Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: Cp9tnPrYw8xgggvC8OMtqwrVFbDrcwBd6gKw+IiTcE0=
Subject key identifier: D3:7F:DB:2F:DC:49:A8:B9:E3:94:EC:AA:27:B0:04:83:B1:09:F1:B2
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 0194BB96EE94968A57E0821AAAF628DDDF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: AB
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: gq5FEGttv9mDeqmKQtVzCGRoex/ucvy2mcDEw5k9FWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ee:94:96:8a:57:e0:82:1a:aa:f6:28:dd:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=d37fdb2fdc49a8b9e394ecaa27b00483b109f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:3f:97:9e:44:ee:a6:52:28:07:ff:38:fd:
47:18:9d:18:3f:a1:53:e0:3a:4d:22:b6:1b:a0:75:
a3:05:77:97:83:c2:6f:fd:c7:2f:7f:0f:4e:3d:ad:
18:09:44:f4:66:89:58:cd:19:b7:9b:ab:0d:2e:14:
28:db:ab:cb:40:c2:3a:2f:e8:aa:ca:0a:aa:f0:c6:
38:84:a8:3c:82:d2:85:5c:2e:15:5a:0e:8f:9d:8e:
2d:4d:15:31:fe:5e:b5:68:fc:2e:7b:40:3f:1e:2e:
0a:65:c5:38:ae:a6:61:06:bb:4e:e9:df:f8:f7:92:
11:2f:fc:e0:45:63:0a:96:f7:5e:af:f9:b4:67:bf:
59:cb:0d:58:98:d5:4d:0b:b3:43:a2:64:b3:24:91:
36:a9:91:53:10:af:5f:de:a7:d2:12:d3:40:ac:b1:
d7:68:a4:0f:32:49:ad:a7:e0:e7:49:78:33:0f:90:
55:75:6d:28:ca:90:64:5a:76:78:3e:0a:12:2d:e5:
39:6f:a4:aa:7f:27:b6:72:e2:10:3b:ed:db:c5:8c:
98:c8:b7:8b:44:f0:f5:e6:dc:d6:3d:cf:39:3c:ef:
21:fc:5d:cf:dd:18:38:9a:6b:c6:e8:70:4b:34:de:
ce:5c:3c:24:79:71:c7:28:93:4b:3f:1f:52:be:e1:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7F:DB:2F:DC:49:A8:B9:E3:94:EC:AA:27:B0:04:83:B1:09:F1:B2
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6d:0e:ce:53:86:f4:30:8f:e6:61:89:03:7e:8d:3c:9b:ed:
6a:44:0f:42:82:38:5b:20:6d:50:dd:ae:82:f2:15:32:9b:3d:
a7:ad:d0:0b:0b:cf:26:c2:29:62:40:0f:c8:5f:90:74:d9:82:
1e:61:be:06:ca:f0:cb:c7:47:4f:0f:bc:a3:74:cd:b1:0d:8c:
1c:52:4c:9b:1c:97:00:ac:70:e5:7d:68:39:cd:6a:75:35:f4:
a6:3f:8b:be:79:80:cd:aa:b7:40:8c:a3:b4:a7:ba:31:b1:1b:
05:a5:5d:9c:f4:41:6f:08:d1:7d:3f:2c:34:4c:af:7b:16:86:
ec:ff:d2:af:35:82:1c:79:a3:8a:ab:ca:8e:12:ee:33:04:bf:
4e:19:19:4b:df:bd:3e:ce:e2:b0:16:05:dc:fd:ec:27:09:a7:
ce:33:44:56:ad:d0:96:17:02:82:d5:31:85:6b:20:1a:b9:af:
31:2a:ab:15:c7:b7:f4:6b:3a:9b:32:11:f9:ae:f6:8c:41:78:
f8:91:a4:1f:2f:8d:46:48:e4:6c:f2:16:0b:d1:4a:71:9c:6e:
b2:3b:8d:08:41:36:42:d8:78:b5:8b:73:b4:ed:9b:e3:62:e9:
d2:1f:c9:59:62:23:3f:e6:5b:e6:7d:2d:6f:83:cc:93:3f:54:
96:74:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:11 2025 by rpki-client on console-fra.rpki-client.org