Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: 4t95tATJZ6HRoXDJ/jcAGoKtoXFVb+9BOLwn8RzibBM=
Subject key identifier: 99:D8:22:18:B2:55:2F:54:B7:5D:06:3C:39:A1:DD:D9:25:CD:46:F8
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 0194BB6031A9074EC2A1EBF73BF5FB799466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 0F51
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: 8CmyrgpCh4QIVQLz76pJ6S0uCJTrr7XT6WtVdT+mqFA=)
2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:31:a9:07:4e:c2:a1:eb:f7:3b:f5:fb:79:94:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=99d82218b2552f54b75d063c39a1ddd925cd46f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:ff:cf:be:bf:0e:8a:bc:7a:d0:0b:3a:db:
eb:5c:80:a0:2f:53:48:b5:e3:89:bd:b4:aa:90:71:
af:4b:17:94:26:46:f9:b7:e9:d9:3b:6f:5f:4e:b2:
94:e5:36:e0:84:98:bf:db:39:03:36:60:8f:43:df:
b1:eb:2b:10:90:ee:3d:b0:06:e5:20:91:a0:6e:ca:
50:b9:e8:fd:1e:12:05:77:d6:c7:18:f0:8a:55:ba:
2f:30:99:2b:e9:d6:de:31:a2:0d:05:79:13:6e:68:
d0:86:d5:d4:7b:be:90:93:42:03:f1:86:7e:98:b6:
62:b0:36:50:e9:cf:9c:27:a4:64:11:22:9e:82:e6:
ae:c0:19:75:82:c3:9d:97:2a:14:ab:f1:fa:bb:f3:
fa:4a:3c:99:5e:8a:5b:6a:47:27:91:db:e1:96:1e:
2d:7a:db:45:18:1e:71:5e:1f:c1:e4:f3:9c:ad:16:
e8:b5:e2:c8:e0:e1:fe:ed:75:d2:89:66:dc:c6:53:
55:ef:aa:23:c8:f7:8a:47:fa:6e:c7:87:f5:76:fd:
9b:90:3b:fe:85:ab:ee:9c:b0:d7:33:23:1c:8d:f7:
77:dc:f3:f0:01:ac:aa:2b:50:13:11:46:be:89:80:
86:6d:55:50:54:1e:6e:93:78:4c:53:68:59:60:00:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:22:18:B2:55:2F:54:B7:5D:06:3C:39:A1:DD:D9:25:CD:46:F8
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c5:de:77:0a:52:a7:56:27:8e:40:20:2f:f5:a9:02:ce:13:
61:61:11:cd:37:e8:23:76:24:f8:69:16:09:d2:98:a1:46:eb:
8a:9b:c9:fc:d5:fd:ea:ee:78:fa:7a:bd:6f:d1:cb:17:62:31:
ea:75:9f:27:38:76:24:d5:f9:e1:e0:68:f6:08:9d:74:77:fb:
f2:65:0d:70:21:9e:33:25:f2:bf:67:87:cb:55:b7:3d:78:ba:
f7:3b:98:46:97:31:b6:db:24:90:65:87:18:07:72:0d:fa:db:
38:57:96:56:0d:8b:f6:d6:95:3f:8a:ec:8c:b1:01:d4:57:ba:
7e:f8:72:4c:21:8c:64:71:db:03:68:65:e9:ed:a3:5c:bd:3d:
f8:3e:bb:e8:03:d6:40:bc:76:a4:c3:2b:28:84:36:a3:8c:5c:
56:cb:9d:96:0e:37:35:d8:e8:b8:04:db:11:97:7f:4c:d4:39:
7e:b2:ef:47:16:f3:82:1a:04:a5:52:68:ff:65:43:1a:1e:6a:
7e:61:f0:ac:97:67:f7:92:eb:b5:19:5d:39:13:18:9e:a9:7e:
90:f7:1b:9c:82:36:19:8e:28:f8:f1:23:b5:ae:19:6a:c5:43:
a7:a5:b1:39:23:27:0a:9c:c6:7b:53:05:9b:93:ee:88:aa:fc:
5b:32:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:08 2025 by rpki-client on console-fra.rpki-client.org