Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: 52dBTzeHDagmbmUfp3PvxHpUm+gebDoZo2ySXHAeGS4=
Subject key identifier: 78:EE:F7:78:CA:B0:18:2E:47:37:60:A3:85:9D:55:F3:57:F1:A2:29
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0194BB2958FCCE4D4B7DCA4726AC08659DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 07:00:36 +0000
Manifest this update: Fri 31 Jan 2025 07:00:36 +0000
Manifest next update: Sat 01 Feb 2025 07:00:36 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: 69v2V1i1XvtRana2NiVbLxQwvh1SqBn7PfQ6atIywvQ=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:58:fc:ce:4d:4b:7d:ca:47:26:ac:08:65:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jan 31 07:00:36 2025 GMT
Not After : Feb 1 07:00:36 2025 GMT
Subject: CN=78eef778cab0182e473760a3859d55f357f1a229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:16:96:ee:a9:b5:a4:99:62:b0:63:c5:57:
98:49:4c:05:2a:81:8b:fd:e9:19:2a:5a:55:b5:48:
e3:a7:b0:16:02:d9:36:67:57:cb:c5:8c:4f:9f:a9:
b4:e2:49:50:d8:07:48:b9:8e:e6:48:d1:4b:05:42:
4f:6b:4d:c3:d4:f9:01:81:5f:81:17:0d:67:f7:96:
e4:24:7c:20:98:af:3c:12:9e:ea:0a:37:82:de:98:
48:15:62:ce:9a:e0:d7:57:3c:46:33:d6:44:27:33:
36:59:97:63:20:b7:23:ca:21:c4:3e:d9:81:1e:ed:
71:e5:fd:43:3f:45:c7:a3:8c:9e:d7:60:61:8b:9a:
20:2e:fb:e1:79:dc:4f:05:39:fa:78:3a:9d:e4:a4:
6d:fa:25:fd:29:32:8e:37:c4:fc:73:f5:f2:d0:8c:
e4:1b:af:75:85:f5:b8:1b:69:01:3e:05:8a:25:da:
cf:19:29:b1:a7:fb:46:b8:2c:22:cb:d9:17:0d:96:
b1:0a:43:53:69:d2:b9:f2:7a:fb:1c:79:c1:e8:11:
36:b6:ed:3e:c5:ea:70:39:8a:32:ad:05:38:4a:f2:
bf:0a:77:ff:d6:cb:b9:68:8d:5c:99:80:c2:fb:d1:
33:a9:49:94:c6:2b:a9:a3:ea:c2:9b:4d:c3:83:6e:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:F7:78:CA:B0:18:2E:47:37:60:A3:85:9D:55:F3:57:F1:A2:29
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:88:b6:5f:a1:c4:58:00:ad:bb:0c:b4:f4:51:b3:af:9e:7c:
42:09:c1:bb:49:8b:90:73:bf:2f:e2:75:e5:41:bc:d1:c8:fa:
43:82:9e:8b:17:4f:e4:6d:99:3f:ab:6a:15:58:6c:8b:93:87:
21:07:2c:ef:b4:61:16:1a:b9:24:3f:e3:fc:b9:ea:68:b1:54:
de:15:23:12:a9:87:06:99:83:aa:f3:ef:8a:b9:b2:8a:b1:b7:
b2:93:37:a9:f0:3b:a3:1c:a7:00:63:2b:62:32:54:e7:33:83:
c9:28:04:48:ad:56:e2:a4:d5:4c:3c:8c:4b:7f:00:8c:71:73:
a9:75:97:6f:e0:60:42:16:af:4a:37:f6:a7:c5:e3:16:50:27:
ca:bf:4f:23:c9:19:84:ee:90:ff:64:f2:8a:1b:76:ab:d7:75:
e1:2f:56:e9:9c:08:20:9c:b2:2c:9a:60:01:cf:8a:0d:23:3c:
c3:be:16:96:38:66:01:25:0d:8e:c6:65:11:f9:db:0f:73:50:
dc:c3:28:16:74:6f:fe:ef:46:b3:55:b0:ae:a7:aa:a1:d1:26:
e7:59:19:6a:45:23:e2:a1:13:e1:ca:f8:8d:25:ec:46:37:12:
95:28:dd:a6:35:c2:8b:19:30:f5:33:32:82:4c:4c:b0:c5:1f:
42:68:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:38 2025 by rpki-client on console-fra.rpki-client.org