Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: 3zVoh4vwPCS1ET5XD6Gq81epOYvq0JXZ4uJYhWZwrSs=
Subject key identifier: 59:FA:85:64:F0:B2:40:D7:F4:2A:21:DB:46:00:6F:6B:F9:47:A1:31
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 0194BB96E9372AC3CF813A73254F9D25D3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: Lp8XWe8rhbwHDmMy3KGWJr0jSDUUAOwn95c7AUU5jNs=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e9:37:2a:c3:cf:81:3a:73:25:4f:9d:25:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=59fa8564f0b240d7f42a21db46006f6bf947a131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:71:01:97:9f:d8:56:5c:7d:e9:97:e4:4b:
b0:c8:e7:85:dd:5e:b1:cd:02:fa:b1:db:34:2b:09:
99:be:13:45:f1:93:dc:27:2c:8b:80:fe:5d:5d:b5:
37:b4:22:72:06:de:25:9d:c3:c9:52:21:0a:f7:bd:
4f:38:3e:19:1a:d9:7d:e8:75:30:d0:93:93:18:76:
0b:a8:2e:5c:6d:00:63:45:31:4f:35:67:d8:07:82:
c7:5a:38:73:46:9b:c5:9e:9d:d7:f7:d9:d9:ac:a9:
98:d7:d4:c3:02:bb:f4:52:20:7b:25:c1:d2:8c:62:
d0:a7:8e:4f:e1:79:b8:09:a8:53:6b:29:9e:d5:55:
36:95:05:fd:e9:f2:89:e1:1e:8a:d1:97:10:5c:c9:
97:35:82:95:33:55:56:53:da:61:28:73:7c:3e:d6:
00:6d:40:ad:e4:59:b1:cd:03:89:9d:b8:ae:24:34:
ec:91:9c:fa:0e:3e:2c:b1:6c:24:00:0c:df:2b:0c:
80:af:73:86:d4:f8:92:73:b2:d8:4d:4f:f2:36:88:
32:9f:09:b7:02:a3:94:0d:9d:e8:bb:84:e4:4b:5f:
60:93:d9:dc:0e:73:0a:f3:31:16:1c:11:3b:a4:6d:
12:ec:35:39:b3:bd:00:6f:8b:85:57:53:bc:5b:b2:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:85:64:F0:B2:40:D7:F4:2A:21:DB:46:00:6F:6B:F9:47:A1:31
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f7:a3:14:e2:4c:9d:a7:c0:75:fa:bc:02:87:9e:9c:44:38:
03:cd:32:ad:8c:f8:da:e9:46:fb:c6:03:04:d2:fc:cb:25:ec:
ba:37:1f:a4:49:84:95:ec:e2:eb:c2:62:7b:5b:73:ee:fd:c5:
2e:b1:eb:16:bf:dc:87:ad:4a:b2:c0:51:09:a6:ea:e5:57:41:
37:b9:30:4c:45:82:63:2d:e3:b0:e7:2b:0c:81:89:be:c7:90:
18:bd:f3:e9:67:39:a6:1b:2b:e3:37:c1:85:85:d3:16:2d:22:
e9:8e:e4:08:d4:8a:18:eb:41:32:15:04:1d:e5:8b:0d:ca:79:
37:ae:8b:5a:56:7d:e9:76:57:4b:8d:3e:45:a7:0e:99:e6:60:
32:d6:bd:1c:87:9c:de:f0:48:b7:40:b5:50:b6:fd:74:85:60:
ed:17:4b:39:8d:ef:5d:24:ea:6e:38:60:e8:d5:35:82:85:80:
0d:fe:92:39:5a:57:e3:c1:f5:88:17:7d:66:27:5c:94:fa:df:
82:13:47:69:72:ca:a8:a4:78:62:4c:af:14:bf:f1:72:7f:f7:
43:76:5f:9a:99:41:a3:9a:84:2b:9d:e8:c0:89:b9:cc:a5:3d:
21:e4:93:bc:65:c9:5f:0b:ca:8c:82:23:10:d2:96:92:2d:38:
c2:07:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:49 2025 by rpki-client on console-fra.rpki-client.org