Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: G2ez9MapRXUfRv7Wi9U32mGcjcPjFaNMn0zbs6Qb6kA=
Subject key identifier: DD:AA:BF:B1:D8:E3:DF:A3:DB:F8:C1:27:20:71:D3:03:74:9B:F6:E3
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 0194BA8490F1984BDA4077A57AE211247982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:37 +0000
Manifest this update: Fri 31 Jan 2025 04:00:37 +0000
Manifest next update: Sat 01 Feb 2025 04:00:37 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: Pm6XFHaJpD9wF/x6x/A0u2GkwcFgNoS0rLxmVWMUQqU=)
2: o_9E0nw7QGxoWCZk4QqgNmZyf9E.roa (hash: 1PmMo5WtlImsrpdUj9rWhTyVCZubOTGK5D/YW7g4Mss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:90:f1:98:4b:da:40:77:a5:7a:e2:11:24:79:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Jan 31 04:00:37 2025 GMT
Not After : Feb 1 04:00:37 2025 GMT
Subject: CN=ddaabfb1d8e3dfa3dbf8c1272071d303749bf6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:b2:ed:5c:2c:93:8f:de:aa:bf:90:0d:f4:
1c:26:59:5f:94:bc:e5:5c:78:d3:76:64:0a:2e:e7:
4b:a0:2d:2a:46:d5:94:8e:ff:15:c9:82:d8:17:28:
19:40:d6:30:0e:a9:ed:d8:e2:41:03:4b:1c:cf:e0:
ac:da:b7:96:be:b5:f4:2b:e6:dc:84:58:a5:7b:ee:
c0:98:b7:54:e4:78:93:f7:5d:1f:ae:84:ea:4c:b0:
28:d4:89:61:64:c8:9c:95:ba:00:56:db:9e:e1:68:
f1:a5:55:7b:75:35:55:7a:65:4d:ff:89:56:2b:51:
c3:54:5c:ad:2f:53:0f:e8:16:84:90:2b:30:86:ed:
2f:3f:fe:ac:9f:0a:94:51:8b:ba:1c:72:76:08:31:
ff:6e:37:83:7a:af:19:0a:c7:e3:57:60:03:2a:1d:
11:ca:cc:23:26:04:68:d5:47:c7:3d:69:4b:0f:c0:
38:02:aa:6f:09:a6:21:d2:32:0f:05:bd:50:09:9c:
29:13:a5:c5:09:d6:9f:12:12:d0:e1:43:a7:ab:4b:
a7:3a:6a:cf:ed:87:f4:fc:8f:cd:cc:83:3c:94:81:
99:25:29:87:9b:4a:23:01:ec:3d:3b:5d:d6:c0:8b:
6b:5d:57:80:e7:ef:e9:71:1b:9d:73:6d:c0:3a:67:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:BF:B1:D8:E3:DF:A3:DB:F8:C1:27:20:71:D3:03:74:9B:F6:E3
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:bc:d1:8c:6b:ce:26:64:e8:52:fb:6f:cb:2e:8e:01:01:e6:
2b:d5:94:91:35:5a:1b:99:63:aa:82:e4:31:c2:1e:e6:a2:56:
8b:58:8a:6b:92:64:5e:e0:bd:0a:e4:d3:08:56:b8:ac:a4:2a:
49:53:c5:75:08:4c:eb:00:e2:e0:f8:e5:ea:87:43:8d:2b:df:
9a:c5:8b:1f:4f:cf:c6:3d:e5:f2:5b:ba:23:4f:e1:3e:3d:d6:
3f:68:26:9c:43:d8:53:9f:9d:7b:52:55:53:f2:9f:29:76:38:
7f:95:9a:9c:2b:4f:44:b6:5d:86:d6:09:09:6c:e9:0d:f9:63:
20:eb:a5:e4:91:fb:7e:73:c6:52:06:92:eb:e3:30:16:3e:a5:
84:c9:48:eb:13:5c:52:69:2d:37:1c:c1:d0:5d:b4:a4:fc:ec:
27:c3:aa:74:33:33:67:19:2b:03:3a:5a:48:28:7d:0e:af:e6:
4c:8d:e7:22:6d:28:34:0a:1f:88:da:9e:89:8e:4f:c5:9d:1a:
3f:8a:be:2d:c7:07:4c:47:88:d5:74:df:8a:4e:e7:e7:29:6a:
0e:18:7a:2a:2f:b2:0a:86:ab:5b:2d:b2:1d:04:d4:79:5e:f9:
d7:44:a5:00:e5:c1:2d:b2:82:da:80:41:5c:46:cc:fd:ce:3d:
67:8d:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:33 2025 by rpki-client on console-fra.rpki-client.org