Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: 0Qxv8D9uvaNsdKQ/i6mHQIvIrNWjPSQ4AnbNrAgtqxg=
Subject key identifier: F3:71:99:EF:C1:22:51:05:78:DC:86:A8:A5:E1:1D:D2:12:A3:57:63
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0194BABB8F1218AECE65B698CA74E9B35EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 0F73
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: l4aqCbNp8WQrfG87oGzWvA3Bj72H0m/OY02Mkxl/sNc=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8f:12:18:ae:ce:65:b6:98:ca:74:e9:b3:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=f37199efc122510578dc86a8a5e11dd212a35763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:11:bf:33:75:15:18:5d:d6:4b:55:0d:79:
58:01:9e:7d:01:ea:cb:20:c8:64:f1:85:77:74:cd:
0b:7b:e7:a5:0b:42:69:20:1c:e1:ea:63:28:a7:b5:
8d:d4:28:cc:60:42:22:02:4f:83:b9:be:e7:e4:a1:
31:07:d9:cc:20:06:9e:cd:ec:c8:3d:eb:2e:cc:76:
b5:91:8c:c7:10:3a:97:1d:36:33:05:51:75:8f:f7:
20:08:b7:dc:2f:2f:08:db:7c:1d:b2:f7:d6:f9:d8:
d6:64:ca:3e:45:0e:5b:b1:9b:d5:e8:e9:50:b4:43:
13:87:12:d1:cb:c2:00:5d:cc:3f:7f:52:15:7e:70:
08:c3:d2:2a:a9:d4:9c:41:f4:06:7d:45:b8:a7:8d:
b6:15:2b:b1:1f:d0:30:78:fd:d8:4f:11:f1:43:f0:
39:cc:11:b5:0c:5c:24:ad:2d:da:c7:b5:e6:27:16:
c2:c6:6b:b7:7f:98:4a:10:9b:a4:1e:c0:7e:20:96:
de:56:cf:ad:5f:19:c6:16:bd:91:44:7e:a0:b0:b7:
02:fb:ea:40:cd:a0:59:c7:e6:d8:98:ba:6e:9b:31:
38:1c:a6:a8:2b:0e:fa:82:41:80:e3:05:01:41:32:
8e:3c:19:fe:8e:6e:31:ec:b5:a2:aa:a5:82:95:3b:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:99:EF:C1:22:51:05:78:DC:86:A8:A5:E1:1D:D2:12:A3:57:63
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:39:d8:11:f4:d7:62:e0:6e:f4:d3:c2:07:e4:31:2b:40:40:
d4:50:51:aa:b9:21:c1:e7:75:a5:f7:23:46:63:29:59:8b:77:
03:b9:ae:eb:7e:cd:4c:5f:2b:21:31:26:11:64:d1:44:4e:01:
28:37:cb:98:eb:c0:8c:e6:6f:54:35:f9:a5:4c:30:0f:55:1b:
6d:78:88:11:43:62:5a:82:3f:18:f2:14:fc:7b:75:76:b9:40:
a4:62:e2:f4:8e:87:5d:8a:96:26:65:7d:3a:37:eb:f7:12:f6:
18:8a:82:c5:c7:26:a4:b9:01:99:77:ab:2c:7c:b2:3f:a0:5f:
98:97:f8:9f:20:83:b4:f3:73:de:e8:4e:d7:10:41:21:c3:c8:
6c:c3:87:77:b9:1e:4a:4f:84:fd:3b:65:fb:b7:6e:e6:e6:1c:
c3:67:e8:4d:2d:f2:1d:fc:30:cc:a2:d6:3e:ba:6e:30:a9:b3:
5d:15:3e:46:94:94:02:5b:27:63:cc:6b:c7:3f:78:34:b5:28:
39:ab:cd:c5:4d:91:d8:3c:35:52:ef:98:15:fe:cf:8e:b1:6e:
7b:8d:3a:35:6f:5d:0e:e2:45:3a:ab:6c:b0:96:0f:06:b5:74:
b1:64:0b:59:01:21:8a:a5:25:da:08:33:53:5e:d6:ce:8c:8b:
c0:11:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:24 2025 by rpki-client on console-fra.rpki-client.org