Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: lL9cdHt0j9GXnFRFa7vlopf+hKRySiI4VPdKPL3Sqfs=
Subject key identifier: 24:C9:14:56:07:DF:8F:57:5B:E0:99:A4:8F:7E:6E:F5:0B:5B:FD:0D
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 0194BB29553715A7D41019BE8B7017F722EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Sat 01 Feb 2025 07:00:35 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: +b1kkT1ThTeUh+Y45idfTLx1lRS1l1KOUQdI4GT9xs4=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:55:37:15:a7:d4:10:19:be:8b:70:17:f7:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 1 07:00:35 2025 GMT
Subject: CN=24c9145607df8f575be099a48f7e6ef50b5bfd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:da:2f:c3:e9:e4:fb:88:65:d2:85:65:25:
f2:4e:27:ba:90:ba:a2:a0:40:f4:37:c4:d8:e4:48:
db:7d:ad:43:21:5b:49:80:a6:20:ad:73:53:c3:cd:
03:00:8d:8c:5d:71:b5:b5:be:fe:2e:c8:63:86:03:
82:16:9d:c8:bc:d4:71:03:ac:6d:c3:14:17:ee:64:
b6:a1:4e:c9:c3:f8:2a:e5:ed:51:7a:cd:3e:8c:4c:
0c:da:b9:35:b4:56:74:bf:23:e7:35:2a:35:55:dc:
b9:e4:49:94:14:ab:37:cf:3f:5f:78:6c:cb:f0:7c:
9b:af:34:4d:3f:84:34:10:1e:22:da:a1:76:d2:7d:
b2:4b:6c:4b:00:ad:49:d0:17:cd:cd:ae:fa:03:da:
9c:22:29:c7:c6:eb:45:fc:12:45:b8:67:82:0c:1a:
32:e8:74:fa:9b:06:22:dc:c8:85:13:a6:86:5c:aa:
a2:e9:1c:f2:6c:af:09:03:7d:e0:89:f5:37:6d:03:
8c:71:24:56:30:54:f2:79:d1:48:27:98:47:a3:8d:
57:d8:01:54:61:d1:75:be:a9:a4:1a:82:11:c2:bf:
6a:b7:70:aa:23:74:1a:23:11:49:95:19:d2:43:66:
33:37:36:08:cf:e6:d3:9d:ef:74:0b:fc:e7:ba:06:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:14:56:07:DF:8F:57:5B:E0:99:A4:8F:7E:6E:F5:0B:5B:FD:0D
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:83:bc:23:d1:d6:ad:fa:b5:d7:15:12:f1:06:5a:dc:40:
33:ae:79:b6:26:ff:ed:6b:32:6e:8a:8a:05:94:14:f8:14:f1:
1b:a8:9a:9e:ce:1e:84:91:e8:8e:11:59:80:a3:87:a2:e7:0c:
0b:97:9f:60:2b:9d:41:05:51:da:29:35:ef:04:50:c3:dc:80:
9d:ff:55:54:34:5c:6b:cd:e6:e6:fe:c1:34:80:ce:e5:cf:70:
21:1d:d7:04:1a:7a:2e:0d:6a:5d:c0:69:da:93:7d:26:fb:a7:
33:66:22:d4:1e:8c:7f:2f:e4:46:3f:b0:4c:06:1b:2a:52:27:
cb:cb:80:24:d9:23:0a:06:13:13:ef:54:fb:3e:90:5a:40:18:
8f:71:9e:4d:14:0f:d6:d0:17:1d:10:ae:68:ce:a9:d3:0e:dc:
0d:c0:e7:6e:41:fc:49:89:84:38:f4:ef:13:61:e1:52:aa:45:
26:a1:17:01:ec:87:91:fd:e5:f9:7d:e5:be:97:65:26:c0:52:
63:bb:c2:b2:12:84:44:6e:d6:51:38:a6:c4:7d:c0:51:8c:c6:
c2:fd:fa:d8:4d:c4:1c:2f:fd:88:b0:7c:48:38:e4:d2:5a:18:
36:e8:4d:02:cc:ab:20:ef:22:4d:84:09:62:72:08:37:7e:a5:
2c:9a:d0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:45 2025 by rpki-client on console-fra.rpki-client.org