Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: Cax7wQQH0ErbKiU71jTMgGtzzHw0jTiVGiTc055/RWk=
Subject key identifier: 6A:A6:9F:BE:2E:5B:23:94:BB:D2:D4:5C:37:EB:DB:71:8A:58:FD:A7
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0194BB297A37ABEFE70CA5135B0E2F984785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 07:00:45 +0000
Manifest this update: Fri 31 Jan 2025 07:00:45 +0000
Manifest next update: Sat 01 Feb 2025 07:00:45 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: DGyGoe/q5IZALZUFP621a6v5HZ+WyhkpMZt9AzptqYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:7a:37:ab:ef:e7:0c:a5:13:5b:0e:2f:98:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Jan 31 07:00:45 2025 GMT
Not After : Feb 1 07:00:45 2025 GMT
Subject: CN=6aa69fbe2e5b2394bbd2d45c37ebdb718a58fda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:51:fd:fc:7a:de:63:99:48:f3:3e:13:77:
56:47:2a:bd:fc:73:c3:2d:72:c2:15:a9:d4:f9:09:
b5:30:f2:0a:c3:e5:a7:8a:f4:e9:89:66:c5:b4:0f:
fb:2f:e7:5f:63:f2:51:47:d9:35:ae:ed:ca:a1:b5:
5b:85:81:f8:bf:40:4c:48:0a:a8:70:e0:42:c1:90:
51:69:1e:2e:74:4f:d2:a4:33:ff:21:ce:00:75:60:
fd:c5:d2:82:da:ce:b7:dc:91:17:6c:4a:c3:27:f4:
c6:be:4f:ad:f3:bc:2d:35:bb:b2:a3:1c:91:03:fd:
86:a0:85:8e:40:68:e1:a0:9a:be:d4:2c:ac:98:81:
f7:ea:8f:7d:3d:10:8e:00:f6:66:86:b2:59:a9:71:
45:01:27:b3:17:d5:10:55:f1:e2:38:98:47:b0:9c:
63:c9:27:7a:a9:6a:19:ad:b2:7c:b4:e1:97:58:98:
b9:8e:dc:86:32:be:df:81:81:fb:3d:72:20:b6:1c:
36:62:77:45:a6:ed:fe:2b:13:83:35:a1:06:ab:fe:
90:f5:6a:30:04:63:50:83:d7:52:da:8c:40:42:e4:
b2:dc:ec:dc:f8:5e:ac:f1:44:18:a0:5f:4a:de:7a:
ba:8f:a6:68:da:61:b2:3e:3e:d8:a6:f9:ef:de:22:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A6:9F:BE:2E:5B:23:94:BB:D2:D4:5C:37:EB:DB:71:8A:58:FD:A7
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:12:58:eb:31:2f:11:06:85:2a:4d:b4:12:17:c9:a2:09:
62:3c:a7:d7:8d:fa:8b:e2:2b:eb:22:c3:82:7e:40:05:78:a5:
74:80:0d:2e:a4:1d:d3:61:8e:15:e5:67:88:29:71:a9:83:a8:
e3:a8:b9:a4:0c:1d:ec:b6:0b:c1:f7:6e:02:c9:6a:11:73:5a:
89:13:1f:6e:43:a5:1b:b2:f2:7b:6b:5a:7f:85:f7:b4:b4:4c:
bf:66:8a:b4:c8:21:d8:6e:a5:ca:d4:74:00:23:57:e0:0a:c1:
df:24:77:c4:f0:aa:b2:58:3e:48:4b:0a:f9:1f:b4:9f:07:e8:
91:05:32:da:e2:1e:82:25:2e:9a:91:dd:b0:71:c2:61:83:0f:
b5:7c:42:44:b4:a4:f2:e9:57:33:3b:51:9b:b2:2c:1f:bd:9c:
b7:44:17:0e:02:81:5e:3c:9a:e8:92:1e:26:76:12:b4:7f:3c:
39:37:dc:07:e6:49:d9:87:c2:f5:dd:86:44:3c:6c:01:43:30:
82:fd:11:5e:f4:0b:a0:ce:42:fb:0f:ce:97:90:13:1b:34:7c:
ea:e4:4b:41:08:24:56:2d:72:d1:a8:17:a8:6f:38:69:fb:2f:
9f:60:5a:c6:48:84:16:90:91:a6:b4:be:0e:78:21:a5:56:9f:
f8:69:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:57 2025 by rpki-client on console-fra.rpki-client.org