Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
File: L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft (raw, json)
Hash identifier: Q+Qm0awuSSdAR6iB6ATzo0+t2B5h2f09QvzvnFkteUE=
Subject key identifier: 38:5D:C1:0F:59:42:8A:D2:FC:64:E2:75:A8:C3:71:BC:CF:D1:E8:11
Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Certificate serial: 0194BA84A6E894A30320CC34852F058E2EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
Manifest number: 098E
Signing time: Fri 31 Jan 2025 04:00:43 +0000
Manifest this update: Fri 31 Jan 2025 04:00:43 +0000
Manifest next update: Sat 01 Feb 2025 04:00:43 +0000
Files and hashes: 1: GofoKymii5U39NPDECdDJtD2TH0.roa (hash: ePVDpp/IL/yJ1aEgP104JCCy3cNXznxaF2wO6kp9DYI=)
2: L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl (hash: M/XuctvSbHUK5wVzG+Sb4xZymHJUkvYY45asg8Vd8rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a6:e8:94:a3:03:20:cc:34:85:2f:05:8e:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e
Validity
Not Before: Jan 31 04:00:43 2025 GMT
Not After : Feb 1 04:00:43 2025 GMT
Subject: CN=385dc10f59428ad2fc64e275a8c371bccfd1e811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:fb:0d:1f:f5:3f:ce:25:e9:47:af:ee:6f:
2a:d7:fc:ca:4a:01:60:b5:27:5f:34:89:76:6a:a1:
d3:40:a8:fd:af:80:7a:ef:57:60:dd:3c:dc:95:b8:
3a:73:87:ef:6a:ac:91:3f:48:ac:a7:19:44:8f:d5:
ce:3f:f8:06:dc:ca:f4:c4:fa:9a:8d:83:45:a8:55:
86:31:a7:9f:55:0a:ee:3c:24:e3:71:9b:11:68:86:
5b:87:29:d8:49:0c:bb:28:26:22:64:d6:dc:ff:e6:
75:af:15:5e:df:6a:98:76:9a:fe:0c:d2:bb:bd:53:
60:32:aa:e5:d6:71:9e:cc:a2:e8:5b:91:2f:32:7c:
94:47:17:47:62:6c:cb:d7:7b:06:87:36:0e:72:f4:
5f:82:2c:5a:c3:21:82:14:c8:da:1b:48:a4:d4:c5:
4d:c5:4e:b8:9d:dc:90:c7:a8:b2:7b:21:2a:9e:c7:
20:38:8d:79:b2:88:1b:c5:60:92:55:eb:07:46:ad:
5f:2b:ff:24:78:fd:f1:89:6b:d3:ba:92:e2:aa:2d:
58:20:fe:dc:c8:ad:10:1e:73:2d:dd:bb:58:de:21:
07:b1:4b:77:d0:52:d6:b4:7e:5d:5d:fc:10:1f:1a:
8d:c4:28:ac:0a:94:7f:38:e3:c5:3a:bc:b8:9a:c6:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:C1:0F:59:42:8A:D2:FC:64:E2:75:A8:C3:71:BC:CF:D1:E8:11
X509v3 Authority Key Identifier:
keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:d0:58:ef:6e:12:60:d9:ea:35:a6:4a:48:b7:e4:c3:81:
d7:2b:cd:ad:58:68:7b:37:09:22:57:37:26:4b:be:6e:e2:a8:
c5:5d:69:7b:87:2f:7d:c8:cb:9d:0f:80:5a:f3:41:25:d6:c1:
bd:d1:03:33:af:f1:6f:b6:54:e9:47:f0:38:d9:2a:3f:51:6e:
75:b7:f1:fd:d0:18:64:a8:a9:d5:5c:06:ad:63:c4:53:b2:b3:
f1:af:73:ca:64:7b:3d:6f:d7:25:d6:fa:60:f1:d4:43:4a:6b:
05:55:54:81:14:75:33:cd:64:88:f3:b2:bf:35:b2:7b:29:7d:
c8:aa:a8:66:7d:fe:40:7d:cd:cc:11:66:8a:66:0c:97:94:87:
f9:52:50:16:c0:71:56:07:aa:4f:a9:5c:9b:44:2c:72:b4:75:
0a:a2:7c:81:e3:af:26:e6:95:fa:0a:8f:bb:47:37:dc:a4:64:
ca:57:7f:ca:0f:97:84:d2:0f:13:89:e0:c8:c2:fc:f8:d5:51:
c9:b5:b2:1d:a3:93:81:ab:2e:d1:7e:83:56:64:d4:53:1c:30:
e2:a2:77:22:9a:24:e8:40:12:b5:38:a9:cd:e5:86:6a:59:2d:
59:5a:3d:a6:b1:0d:ea:c7:f0:51:05:a3:2f:90:c2:d9:03:d8:
c7:36:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:06 2025 by rpki-client on console-fra.rpki-client.org