Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: F9/CNndz3QPzeDOsPoIp9sThQ9GAC8Fg1SE+okU2B9A=
Subject key identifier: 2C:66:B1:AF:22:12:FC:6A:23:91:B6:19:BE:BE:27:7D:8B:5E:69:A9
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0194BABBC3E8B942604230907F34A9145200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:54 +0000
Manifest this update: Fri 31 Jan 2025 05:00:54 +0000
Manifest next update: Sat 01 Feb 2025 05:00:54 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: DHh8Fz/bzr7PbTL3mA42UOi7q5RrW6oEEscXqgtXpTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c3:e8:b9:42:60:42:30:90:7f:34:a9:14:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jan 31 05:00:54 2025 GMT
Not After : Feb 1 05:00:54 2025 GMT
Subject: CN=2c66b1af2212fc6a2391b619bebe277d8b5e69a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:c7:2a:b0:1e:08:87:7e:b4:b0:ec:99:66:
6d:a6:37:77:96:21:52:61:e9:d5:7a:d3:d9:76:b2:
a5:70:19:af:8f:b7:49:d1:6e:0b:e5:93:57:da:fb:
29:08:96:45:8b:fa:01:a4:74:ff:83:8d:79:40:31:
44:a0:5a:51:77:7c:ac:08:1a:4d:2e:7f:27:c0:57:
ec:27:61:24:51:3b:d5:31:80:4f:3e:b0:f1:41:4d:
05:7f:e7:c6:93:05:a6:da:39:4d:30:65:c4:77:4a:
00:b6:88:27:32:f9:3e:47:54:ac:e2:d4:75:5e:4f:
14:f4:40:e0:fb:ae:78:24:5e:5a:93:0a:fe:b0:35:
f1:65:88:9f:fc:a1:4c:7c:86:70:37:45:09:74:48:
05:a0:ad:43:49:e2:71:d5:3e:f6:d9:cf:54:af:fb:
63:0b:55:70:72:06:d6:dc:13:e3:d1:99:96:c0:e0:
df:d2:85:12:93:f8:0a:03:95:06:ba:9f:07:57:5f:
b3:cf:ba:9b:4e:54:f8:56:b0:5c:77:2a:67:ad:61:
5d:43:bb:2d:c7:33:a1:43:63:1c:04:2b:a3:36:6d:
ab:02:76:cb:ff:c7:3d:03:19:f4:f6:40:7e:59:13:
b8:3a:ed:97:14:f8:77:aa:26:ad:22:07:9e:17:6d:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:B1:AF:22:12:FC:6A:23:91:B6:19:BE:BE:27:7D:8B:5E:69:A9
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b9:0e:94:38:50:d0:60:09:16:47:7b:ab:21:43:6f:79:c9:
3a:19:91:8d:7f:50:89:35:9e:9f:42:a0:61:5d:b5:4a:68:9e:
05:26:7b:fe:c8:1b:c0:20:22:f6:3a:fb:92:f1:3b:76:0b:2e:
4d:f0:85:71:c9:b4:89:db:25:37:b4:c3:3d:54:51:03:af:b3:
74:3f:9d:48:be:7f:79:7b:52:3a:35:da:0f:1f:19:a9:f8:eb:
3b:72:dc:56:f7:87:54:41:55:2e:29:cb:da:17:a2:6b:ba:1b:
ae:9f:36:ae:10:7c:da:27:f8:8c:d7:83:30:a5:24:d4:80:ec:
61:10:ce:82:fe:b2:20:42:de:2d:07:88:d6:39:dd:c7:7b:c3:
fd:c0:44:5f:fe:a4:df:bc:12:b5:62:3b:f4:56:23:3c:f0:64:
13:28:f9:bc:11:84:bb:52:04:0f:37:75:e5:c6:da:c6:10:87:
18:0d:85:a5:88:41:4f:52:83:0e:ca:01:ed:d2:f3:6b:04:d8:
22:f8:20:e3:9f:b9:9d:67:ac:15:e6:e0:12:36:2c:eb:1a:ef:
82:95:24:b7:a3:77:e4:18:37:d4:3d:47:5c:5c:52:a0:40:0b:
e8:ed:af:0e:ff:cf:27:db:7a:62:0d:d6:d3:fd:0f:b5:45:a2:
00:11:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:28 2025 by rpki-client on console-fra.rpki-client.org