Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: Z9xkJXe6qVaeOyroGgtAxjUqVd9q19ms4Z3UM5jhht4=
Subject key identifier: A5:1A:A0:AB:55:27:4B:FD:A4:2E:E8:C8:5A:A4:56:50:9F:7F:7E:D9
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 0194BB294B1016F93B151AB0203D5D926127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 07:00:33 +0000
Manifest this update: Fri 31 Jan 2025 07:00:33 +0000
Manifest next update: Sat 01 Feb 2025 07:00:33 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: yhUY/1vJvO9i9UwXz9oQXUiVZauN1HqYGRiiEJ2Vng4=)
2: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (hash: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:4b:10:16:f9:3b:15:1a:b0:20:3d:5d:92:61:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jan 31 07:00:33 2025 GMT
Not After : Feb 1 07:00:33 2025 GMT
Subject: CN=a51aa0ab55274bfda42ee8c85aa456509f7f7ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:33:e9:d6:de:eb:58:56:f4:f6:fc:f3:99:46:
76:30:dd:97:ab:f9:5e:b0:c0:db:dc:44:1c:aa:03:
94:31:c8:03:df:2a:54:72:a8:6d:ba:4d:70:7f:79:
20:90:0c:a0:ed:c0:29:dd:a8:b0:9a:22:f5:58:00:
29:3f:d7:e4:2e:bf:17:be:54:91:54:7f:e4:73:fe:
0c:94:3b:7f:40:f5:4a:6c:26:ff:7c:30:27:27:84:
43:e2:44:a1:03:25:9b:8a:87:bb:df:3d:f2:35:7f:
10:58:bf:b1:a9:00:7a:45:b5:29:f6:33:a9:52:18:
25:58:61:60:77:a0:16:a8:6d:43:cb:34:48:b3:23:
8e:7b:64:00:65:c8:a9:26:d1:34:1c:65:18:63:1c:
b1:01:a4:4f:9f:5a:e0:f9:08:d2:e7:42:20:a6:58:
01:d2:37:cd:6e:07:89:0b:b6:d3:5c:7d:4e:0c:ad:
73:16:7e:39:58:d6:10:1e:6e:5b:76:99:23:d6:7a:
61:67:3e:42:b9:58:97:91:e5:a8:c1:7b:97:15:54:
8e:7e:82:b0:d5:91:cc:b7:af:1d:f1:2c:7c:85:e4:
92:4c:0b:cb:b6:ef:20:e0:f3:76:7a:98:e4:cb:f9:
77:b5:60:8a:09:c5:f6:84:6e:29:e7:e6:69:f1:d0:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:A0:AB:55:27:4B:FD:A4:2E:E8:C8:5A:A4:56:50:9F:7F:7E:D9
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:63:c2:c6:94:5a:6e:ad:4a:01:1e:0e:e0:c8:bf:ab:36:
02:bb:41:7e:01:7e:93:d8:9d:27:ce:71:1f:3e:0a:95:1e:a4:
ec:59:37:f5:3f:04:d6:84:fa:5f:8d:b5:fd:fc:f2:7b:62:1d:
15:99:2d:e7:ed:d8:f3:a9:9a:d3:b4:bf:59:20:77:b0:27:e2:
ef:55:d0:6b:49:2a:93:1b:90:bf:43:bb:0b:4f:ca:d9:17:eb:
46:4e:68:42:e1:00:83:bb:ee:ab:38:82:c4:3c:b7:45:3b:18:
d0:4c:3d:e5:40:f9:70:fe:d2:56:76:ab:40:62:d6:00:6f:bc:
8c:8c:55:26:bd:cb:d4:06:66:fa:63:67:2b:24:4c:83:41:c2:
e9:90:5d:ce:f9:5d:e0:14:1c:2d:9c:bf:94:53:6d:83:54:61:
fd:0f:73:db:c3:85:7c:bf:ae:d9:7a:7c:f0:d9:6c:0b:ef:6d:
79:33:04:6f:e7:55:fa:86:d4:e2:a0:e5:43:cc:6e:d3:70:7d:
cf:2e:90:bc:96:1c:f7:7e:f8:ce:33:93:8c:15:75:c3:b9:94:
97:4f:30:6f:82:db:64:19:34:9a:0c:e7:64:35:d5:2d:72:82:
7f:a9:2c:fd:47:2f:39:5b:2a:ba:67:b1:82:71:9b:66:b5:43:
92:98:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:33 2025 by rpki-client on console-fra.rpki-client.org