Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
File: plLLMsLIZpbjX5t41fGLNiYUsWg.mft (raw, json)
Hash identifier: 0bDbomBml9chSD+hxVwckRJ4QlTIWm56I/F1be1VqqQ=
Subject key identifier: 98:EB:AB:F3:03:2B:35:06:0C:6C:24:04:89:86:45:FD:86:8E:80:66
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 0194BAF1F8E9B690BEF20B0DD36E0705DCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 06:00:07 +0000
Manifest this update: Fri 31 Jan 2025 06:00:07 +0000
Manifest next update: Sat 01 Feb 2025 06:00:07 +0000
Files and hashes: 1: DfnZMzRfopEnH2bDeBKNDNamggM.roa (hash: S3Q9ApuCGqU2ZYj0uBVCO23UhtK6iRmFAcmb65wISmE=)
2: plLLMsLIZpbjX5t41fGLNiYUsWg.crl (hash: NCat9aEfMqgLkTEj336RP7PO4S/KhCjtwWWHTSGrWdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:f8:e9:b6:90:be:f2:0b:0d:d3:6e:07:05:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: Jan 31 06:00:07 2025 GMT
Not After : Feb 1 06:00:07 2025 GMT
Subject: CN=98ebabf3032b35060c6c2404898645fd868e8066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:dc:04:50:be:1b:e3:6f:99:0c:8b:fe:77:
6d:7e:f5:66:e1:29:fe:d2:34:c0:da:a3:d4:fa:33:
e8:96:95:75:1c:31:8a:2e:0d:87:b9:b4:b3:39:62:
1d:7c:bf:4d:c3:7d:ff:01:1f:d8:ef:4d:60:0b:fd:
1a:7c:0a:8a:55:0a:1a:e8:6e:f7:2f:47:4e:8d:d7:
58:d4:b2:75:5a:f1:29:3c:74:51:c4:62:6a:58:39:
b1:00:50:e5:e6:c6:ba:1f:1a:0d:a1:dd:b1:e1:8e:
02:60:f1:e7:81:99:49:03:9a:0e:4f:e7:5b:61:b1:
62:34:42:71:05:b9:35:1e:16:20:86:93:fb:17:39:
e2:fd:30:2c:fe:f4:31:e4:d5:f7:0c:7c:9c:7b:7f:
00:2e:8d:49:67:83:6f:41:17:4b:2b:7d:55:b7:96:
0a:51:4d:4e:ee:cf:41:c5:0c:0f:f6:7e:38:46:fa:
5e:cb:22:b5:a7:45:38:c0:63:fd:73:82:6c:7e:45:
81:84:1f:3f:31:ec:04:44:d3:9a:26:6b:25:f6:fe:
92:3d:2e:49:69:0a:50:5b:5f:d3:02:8c:3a:a5:c3:
33:9b:90:26:52:11:e6:23:be:07:b6:dd:ea:43:90:
b1:fd:59:7c:33:20:e7:91:0b:ae:fe:2e:a3:a0:25:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:AB:F3:03:2B:35:06:0C:6C:24:04:89:86:45:FD:86:8E:80:66
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:40:b3:f2:63:c2:4b:d2:32:9f:0f:38:18:c2:9a:73:f5:ec:
2e:2a:6d:87:5f:62:96:6b:06:fd:c6:ea:96:13:b4:72:36:c4:
94:0d:78:14:5b:31:e3:b0:9a:68:64:b8:3c:b1:64:09:4a:9b:
2c:a4:d3:c9:6e:12:22:ee:18:9b:83:1b:a1:34:b8:cb:eb:4c:
18:d6:96:ea:99:19:00:27:5a:c6:17:e8:49:2e:b7:35:14:94:
eb:ae:40:9a:0b:18:a0:4f:a9:d4:cd:53:3e:03:26:82:57:4c:
fd:d6:60:18:a7:9e:49:c0:24:66:6b:3c:70:34:c2:81:4c:08:
b7:74:99:54:9a:ce:54:04:88:bb:3b:c7:41:35:6f:ec:82:ad:
4b:60:a2:23:42:d9:83:a8:fb:4d:58:92:91:94:a7:bd:a5:24:
0a:29:e1:bd:80:86:51:37:57:1e:ef:30:fa:db:96:67:d8:06:
94:da:89:2f:3a:c7:c1:fa:48:02:de:ea:8a:49:47:b9:15:de:
c9:ec:05:80:27:a7:8e:3d:fa:0c:0a:21:8f:79:2e:39:f3:a6:
67:89:cc:4b:27:c2:3c:dd:a4:d2:fb:c0:51:b8:57:dc:be:f2:
02:84:fb:78:f4:27:38:5d:df:eb:6f:f4:41:d8:27:a0:e2:7d:
aa:6f:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:13 2025 by rpki-client on console-fra.rpki-client.org