Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: powOxpqfBjhMfemFsptfR6XtP3gULhidAvLqf1dOXjw=
Subject key identifier: CD:11:68:86:F8:7A:7F:5A:33:90:34:C3:2B:39:66:79:75:D5:C5:EB
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 0194BABB4CD657D7C0C1D4AA282E908C1FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:24 +0000
Manifest this update: Fri 31 Jan 2025 05:00:24 +0000
Manifest next update: Sat 01 Feb 2025 05:00:24 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: lv13VX5gaO3AJi7+DpQ4+i9nrJ0difzkg8yiFmiDRGk=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4c:d6:57:d7:c0:c1:d4:aa:28:2e:90:8c:1f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jan 31 05:00:24 2025 GMT
Not After : Feb 1 05:00:24 2025 GMT
Subject: CN=cd116886f87a7f5a339034c32b39667975d5c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:d6:d1:58:72:3b:ed:54:74:9b:d8:07:26:
ac:32:c0:2a:71:1f:8d:24:2b:f6:85:ac:50:cf:e3:
e8:40:69:46:4e:50:01:42:05:71:54:41:40:95:b5:
45:4a:88:58:53:ef:74:86:26:38:74:c6:a1:63:4b:
37:3d:de:8c:83:73:7d:e6:4a:42:f9:c6:55:73:65:
a8:12:97:dd:da:09:b8:5c:ec:ce:fb:f9:67:79:b0:
ea:ab:12:55:d6:e8:12:e1:99:ff:d3:d6:c9:fc:9c:
3e:9d:da:50:ba:b7:26:21:52:b7:0b:da:3d:de:67:
60:85:aa:10:23:89:1a:60:11:47:cb:3e:14:08:87:
92:2e:7e:ad:88:bf:a4:e3:12:f4:cb:f3:85:ad:25:
b5:7e:e2:ae:79:11:76:7d:7a:d3:07:b8:4a:c2:8c:
74:70:4a:5e:38:d7:3e:56:9e:ac:be:e8:9c:db:e7:
f1:5f:30:67:43:6b:ca:63:e1:e2:8b:4a:c9:6d:b4:
7f:9c:ce:9d:9f:1c:2c:87:38:5a:9b:d2:8d:5d:5d:
9c:89:7e:cc:be:03:c6:f0:1b:2b:04:9a:ad:bd:38:
8f:b3:f1:31:8b:78:21:1d:a0:7d:c8:c4:f0:3f:64:
89:08:cd:2f:5b:fa:15:fc:b1:1e:6b:5f:9b:5d:57:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:11:68:86:F8:7A:7F:5A:33:90:34:C3:2B:39:66:79:75:D5:C5:EB
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:63:aa:0b:b7:48:6c:7b:2e:3c:cc:e1:1f:8f:be:f1:69:
02:71:c5:36:a5:eb:60:1b:6b:07:a6:1b:33:38:17:17:15:a3:
67:8c:3a:be:1b:26:a1:2f:89:9d:68:00:fc:c3:ac:d5:97:67:
e6:5b:a6:35:29:58:f6:15:c0:5d:40:b2:d2:46:82:6f:7b:d4:
fd:fd:3d:ed:5e:56:bc:50:47:dd:3f:4c:fb:a9:73:09:d4:dd:
6a:8e:40:8c:3b:ea:6e:17:a7:ca:8c:f7:77:0e:db:e3:95:4b:
86:c0:65:90:87:21:6c:c0:da:2d:1b:d0:4d:50:5f:cf:30:c5:
fd:70:00:db:a3:0d:29:b7:6f:05:72:c2:43:cf:44:1a:1f:04:
05:fa:c3:84:f8:4c:dc:0a:50:ff:0d:22:cd:25:6c:e6:6c:a5:
ee:76:ca:44:ea:67:ae:90:7f:b9:59:90:fe:5f:89:4b:fe:08:
c0:f3:a9:79:76:9f:36:88:e4:e9:e0:cb:4b:43:9e:f0:bb:e6:
fc:9c:51:17:10:57:a7:9b:4e:3a:12:ce:38:1b:57:ff:a2:dc:
c0:e9:be:73:c8:4f:c1:f9:e8:a7:3e:34:2f:9b:6b:4c:ab:d9:
78:98:ac:d6:c9:15:72:49:2b:4f:d5:d4:db:ba:18:f6:67:10:
23:81:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:55 2025 by rpki-client on console-fra.rpki-client.org