Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: 7KrprNPC19MBt99FcezJ1prkS056pWFmBnViSCHOCrs=
Subject key identifier: 0A:39:E5:D3:E6:5B:C5:4E:8B:AF:D9:D0:30:81:98:C2:5A:BD:3F:41
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 0194BA845E97C5C6CE7434022BA99DD49880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0A47
Signing time: Fri 31 Jan 2025 04:00:24 +0000
Manifest this update: Fri 31 Jan 2025 04:00:24 +0000
Manifest next update: Sat 01 Feb 2025 04:00:24 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: D6hK0JHc55eKFm+ZZk4WY+mqIbvsbsK6oZD5NjusT7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5e:97:c5:c6:ce:74:34:02:2b:a9:9d:d4:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Jan 31 04:00:24 2025 GMT
Not After : Feb 1 04:00:24 2025 GMT
Subject: CN=0a39e5d3e65bc54e8bafd9d0308198c25abd3f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:81:39:19:d6:58:4f:db:c0:1e:8f:a4:5d:
03:da:6a:a8:3e:19:bd:2f:86:10:e0:bb:a9:66:44:
86:a4:26:ce:42:3b:bc:de:1b:c0:1e:93:90:08:d5:
a4:9d:9f:5b:78:95:d1:d4:d3:b4:00:68:c5:20:47:
27:f9:45:1c:42:d6:2b:8b:17:29:af:6b:8e:27:7a:
64:be:07:8b:1d:f6:2f:f7:e5:a2:b1:6d:95:b8:76:
e7:bc:f5:5e:5c:ce:ae:a2:a0:8f:8b:3e:7b:d0:7f:
7f:4d:ed:60:0a:40:76:05:81:db:79:12:8a:65:ac:
50:94:0c:83:a2:f7:4e:0c:13:5a:2b:f7:8d:86:bb:
fb:78:b2:f4:42:af:1e:d6:40:51:59:61:3d:6c:dd:
05:46:3c:67:5c:7b:4a:6f:e9:10:83:a4:43:08:b0:
c8:81:a1:7f:d4:6e:a9:eb:bc:da:a2:cf:c7:03:db:
3b:00:1e:8f:50:3e:8a:78:db:6f:aa:bb:76:cb:8c:
b5:4f:4e:ef:93:13:41:73:9d:18:27:fc:26:b9:9e:
b6:21:28:07:c7:d3:a0:d2:33:c6:68:c2:60:65:2d:
2e:43:a1:0f:52:bc:a4:d5:b4:32:48:96:ba:a5:76:
93:b3:57:c6:97:5d:e3:8d:d7:c5:b8:a8:f2:48:56:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:E5:D3:E6:5B:C5:4E:8B:AF:D9:D0:30:81:98:C2:5A:BD:3F:41
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:22:ab:17:e9:8e:14:7e:a1:6c:7e:f4:8f:74:73:3d:43:84:
86:44:ce:79:c5:5d:49:16:c4:24:b3:71:a4:aa:7d:46:b7:49:
81:df:9a:4c:53:cc:3f:7d:4a:94:72:33:88:30:12:2b:f2:1e:
69:61:3b:df:a1:cc:1b:df:62:81:ea:a7:b6:2e:32:b9:47:65:
fb:f7:de:67:ba:bb:82:85:9b:f3:37:9b:02:87:80:46:d9:6b:
d9:07:c7:16:95:41:1b:d3:8e:39:75:0a:74:4a:15:33:19:38:
e3:3e:58:ed:f0:9a:92:e6:9a:3d:d2:2a:5d:c2:e8:41:a5:82:
64:69:1b:80:6d:6c:6c:dc:29:86:3c:e4:a8:f1:2a:87:e0:55:
6e:06:a0:ce:a9:d5:e3:df:80:d5:27:5f:5a:90:1c:d9:5d:5d:
aa:a2:64:f0:6f:b5:d0:35:75:cf:75:33:eb:13:6b:82:a7:4e:
bc:11:24:ee:73:47:94:2e:ee:51:22:5d:ab:de:00:f0:e6:c5:
fa:4a:8c:83:6c:64:ef:c1:5d:76:e5:73:86:c5:9e:e6:2f:b4:
60:eb:e3:32:42:1e:77:b8:4f:ea:1d:a2:bc:2d:b1:dc:e6:43:
0f:bc:33:97:1d:a4:d8:2d:11:08:6d:d0:20:d1:e5:6e:2b:f3:
d1:fa:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:54 2025 by rpki-client on console-fra.rpki-client.org