Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: 7JEXQESfeY4GTOOq/gUE9IeV4XXv4EujvFLGcLrZS74=
Subject key identifier: DF:F4:35:EE:9F:57:F4:9A:CA:40:36:29:45:69:4B:F5:00:F2:03:6D
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 0194BA841FE13FCD8B2FB3C436612FB4CC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 0257
Signing time: Fri 31 Jan 2025 04:00:08 +0000
Manifest this update: Fri 31 Jan 2025 04:00:08 +0000
Manifest next update: Sat 01 Feb 2025 04:00:08 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: cN3gp6yRZ9ODF/oBzgkjn1BE2mq4XqJYWgTG4jaz/l8=)
2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1f:e1:3f:cd:8b:2f:b3:c4:36:61:2f:b4:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Jan 31 04:00:08 2025 GMT
Not After : Feb 1 04:00:08 2025 GMT
Subject: CN=dff435ee9f57f49aca40362945694bf500f2036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:99:b5:d0:ff:bb:af:58:bd:1d:f7:7a:5a:
54:be:01:a4:a4:46:2e:2a:87:c5:25:70:06:9e:32:
d5:08:b3:b3:46:2a:9d:f8:96:cd:ae:5e:cc:03:24:
66:e9:02:51:7f:fa:47:35:55:10:68:e6:fd:08:1d:
bf:2c:dd:98:7a:d2:3d:62:0a:96:ef:c5:b9:e4:17:
b7:a4:3c:81:37:0d:44:c9:82:b9:eb:48:70:be:9c:
8d:c3:28:83:fb:fd:70:10:b5:d4:11:b4:7d:6b:a2:
d1:f2:00:da:e3:26:cb:ef:17:b7:7e:2d:24:0e:72:
94:ba:ae:7e:cf:ee:7c:40:70:7d:1d:8b:56:e6:3d:
ea:82:12:2f:3d:36:e4:7f:46:76:5f:ef:46:b0:65:
65:09:9a:bc:ef:5d:55:66:32:bb:fe:dd:d4:42:27:
9b:42:23:5b:12:da:0e:c5:8a:cb:48:27:94:fc:66:
a9:ac:54:c1:fd:98:06:4c:43:83:39:d0:67:06:e1:
af:ad:b2:64:61:ec:9a:ec:ff:2f:42:27:fe:48:18:
74:ba:88:b6:ff:ef:f0:b8:de:f9:87:30:d0:8b:06:
ee:97:03:43:ae:72:82:3e:63:f6:20:1f:8d:d1:9d:
bd:66:4f:27:34:9f:9a:b3:40:7d:7e:e8:eb:0f:2f:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:35:EE:9F:57:F4:9A:CA:40:36:29:45:69:4B:F5:00:F2:03:6D
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:c0:69:aa:19:db:6c:9b:34:02:83:12:c3:d5:8b:ff:00:
0f:af:f1:1e:97:e9:be:31:78:98:8c:0c:d9:e7:50:ad:2f:63:
cb:ca:87:66:fd:1f:16:f4:1a:10:7a:38:e6:36:83:f5:f5:24:
03:3d:f2:db:1b:2e:d5:76:33:4f:da:e7:f4:ea:9b:5c:e0:8b:
00:24:14:47:1f:3a:84:cd:59:3c:7c:17:25:bc:e9:40:b7:fd:
41:7b:80:ab:70:5f:38:8f:53:31:e7:05:b9:a4:25:72:b1:c1:
98:56:62:46:7d:b6:3a:5a:30:8d:35:e0:46:20:58:16:3e:9c:
de:bd:22:13:b5:f2:01:52:e7:22:5d:f6:1e:da:8d:a0:1d:b9:
bb:a5:64:1f:a8:a5:6f:b2:92:6a:3f:85:cb:8e:bf:38:1f:b0:
0d:df:a7:34:5e:ae:b4:f7:2c:b0:e4:bb:c1:23:96:5a:63:ce:
77:17:ca:b5:93:5c:3e:98:f3:ec:99:9f:ba:ac:ac:43:7d:f0:
94:b0:e3:e5:3d:df:35:a0:eb:b5:e6:b8:2c:cf:55:d0:47:08:
20:64:de:49:47:07:1a:a7:32:87:e7:0c:47:e6:40:01:b3:ec:
61:3c:56:9e:2e:05:b6:d1:ff:3e:61:62:2c:0d:12:eb:f7:42:
72:8f:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:45 2025 by rpki-client on console-fra.rpki-client.org