Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: XjwNTDtVW7rFbifv8TxIL+s/PTBaJdmj9Vy2lNJLpyo=
Subject key identifier: 01:3C:E7:D6:43:81:EF:85:2B:D5:4E:C1:54:15:64:3D:5F:29:CD:C8
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0194BB96FF335691DB6872417C55F0BFE13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 06AA
Signing time: Fri 31 Jan 2025 09:00:22 +0000
Manifest this update: Fri 31 Jan 2025 09:00:22 +0000
Manifest next update: Sat 01 Feb 2025 09:00:22 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: ff1js6VOhbhl/+zATm5lDp7oabZSWhsQSR2X7dmDgVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ff:33:56:91:db:68:72:41:7c:55:f0:bf:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Jan 31 09:00:22 2025 GMT
Not After : Feb 1 09:00:22 2025 GMT
Subject: CN=013ce7d64381ef852bd54ec15415643d5f29cdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:80:8a:e4:f7:8e:16:d0:2d:89:80:77:5a:
b4:37:e4:95:75:3d:5f:5c:c8:a8:97:f1:10:18:6a:
54:6c:50:3e:db:4e:54:4f:de:93:ad:a0:34:6d:e7:
24:02:5a:8c:1d:3c:05:6c:11:99:5e:be:a7:14:d2:
05:11:ad:75:a1:10:7f:4a:22:56:fe:fe:6e:69:2c:
d9:42:d9:51:bc:43:eb:08:d2:c4:7e:18:ff:65:87:
a2:d5:68:b9:c0:73:3b:4d:51:3d:a2:39:04:73:d7:
34:b6:09:04:73:6a:35:44:38:39:92:66:a2:4f:79:
e0:52:9d:ef:7b:32:70:84:39:8c:62:21:84:e5:a6:
14:22:4c:27:38:0e:7b:c6:12:5c:40:a7:21:f9:7f:
bf:48:92:f2:d3:46:40:54:80:d9:ee:b2:c7:cb:c2:
4a:17:b8:48:df:28:d6:97:99:ac:a4:2a:ee:be:4c:
63:33:11:b6:ec:93:12:bc:a9:cb:7b:8b:46:92:ab:
07:7d:de:63:a8:8b:26:dd:56:be:02:8a:65:6f:97:
ce:bf:9e:64:b4:a9:12:71:0d:ad:9b:e2:4c:88:93:
2b:59:59:01:83:ff:fb:00:4d:2d:60:89:b3:2b:b0:
f4:b4:0c:98:90:c3:bb:bc:17:85:17:d3:55:6f:12:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:E7:D6:43:81:EF:85:2B:D5:4E:C1:54:15:64:3D:5F:29:CD:C8
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:53:3f:df:7b:73:70:64:02:07:ae:41:7e:f8:fd:71:71:
02:9e:9e:af:ea:33:02:6d:32:dc:69:35:c4:5b:1b:fd:3d:18:
de:00:28:cd:3b:14:61:5c:d8:7f:f3:50:b5:9a:2c:45:d6:0d:
80:cf:65:ea:85:29:45:21:45:d1:6c:68:b3:2a:79:da:1a:97:
30:14:5c:12:d2:4c:cd:18:e5:54:ce:ba:ca:8b:fe:34:7e:98:
3f:33:49:1b:3c:ee:98:1f:05:a2:c7:4a:d2:e6:f4:28:f0:17:
8f:13:84:ed:3e:46:7c:c0:f7:ad:f0:0b:14:9d:91:28:b6:b5:
08:df:6a:ba:74:06:1a:ff:22:14:41:4b:f0:01:75:ea:68:be:
fb:5f:f7:d2:57:fd:ad:56:90:fb:de:5e:55:91:f5:ee:fd:60:
a5:ca:dd:c1:9b:9f:75:ae:e1:83:5c:ec:48:e4:00:61:8f:36:
df:d1:66:23:d1:d4:63:e9:a3:a0:61:0b:66:82:e9:77:11:b7:
cf:be:de:82:82:3b:4d:b8:d4:d6:b0:e9:97:03:ea:c4:37:f5:
eb:03:ac:d2:0b:7d:9f:8e:d0:0b:70:1b:cf:73:30:da:a7:31:
ed:7a:37:45:c2:7e:86:3c:f1:34:59:77:4a:9e:b6:a7:88:26:
20:9a:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:00 2025 by rpki-client on console-fra.rpki-client.org