Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier: HFQxEezFiCObYb6ER6HDVzIypN0a4pQUwQXDnutNQI4=
Subject key identifier: C3:7D:8B:FD:4A:73:30:AB:58:9F:47:AF:E1:4D:4E:16:23:8C:CC:34
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial: 0194BB2962A5547AFC2FBD403DF0938F1C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:39 +0000
Manifest this update: Fri 31 Jan 2025 07:00:39 +0000
Manifest next update: Sat 01 Feb 2025 07:00:39 +0000
Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: h3KvxRAvssIPdUT8eBPP1Q8JW94cGaHUEi/ClHNVpCA=)
2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:62:a5:54:7a:fc:2f:bd:40:3d:f0:93:8f:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Validity
Not Before: Jan 31 07:00:39 2025 GMT
Not After : Feb 1 07:00:39 2025 GMT
Subject: CN=c37d8bfd4a7330ab589f47afe14d4e16238ccc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:70:49:aa:6e:b3:35:a2:44:e0:33:fd:39:
96:f6:53:38:5b:7b:3e:ec:a5:1a:9e:db:3b:e3:77:
e9:e5:f4:98:ba:fb:8e:9a:9c:a8:16:22:80:cb:04:
de:de:46:4d:93:36:e6:c6:9f:c4:ab:4d:83:d0:f4:
5d:55:da:3f:38:c5:46:a8:92:29:a7:87:c3:c0:ee:
98:5f:b8:25:7c:0e:4b:9f:4c:f8:4f:24:53:ce:3b:
a8:46:20:97:7d:98:79:ce:aa:80:dc:7e:bc:12:d1:
8c:05:d8:db:82:75:2d:ca:18:cd:22:d4:88:22:78:
e4:58:f0:a6:e8:4a:51:28:3a:97:77:e9:98:99:35:
f4:aa:df:9c:67:12:20:1a:a1:e4:1d:b1:f6:84:90:
7e:92:61:04:9b:09:82:e4:9e:14:dc:08:87:fe:52:
8b:40:41:7e:ae:95:76:43:18:04:9e:7b:93:37:5b:
d8:09:9c:3b:35:2c:01:b2:67:f5:90:5e:11:91:7d:
05:f0:72:b3:37:99:e5:58:95:13:35:7c:f8:3f:dd:
85:13:fb:75:96:db:a7:d2:e9:37:b9:ca:d1:e9:2d:
98:45:28:c8:a2:5a:5e:5d:62:15:7a:64:1d:84:13:
f1:6e:53:a2:7a:43:7b:39:e5:05:bc:3a:a5:0a:1f:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:8B:FD:4A:73:30:AB:58:9F:47:AF:E1:4D:4E:16:23:8C:CC:34
X509v3 Authority Key Identifier:
keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:de:3a:ae:e8:fb:b8:39:11:1a:ee:a2:3a:da:3b:ef:9d:
2c:42:bc:58:cb:a5:55:c1:c2:80:26:d5:5b:61:1e:2b:44:c1:
57:35:0d:e9:f2:d0:e2:02:1b:df:d5:42:7b:e0:f6:3b:64:82:
b5:ae:39:68:24:45:ea:51:db:2c:79:40:cf:46:36:74:8b:d5:
71:34:40:6f:15:8f:76:09:0c:e5:f7:56:a4:24:0f:52:ec:b2:
6c:65:d1:34:fa:16:4c:2c:e7:a5:59:d9:c5:49:ec:6c:b6:7e:
32:f0:85:eb:66:65:7e:cd:d7:69:a4:23:27:56:66:7a:e6:d3:
6d:be:22:42:f3:02:78:6c:d8:1d:0e:af:1a:c6:ca:d2:33:cc:
37:ca:1c:bf:31:e7:5c:ef:2c:6d:36:51:bc:67:73:f9:4c:76:
6d:28:be:23:42:cf:fc:1f:a2:6e:76:7a:a5:d5:fa:da:1f:8f:
c7:9e:ff:05:1d:47:7e:e0:91:43:41:aa:9a:70:60:9a:18:dc:
7a:52:62:0f:1c:f9:7e:9a:1a:a7:47:ea:54:d9:8a:fe:56:dd:
de:d4:0f:42:a3:c7:16:d1:32:3e:f3:df:02:5e:b9:10:98:d2:
28:25:a7:42:f9:53:47:e6:c2:fc:37:7a:2b:78:b0:7f:bb:d6:
21:c5:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:59 2025 by rpki-client on console-fra.rpki-client.org