Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
File: o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft (raw, json)
Hash identifier: rjD3dTQPu2WgqIhHIa25l+A4hoTD3uNuZ4D3y21tcLs=
Subject key identifier: 96:64:12:18:6F:FE:A9:CA:F9:FC:0D:E1:9E:7A:64:71:76:DC:D3:4F
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Certificate issuer: /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial: 0194BABBB416AE3DB0F3506BAE4E9EB3AB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
Manifest number: 0A06
Signing time: Fri 31 Jan 2025 05:00:50 +0000
Manifest this update: Fri 31 Jan 2025 05:00:50 +0000
Manifest next update: Sat 01 Feb 2025 05:00:50 +0000
Files and hashes: 1: 1-JVHfdgfgX9obL5uDihzl6u5be0.roa (hash: 5fhgSJOuf6zlLlFO7nClbQrHjOcLY4QSzZjarquKLMI=)
2: o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl (hash: YDlpkKRJYYlILHdG6AqAMIjZIF/pIx4fm15pAt/iFVg=)
3: r3cWbqyb9HgoTXK9cVNeKGx5WVc.roa (hash: yyB4q0s1+lO0MUxRgNhJm9ecE94W+tKbHHcE3lo6URY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b4:16:ae:3d:b0:f3:50:6b:ae:4e:9e:b3:ab:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Validity
Not Before: Jan 31 05:00:50 2025 GMT
Not After : Feb 1 05:00:50 2025 GMT
Subject: CN=966412186ffea9caf9fc0de19e7a647176dcd34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:c4:d2:8c:1a:1f:83:e4:7b:c3:3e:a6:79:
6c:f4:01:a6:f1:c8:d7:65:c9:73:9a:b2:b5:83:0f:
50:1d:5b:97:39:ff:ca:08:b5:28:64:33:ff:b7:ba:
ae:83:5a:54:ab:1a:df:a4:05:4f:bb:ec:bf:79:b2:
cc:c8:d0:e3:55:dc:69:44:43:9f:70:33:13:69:25:
1d:45:1a:be:a8:87:b6:a6:e7:71:64:1c:e3:c5:8d:
c0:7a:7e:61:09:ec:31:c1:40:9c:64:d8:fa:d4:d9:
0f:91:e9:26:62:48:0b:90:40:27:4e:d4:d9:51:c0:
02:c7:be:e1:ee:30:0a:6a:02:8e:67:5b:7f:a6:62:
aa:87:4f:ff:f9:ad:ca:b3:0b:6a:cb:1d:8b:22:8d:
33:11:bd:c1:08:aa:06:2e:bc:d0:8a:e4:ee:3c:93:
45:03:c1:20:a5:41:88:50:28:ad:10:ed:75:78:e1:
a2:31:4d:ef:b5:48:4c:52:08:3a:eb:73:a8:4c:33:
f6:b7:aa:a6:a8:51:c6:e6:0f:49:94:15:31:d7:36:
0c:b5:14:7f:32:89:47:76:fc:d2:bb:d7:09:fc:27:
61:7e:2c:4f:e7:b0:78:eb:5b:83:c1:d4:da:a0:a5:
20:f6:97:5f:5e:6b:4c:59:a7:9d:1f:58:6d:b6:75:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:12:18:6F:FE:A9:CA:F9:FC:0D:E1:9E:7A:64:71:76:DC:D3:4F
X509v3 Authority Key Identifier:
keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:69:ad:48:f7:82:c6:46:f9:fa:2f:99:fd:67:bd:1b:f7:10:
75:53:c0:a7:96:99:71:ca:57:dc:1d:a3:5a:4a:b3:d1:44:76:
ed:ff:c3:a9:e6:3d:f7:43:fa:89:69:fb:3b:77:ab:04:49:9a:
b1:4f:15:b6:9d:ee:ca:7e:cf:b2:42:61:65:1e:a2:08:cd:a4:
9f:22:a2:dd:05:ce:5b:06:c4:db:99:9d:f4:25:71:55:fd:51:
ba:80:fb:a2:9c:4a:aa:22:88:65:80:d8:87:84:b2:d1:26:d2:
ab:33:a3:72:ec:15:72:ea:d9:4d:51:45:75:67:69:eb:b9:e4:
1d:be:2c:2a:f0:4e:fd:d2:70:6b:69:db:99:f3:3e:64:1b:59:
05:f2:e4:39:7d:c4:c4:31:85:b0:f8:69:0c:06:c4:01:d1:71:
4e:73:26:6d:5c:ce:9a:6c:e1:ef:4d:2f:ca:cf:07:49:75:98:
39:db:27:22:36:dc:45:53:9c:1a:21:b6:fa:1c:7f:9d:6a:f3:
cf:a5:92:d0:48:93:be:a1:9b:9d:80:60:c3:73:bc:93:a9:b3:
40:07:17:71:2b:e9:f5:0f:3c:5b:e0:e5:87:90:d5:bb:b1:d3:
b5:b4:18:d8:92:f1:a0:bf:42:fd:80:6d:a0:66:8f:ad:7c:38:
19:45:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:20 2025 by rpki-client on console-fra.rpki-client.org