Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: 7So0z8jty89MFCzJB/H60n3VA47iGM5sFTTQs8bonO8=
Subject key identifier: 8B:D3:3E:FB:D5:07:1F:B1:94:5D:97:27:10:1F:CA:27:05:9C:CE:54
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 0194BB60410A148841F1218299416F72EE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0AA3
Signing time: Fri 31 Jan 2025 08:00:34 +0000
Manifest this update: Fri 31 Jan 2025 08:00:34 +0000
Manifest next update: Sat 01 Feb 2025 08:00:34 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: MvRXjCjfrJDEi1CVcUZhr0pD9fmvPYZ/AxRcX5VOPXE=)
2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:41:0a:14:88:41:f1:21:82:99:41:6f:72:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Jan 31 08:00:34 2025 GMT
Not After : Feb 1 08:00:34 2025 GMT
Subject: CN=8bd33efbd5071fb1945d9727101fca27059cce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:34:7d:e8:c2:36:72:be:6a:08:40:b6:6b:
16:6d:ec:af:db:67:29:9c:4e:67:96:12:69:cc:e2:
22:9b:1b:4c:e8:b4:b6:f5:20:17:11:99:2a:58:f6:
a9:f2:fa:28:11:c1:5f:1d:04:20:82:87:1a:66:40:
17:ac:24:af:4c:4f:03:bd:42:f6:92:7f:d2:a7:2c:
c6:b7:50:5b:87:b5:5f:08:93:0f:5a:ae:d4:86:03:
3c:db:74:55:67:89:68:bb:27:0d:58:a5:72:3d:31:
cf:e6:f0:b4:77:a9:64:36:65:67:6a:d5:51:c8:d2:
c1:e3:ac:a7:d5:7c:15:58:3d:4b:17:23:32:04:18:
e8:cc:ae:94:0f:cb:31:30:d2:06:b9:e9:36:0e:96:
a2:28:f5:39:32:8f:87:fb:e6:9d:10:8c:63:0a:df:
35:80:2b:64:c6:77:f9:75:1f:9c:bd:d2:0a:87:8f:
0b:b8:d2:77:fe:ec:08:47:e3:25:9f:17:cb:93:df:
76:65:86:77:50:07:2e:e9:4f:00:5e:77:55:b9:cc:
5a:25:65:d1:ce:78:93:0f:1e:5d:c5:22:91:e8:c4:
96:2e:be:24:21:40:d1:bb:81:49:eb:db:fd:59:52:
da:ff:c1:da:40:43:37:4b:0d:01:af:97:39:8b:35:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:3E:FB:D5:07:1F:B1:94:5D:97:27:10:1F:CA:27:05:9C:CE:54
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:86:13:b1:cc:4f:ff:63:1b:5e:bb:ae:8b:6c:0b:93:71:
a1:cf:4d:3d:38:0a:c7:1e:e4:c0:21:ed:6b:d6:80:b6:bb:e1:
5b:6a:89:39:c0:c5:4f:65:a6:3a:a9:bb:50:3d:f6:76:cb:1d:
7a:65:f2:08:0a:30:e5:ce:7b:0f:cc:14:2f:7b:2d:f0:e2:57:
1c:51:9b:89:fb:2f:04:1d:11:ff:d8:23:b7:10:cb:b6:78:b1:
99:38:d4:66:a4:d5:c8:21:24:ee:25:b9:9d:d9:2a:de:c7:0d:
f1:79:57:d0:2d:b1:71:c1:e9:bd:bf:0e:89:64:66:67:41:b3:
1e:e6:76:85:c4:70:9a:14:72:6d:90:f6:13:75:f3:23:8b:29:
29:d1:ed:0c:c5:fb:47:1c:5c:7a:32:d6:f5:62:49:aa:33:cf:
c6:fc:1a:90:43:34:fc:41:23:f5:50:83:7f:be:65:99:e1:ab:
87:c9:11:78:65:5a:a6:1c:f8:e0:7c:b4:b7:27:4f:76:7c:73:
1c:5b:25:d9:7f:3d:27:eb:79:36:33:99:80:fa:3a:c0:4a:3a:
1b:b1:46:4e:6a:26:bd:5d:2a:6f:4d:68:50:46:96:76:de:eb:
41:64:79:aa:74:7e:83:d2:f8:77:65:f1:4a:1c:2b:89:54:9f:
d4:e5:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:20 2025 by rpki-client on console-fra.rpki-client.org