Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: bdksdxnJ1g7KIZquboeTGAx/NdBEvpp/K9E/LGQYgcg=
Subject key identifier: 02:CC:1B:84:0C:CF:89:F4:6B:64:7F:71:22:A3:CB:66:6A:9D:73:DC
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 0194BB97503495F69D9D0D78B48369A18363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: +V27Q+O5w2h1cG0mv29gt9zkx12QHxqTZlZNHoparns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:50:34:95:f6:9d:9d:0d:78:b4:83:69:a1:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=02cc1b840ccf89f46b647f7122a3cb666a9d73dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:10:1c:04:6f:72:98:f1:03:f4:ef:00:46:
4e:2b:33:df:c3:54:70:0e:d6:65:12:5a:dd:9c:83:
0e:4c:67:29:9b:6c:b3:48:5e:fa:99:eb:e5:d2:a3:
da:f1:f6:5c:7c:f2:66:bc:e0:54:c2:ba:bb:0e:61:
6d:62:75:62:34:07:ec:5d:c4:a0:83:79:46:37:fd:
55:2b:4b:9b:57:ea:f0:a5:2e:06:30:51:3e:11:1a:
89:5f:a2:c2:d1:a3:49:ed:52:d4:50:75:0c:6e:c3:
ef:04:22:b0:93:f5:b5:de:99:e0:6c:5c:68:6b:a3:
3c:4d:18:02:9f:94:0d:df:dd:0d:03:87:02:5b:db:
68:1d:c9:92:cd:0b:c5:4f:c3:0a:25:61:cf:ca:76:
ff:3c:f5:9f:a1:2d:30:d8:bf:14:29:2e:33:dc:d5:
02:11:01:6d:71:c8:2d:44:d8:d7:08:f7:c0:4b:e7:
6e:29:4d:18:ee:7a:2d:f2:27:04:dd:61:d7:30:9e:
85:a4:28:13:56:51:8b:cd:c9:b1:dd:b9:2f:c2:80:
cc:e1:f7:93:9e:01:bb:77:8a:ea:2a:c9:a7:84:04:
90:2e:f5:2c:9e:0e:fb:d7:5f:dc:7e:90:7d:58:8d:
3e:ea:98:ca:a8:4e:ee:ca:4c:6a:ec:43:37:d8:09:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:1B:84:0C:CF:89:F4:6B:64:7F:71:22:A3:CB:66:6A:9D:73:DC
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:a2:9a:1a:ba:57:c8:50:b7:f7:58:5a:d2:2b:fa:a6:ec:
c8:36:05:94:1b:68:ff:06:9f:0e:74:36:9a:87:5a:39:25:4d:
a7:54:fa:ba:e0:9b:37:f7:8e:76:13:ef:7d:2d:b4:66:41:b3:
23:45:cb:dd:e0:e3:bf:60:e3:1d:1a:b1:f5:9e:69:d7:eb:a4:
14:bb:70:d4:cd:4d:8c:80:30:da:6e:8f:a8:36:9c:d8:5e:c1:
6d:a7:90:04:6c:14:97:3a:84:3e:a3:c1:f1:ce:36:0f:d6:74:
b5:10:5a:7b:61:02:db:d5:f0:f4:a9:a9:5a:8a:90:00:c8:cf:
e5:ab:a4:7c:46:ff:e5:1a:de:68:94:57:a3:a7:7f:ed:7b:a3:
bd:98:2b:15:7b:d4:53:62:f0:eb:b0:48:b1:61:6c:88:ea:0d:
13:34:3e:66:a4:28:1a:f8:ab:2c:3e:75:89:ec:9b:8f:f1:d4:
83:88:e9:d3:59:5e:f8:aa:74:dd:e6:da:c9:8b:67:20:21:63:
3c:9f:be:3f:6d:e7:29:2a:79:c6:a7:6e:c0:68:67:4e:37:37:
e5:9f:15:80:37:46:a9:4c:0c:5d:b6:4e:94:89:f4:9a:9a:fa:
d3:ca:11:db:cc:1a:9c:4d:3d:aa:9f:f8:f1:e9:09:44:33:b2:
19:88:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:36 2025 by rpki-client on console-fra.rpki-client.org