Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: 81+IKNANUw5vxADi3eIrCkIvGnRRThC6jw/haSdV6Bw=
Subject key identifier: DE:45:3F:63:94:7A:DA:0F:DD:8C:CE:B5:8F:5E:66:C2:2D:36:74:5F
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0194BA84A1FA39DFC6EA9C01CFF7F812F799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:41 +0000
Manifest this update: Fri 31 Jan 2025 04:00:41 +0000
Manifest next update: Sat 01 Feb 2025 04:00:41 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: T3y8XROrLXeeVbtXsIlYggO7bK6uxmOAmZKdAGOzdiE=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a1:fa:39:df:c6:ea:9c:01:cf:f7:f8:12:f7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jan 31 04:00:41 2025 GMT
Not After : Feb 1 04:00:41 2025 GMT
Subject: CN=de453f63947ada0fdd8cceb58f5e66c22d36745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:c4:6c:a9:64:9f:63:e3:d4:d1:39:10:f9:
68:b8:86:ca:7b:d8:b2:6f:63:63:15:5f:1b:af:d8:
ae:17:87:76:27:73:87:9b:96:1a:bc:b5:0c:a1:7c:
d4:9b:95:18:88:8a:e9:ac:aa:cd:b2:80:57:ef:e3:
b8:74:fe:58:18:b3:7a:47:5d:75:46:98:11:dd:da:
33:3c:36:19:24:b9:b3:04:11:54:f5:40:cf:ae:5b:
60:f8:1f:56:c1:87:13:ad:c4:c9:6f:94:7d:1d:fe:
a0:09:97:b4:c2:34:9e:a2:48:8d:8c:2f:43:a3:c2:
61:a0:91:2f:88:c5:e8:0c:e1:db:6c:43:fa:6f:c7:
ca:26:9b:61:89:2c:9b:66:44:3e:a5:eb:ac:76:65:
1a:82:a0:11:33:f2:1a:4f:6b:28:d0:ed:fc:ee:75:
da:28:bc:b4:9d:eb:f7:ce:51:86:e3:6f:c7:40:6c:
16:6a:0b:af:a5:02:9a:bf:f6:5e:53:4c:33:d8:ee:
2f:11:e4:5a:d8:7f:d6:97:11:b6:bd:e8:8b:9f:69:
60:6c:9d:ee:0e:f5:0c:38:5b:29:1d:11:35:c6:2f:
8d:d8:ca:8d:4c:a8:67:69:29:25:45:2e:24:dd:43:
7a:a6:cc:90:79:47:60:b4:ac:96:6c:24:f0:f3:c3:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:3F:63:94:7A:DA:0F:DD:8C:CE:B5:8F:5E:66:C2:2D:36:74:5F
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:eb:38:e2:34:4e:f6:25:65:c8:de:f2:ff:e9:33:bf:40:04:
e7:d7:7c:89:a7:61:ee:69:04:89:53:ba:24:b2:1f:54:a0:72:
85:6c:75:59:55:03:88:90:a9:94:b4:79:a3:bc:cd:df:ea:78:
18:67:96:5b:17:e2:27:51:a0:1c:29:69:f3:3d:0e:0d:f2:62:
c6:b0:d8:e9:6e:ee:57:ee:f8:ae:05:ed:5a:b5:0b:b0:b7:a2:
15:e5:93:ef:5b:78:d6:59:78:2e:32:5e:c8:3f:59:db:5a:71:
c6:c0:0a:04:1a:a5:64:ce:f4:ae:c2:f5:08:ea:72:5e:73:c9:
5a:1e:6f:79:88:56:bf:20:e8:3b:02:fa:1e:c5:4c:ac:e7:42:
96:6e:ea:9d:1f:5e:a8:d5:b6:79:0b:a6:f2:8c:23:4e:97:0d:
6b:6a:46:66:02:c5:11:71:12:e1:52:12:60:42:3b:09:4b:e7:
92:99:b8:75:ce:fc:31:3a:b3:48:04:d6:a7:83:e1:8b:7a:64:
52:42:fb:61:7f:55:a3:3f:85:5e:27:12:e0:97:c6:4b:98:7d:
08:40:c9:81:4b:5e:ae:00:01:36:e4:16:f1:7c:0f:a1:25:3e:
1c:3a:f4:55:86:06:4e:33:21:b2:9a:2c:32:cb:14:cd:fc:44:
e4:67:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:24 2025 by rpki-client on console-fra.rpki-client.org