Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: Lk0ENv/oavD5t6d755g+AqeXojgGIjN7ZNFFXWWyagQ=
Subject key identifier: 55:10:49:F4:4E:A6:D3:95:6C:09:BA:2F:40:38:94:58:7C:6D:76:A1
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 0194BC3C60C459F83546138EB567889C9DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: cN/+fI8NavZSKtbVvZkzpyfipq16CMtBI0M/nXElWV8=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:c4:59:f8:35:46:13:8e:b5:67:88:9c:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=551049f44ea6d3956c09ba2f403894587c6d76a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:fc:17:21:6b:23:f0:eb:5a:86:dd:38:c8:
94:28:6d:b7:b9:8a:d7:ad:e8:11:56:88:33:3c:57:
24:76:94:1d:14:d6:33:0f:50:5c:4a:70:14:ea:0c:
94:1c:8a:e5:ef:72:e5:40:1e:30:50:93:c9:bf:b9:
c5:8b:7d:26:2c:44:c1:93:5b:1b:e8:0a:83:d2:bd:
ad:34:b0:a2:08:b5:a3:60:ec:25:2c:db:03:9a:ec:
09:17:ee:9b:83:94:c9:14:70:e4:fe:d2:cb:55:c9:
c1:04:2c:bb:2b:3d:09:fa:f2:fb:e8:f7:5a:f5:e9:
bd:7b:77:33:4f:1f:18:33:2e:63:70:90:59:6e:ac:
2b:11:9d:98:af:6f:c2:05:bd:c2:85:7d:00:89:6e:
37:bc:83:95:e5:1c:a2:c1:69:e8:11:c7:e7:05:e8:
0c:4a:5e:50:75:b2:e0:e3:1f:9f:2d:28:1f:6a:ba:
55:75:8f:34:9b:b8:b9:12:3a:8f:27:36:31:74:4a:
86:fc:a9:c2:44:56:b9:d6:72:78:28:f7:a6:32:0f:
71:3a:e6:71:13:fa:11:23:60:47:f3:f9:98:77:e9:
a0:3e:ac:73:30:0c:9f:54:c8:96:d1:8c:6b:fc:52:
16:a7:d4:74:61:58:57:81:cf:b0:9f:65:7d:1a:90:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:49:F4:4E:A6:D3:95:6C:09:BA:2F:40:38:94:58:7C:6D:76:A1
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:cd:a3:c5:11:1e:bc:73:a6:a5:b4:98:dc:19:b1:a9:0e:
65:f5:26:83:52:7d:bd:af:04:b7:65:fa:43:43:f6:72:8c:67:
a6:57:96:4d:00:32:e6:4b:24:5d:5b:d2:2d:e0:b8:b0:83:5a:
2c:bc:21:76:a5:35:41:89:ad:3b:20:81:7c:e7:af:6d:1e:50:
b1:c6:aa:cf:26:7d:5c:50:d0:5d:33:d1:39:52:3f:8d:3b:dd:
a0:1d:06:2f:e6:41:fb:c6:4c:44:8e:79:8d:bf:6b:c4:1d:44:
57:1c:b0:b6:38:15:0e:58:62:5b:f2:7a:ce:ca:5d:a3:e1:3a:
65:37:34:84:79:62:1a:9f:90:fd:fa:37:31:f3:93:68:9f:97:
3f:79:48:55:c6:8a:d1:be:8f:5f:52:cc:91:67:d1:4f:13:58:
75:4a:94:31:e9:26:cb:83:5b:f1:ed:7a:d0:ae:bd:aa:b1:b6:
4c:fa:ac:3e:6b:56:f4:74:2e:60:3a:78:63:03:e7:81:63:e2:
61:ec:8e:d4:8a:35:86:3e:d2:c1:fe:7f:7b:64:8b:07:b4:e4:
a9:42:f6:6d:c3:c7:8e:33:c8:7f:07:f3:63:12:57:65:ef:8b:
98:f2:26:d8:ed:5b:b1:0f:07:f7:53:fb:71:97:69:a3:83:3b:
3a:7e:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:36 2025 by rpki-client on console-fra.rpki-client.org