:27:e1:40:b4:71:48:e4:41:87:
77:82:7d:61:36:f3:89:75:a3:7b:3f:fb:6f:a3:46:
7f:54:68:3b:68:27:4d:04:26:51:58:7c:1c:64:85:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:20:EF:3E:D3:8D:02:1D:84:64:0F:D6:E4:E8:98:50:8D:0C:A4
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:9d:70:88:78:d0:b9:2c:fe:73:6b:61:16:60:0b:c7:43:
00:28:62:a6:68:74:89:3d:bd:07:75:45:1c:32:26:38:0e:0e:
a2:27:ec:42:bf:aa:44:9b:93:11:84:4e:72:e3:cc:98:17:39:
f7:b5:a5:cb:42:da:e3:b8:20:8c:fa:9e:62:b3:dc:64:c1:ef:
3a:34:8a:f7:53:39:4a:9a:a7:63:7d:53:fd:59:11:16:8b:ca:
ea:90:46:8a:37:14:3d:7c:80:fe:98:2d:63:21:95:da:31:96:
7b:25:11:15:49:4c:5e:f8:ad:77:33:03:63:8d:cd:9b:4a:fe:
4e:4c:8e:99:21:66:b3:a8:db:55:2c:74:3c:3e:87:72:6c:34:
a9:ef:4a:46:86:c8:27:8a:8e:0f:30:05:a4:c8:df:cd:34:78:
cf:e5:ae:d7:41:65:bf:07:2e:87:bc:2b:18:32:fb:d9:01:65:
82:0c:c5:b1:e4:2a:0c:bb:76:6f:17:1e:aa:16:36:c9:9e:2d:
aa:47:41:d6:e2:90:d7:71:9a:86:30:cf:c7:6f:0e:42:ce:c8:
39:e4:f8:a9:8b:1f:23:f8:78:a4:ab:58:6b:e2:58:d8:9d:2f:
16:9c:4f:b2:50:07:83:72:c3:c6:ef:e3:e7:ec:88:78:8c:9b:
3d:68:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:56 2025 by rpki-client on console-fra.rpki-client.org