Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: begnZ5095Ip6XH21+uWla4KmRQJPibGOlddByLRB10Q=
Subject key identifier: 66:DD:9E:C3:3A:A3:84:F1:4B:5A:D6:74:35:3D:D1:CE:C8:9F:40:64
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 0194BB96DEA287687E4A43A2C4B63DDEC670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0733
Signing time: Fri 31 Jan 2025 09:00:14 +0000
Manifest this update: Fri 31 Jan 2025 09:00:14 +0000
Manifest next update: Sat 01 Feb 2025 09:00:14 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: d7dZxjm7RQNzbS/lmY1SqZHYU0dkmi+5Mxq8ZTHgy0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:de:a2:87:68:7e:4a:43:a2:c4:b6:3d:de:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Jan 31 09:00:14 2025 GMT
Not After : Feb 1 09:00:14 2025 GMT
Subject: CN=66dd9ec33aa384f14b5ad674353dd1cec89f4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:5a:a7:e8:5d:90:cc:13:12:11:a6:31:7b:
49:37:bc:e4:01:47:f3:ca:75:5e:c7:56:6e:ca:31:
0f:2c:17:8d:f8:51:1e:a7:5f:70:f4:eb:fe:b2:e7:
fe:d1:26:e6:b6:72:b0:dd:5e:fc:5b:76:d2:0d:0f:
7d:b4:af:6f:1c:b6:09:b9:0e:86:14:31:78:04:e9:
b6:70:af:4a:38:c0:51:2f:dc:e3:eb:22:60:64:c2:
19:4b:da:6a:fb:d0:90:77:50:67:76:ff:56:f4:01:
25:f8:69:6e:72:91:4f:25:de:94:71:8d:b2:19:f9:
ef:33:e9:b5:3b:db:59:13:8c:46:d6:d6:d7:c3:e5:
27:e6:41:a3:cf:17:ae:cb:b4:fe:1b:e2:a4:eb:6c:
9a:6d:3c:f4:01:f3:01:80:53:d6:6f:21:0a:c9:e2:
bb:ab:39:51:53:46:da:01:bc:31:5e:b7:a0:33:fd:
42:9e:a8:02:7c:7d:0c:c2:1d:8c:dc:de:a0:a6:b8:
ac:01:50:96:a6:2e:3e:c3:fa:b7:99:4f:c7:29:58:
72:ee:97:42:bd:8a:14:cc:6a:11:c6:09:12:c0:f2:
0d:d4:3f:c0:14:1c:63:4f:2f:1b:c6:d9:f2:bd:7d:
22:a8:e4:73:59:12:14:f4:f5:9a:50:e6:62:6c:bc:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:9E:C3:3A:A3:84:F1:4B:5A:D6:74:35:3D:D1:CE:C8:9F:40:64
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:76:33:0c:01:a7:15:0b:35:b8:37:0e:08:c9:13:7e:8d:af:
5d:31:5f:79:25:0d:85:9e:7d:e2:3c:ab:c8:63:43:a9:51:88:
db:e9:71:8e:e0:6e:e4:e4:72:3d:82:48:13:a9:70:3a:6a:c0:
3f:1d:ad:11:43:b5:64:8c:96:0a:46:28:1d:93:04:2d:87:97:
12:59:c3:2c:0e:80:17:83:e3:24:3c:0a:9d:f9:0a:8b:e3:16:
41:68:56:0f:a5:db:c6:27:da:d9:59:d9:3e:53:4b:64:bd:58:
54:d6:82:2b:c3:9a:05:8e:08:58:04:0b:0f:b9:ef:ad:29:91:
2a:29:24:f2:f1:05:f5:fc:59:9a:f2:7d:2f:4a:25:07:77:35:
00:a9:cf:51:5c:d1:30:04:4c:39:7f:13:73:35:d8:d6:f1:0c:
7f:ae:93:49:0e:55:a4:63:ce:ea:0b:1a:64:7c:e6:98:11:ca:
fa:1a:1e:82:23:b2:14:16:1b:e0:f2:c4:51:0d:ab:9b:34:2e:
68:7a:d2:d8:8a:be:d3:70:67:9a:62:57:22:c0:c0:b2:08:88:
44:e8:81:88:8b:6d:61:b1:90:01:ad:78:fc:2e:07:2e:38:19:
08:97:66:5a:51:4d:8c:42:80:47:0e:e6:7b:1d:1d:96:d9:42:
fd:02:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:07 2025 by rpki-client on console-fra.rpki-client.org