Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: UyS79WBo6tlWW1Ovg28NSIJTBXngbCyZpG2FwMcx980=
Subject key identifier: B1:20:91:3C:CD:DF:B2:DF:DE:BB:67:ED:05:1A:98:6D:0A:93:2B:58
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0194BB2991060D4367F44D0854CBC472E178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 07:00:51 +0000
Manifest this update: Fri 31 Jan 2025 07:00:51 +0000
Manifest next update: Sat 01 Feb 2025 07:00:51 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: Ka3r6npF4Kpwdkh62WNszCnxU8uSK/VAosdfptWVwC8=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:91:06:0d:43:67:f4:4d:08:54:cb:c4:72:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jan 31 07:00:51 2025 GMT
Not After : Feb 1 07:00:51 2025 GMT
Subject: CN=b120913ccddfb2dfdebb67ed051a986d0a932b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:bc:e6:59:a6:44:b6:d8:34:ac:a9:0f:24:
71:70:e8:d6:a3:fe:30:24:af:4d:d2:50:ab:b2:f9:
ce:b7:22:81:a8:e0:61:04:71:eb:db:10:59:f9:f4:
72:ce:2c:c7:98:8e:cb:3f:37:19:56:4b:1e:d3:7e:
d6:7a:34:6b:34:05:1c:2f:4c:85:f3:a1:03:88:59:
91:f1:62:90:f9:e8:e2:ea:b7:ae:f5:ab:22:bf:82:
ca:df:a2:2d:b1:9b:70:42:a2:8f:24:99:da:30:81:
4c:0a:ca:38:5f:c5:d7:59:25:bb:1a:91:2e:cf:ad:
d7:1f:bf:95:61:fb:62:e4:bf:e7:e6:03:8e:89:da:
bd:12:52:42:75:be:bf:38:09:61:b6:fc:af:0d:d8:
5e:ae:e7:dd:a1:79:d2:52:60:5a:31:78:dc:c7:76:
b6:0d:f7:36:a0:74:0f:ae:18:39:2f:fc:a5:2a:05:
83:52:f6:d8:ab:2e:2f:0e:f1:26:8b:01:30:d2:e1:
d7:5b:a7:f4:8d:de:6a:78:19:40:18:3c:21:4b:9b:
e4:87:72:f2:fa:73:31:3d:ac:77:79:10:88:ed:fb:
60:b6:80:a9:35:a0:de:84:aa:16:cc:4b:06:8b:84:
14:9e:1a:c4:6d:1e:7c:31:c9:0b:fe:f4:10:27:50:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:91:3C:CD:DF:B2:DF:DE:BB:67:ED:05:1A:98:6D:0A:93:2B:58
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3b:6d:ac:01:e2:cd:e1:ea:d7:72:a9:15:96:97:39:b8:11:
08:ed:48:88:f9:ba:d4:74:66:30:46:c5:52:45:94:5b:60:32:
3f:79:be:69:29:53:2b:f2:79:0d:d8:e5:5e:09:f9:bc:92:8c:
4f:0b:12:af:d1:84:60:4a:3f:78:31:37:de:60:8f:b3:08:56:
3e:c1:87:28:ff:65:6a:fa:84:51:fd:ff:3b:ce:c8:f1:c5:f2:
cb:88:42:42:5b:d2:2a:47:d4:40:59:28:d5:5b:d4:8a:f7:7f:
c0:19:6a:0b:fa:b0:11:22:7a:b1:ca:83:7e:ec:fb:d6:96:96:
00:70:e2:fd:b9:1e:61:ed:23:54:6c:75:9c:03:4b:91:a5:1d:
a5:22:43:24:08:18:6b:29:a8:0f:d0:08:ef:30:f0:32:67:2c:
90:4c:04:71:29:c5:e7:51:05:39:12:e6:8b:14:f8:c9:f0:5e:
f4:71:bd:ca:5a:6e:a4:63:ef:91:05:9d:87:6b:29:da:26:26:
97:2b:ff:e2:70:9a:40:3e:75:db:bc:28:29:35:60:d2:43:21:
39:07:f1:0a:c6:0a:4c:a2:85:d5:a7:5a:11:5f:91:2d:71:dc:
a8:69:d6:94:94:a8:12:89:24:95:9d:e4:6c:44:75:0d:74:f1:
ac:41:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:51 2025 by rpki-client on console-fra.rpki-client.org