Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: 5YEY+ABPvLtpJSTt2jO23xzs2tUiG4g1xtpo2yYgHek=
Subject key identifier: AF:66:44:C0:D0:9E:98:81:17:E8:3A:22:26:72:D9:D8:44:99:F9:00
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0194BB60389F01328F8DD9FA4FB902C40FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: C/JMTFDQ6VPpOlKeeXfYeIcMMyyKR62maNTFK/r+nKI=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:38:9f:01:32:8f:8d:d9:fa:4f:b9:02:c4:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=af6644c0d09e988117e83a222672d9d84499f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:28:f3:84:07:b6:04:66:ef:34:40:f0:16:
1c:ff:59:db:58:e2:c0:6e:42:f0:a0:54:aa:e3:c7:
6e:98:ef:2b:9e:ff:ab:c2:b2:c1:c1:ae:b9:cc:57:
9b:9e:02:1a:94:74:06:34:a4:c9:c6:c8:96:da:1b:
d9:49:fa:ec:98:7f:7c:c5:68:21:59:4a:75:7e:39:
c8:b9:fc:0d:28:9f:cf:cd:2c:7c:be:2d:2d:8b:17:
e2:01:30:07:e9:52:9c:38:b6:f5:70:5e:96:41:70:
b2:02:ac:c7:ea:65:d9:a1:0b:b1:5f:fd:35:e4:ec:
1b:35:0b:5f:61:3e:0f:33:8b:5d:4e:5e:32:fc:17:
53:57:06:49:63:62:1d:29:42:b4:8e:fc:82:7d:7a:
61:07:25:f6:ed:1f:42:bf:68:5e:3f:0f:68:ef:9e:
66:9d:d8:05:cc:48:73:b0:95:31:dc:c2:88:bb:1e:
1e:98:57:8a:8e:72:94:38:e9:b4:54:44:4f:ea:e6:
51:80:d1:dc:33:65:7e:af:7c:f0:f1:1e:9a:d9:35:
dd:ac:ec:46:ee:69:77:48:c1:5b:9f:9b:49:82:b2:
b2:f7:10:86:7a:cb:17:32:c2:03:1a:8f:7b:0c:db:
37:05:40:5b:45:41:0f:c3:56:92:3f:fc:5a:8e:44:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:44:C0:D0:9E:98:81:17:E8:3A:22:26:72:D9:D8:44:99:F9:00
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:05:60:d8:bb:eb:e7:d0:b6:f8:87:32:36:42:06:8a:c3:
f0:39:9f:69:31:e6:cd:d0:07:28:2c:6c:35:65:c2:11:e4:35:
2e:57:b5:9b:b0:0a:30:64:e0:ed:c1:43:8d:5c:9b:d6:76:97:
cf:18:0c:83:08:a0:80:68:68:36:81:ce:cb:27:04:4b:89:8b:
bc:44:19:7e:1c:53:85:6f:3a:10:33:ee:34:40:ad:53:36:41:
ac:3d:74:60:91:ee:46:f6:f1:ac:d0:98:2e:4b:91:ff:bf:af:
59:07:3d:d3:79:ed:7f:c2:21:3d:f4:0b:08:82:2f:04:d2:78:
f0:14:81:e6:91:27:66:77:30:7c:6b:80:94:b5:06:0a:0e:34:
94:e3:e9:4e:06:07:05:06:f0:f6:49:93:c0:0b:51:bf:f0:99:
89:20:53:86:c4:f0:5f:95:e5:c6:6a:3b:8e:55:38:ae:eb:eb:
30:4a:a6:d5:bc:ad:5b:9f:7f:6f:b5:08:55:ed:05:8f:bf:e9:
d9:51:94:d7:e5:55:a1:24:65:05:3b:6d:f8:8d:99:9e:e9:fd:
d7:65:57:77:3e:33:2d:23:65:15:a3:b7:26:78:fb:d9:78:bd:
ee:4c:04:bb:4b:2c:94:05:e6:bb:50:5b:66:97:cc:d1:c9:b2:
d4:f3:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:43 2025 by rpki-client on console-fra.rpki-client.org