Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File: n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier: JhC/9PPaeYmMKaV+NBp6rlcfzt808LidUPOANGETMHc=
Subject key identifier: 99:EF:26:74:97:9F:5D:D9:78:14:08:22:65:B2:B6:53:0B:AE:12:E5
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 0194BB971170B2AEDFC640E4F871D7DBCB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number: 092B
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: fUYc7CAeCAju30FKSbwfSyEFsFEEm08pHmmIX8BnBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:11:70:b2:ae:df:c6:40:e4:f8:71:d7:db:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=99ef2674979f5dd97814082265b2b6530bae12e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:c4:fa:c7:6c:47:7a:da:40:59:41:6d:fe:
5f:d3:01:c8:49:26:c6:b9:1f:fb:f3:43:c6:35:5c:
33:bb:36:62:03:18:7b:93:2c:a4:a6:dc:31:63:e3:
73:8a:1e:d8:fa:90:7e:f0:61:5d:ed:8e:da:93:04:
65:49:cd:5d:aa:7d:66:16:f5:cd:0a:26:59:c1:ba:
ba:f4:36:75:64:42:1c:e1:89:24:a9:e3:dd:36:98:
02:8e:2e:df:e2:13:86:e3:61:3b:fc:58:30:2d:5f:
d3:48:d8:45:2f:61:af:36:f9:ac:68:68:3d:d5:03:
04:2a:b9:86:2e:93:b6:9d:17:2e:76:80:fb:fb:49:
1f:1e:35:52:80:91:b9:cd:0c:af:14:b9:e5:ed:50:
0d:4c:96:be:5a:57:03:9a:2a:44:7c:79:46:cb:8d:
9c:90:ba:c7:0c:37:4e:a1:36:db:a6:6e:48:96:60:
ea:1f:d9:d3:79:41:3c:e3:42:1e:a8:3f:db:08:f7:
f7:d4:0e:4c:e7:f8:3e:de:91:b7:1c:de:53:c4:3f:
bd:6c:b1:65:6c:ce:73:97:d5:b7:0d:7f:f3:41:9a:
c3:4d:5b:7e:4f:13:2e:69:b4:7e:64:d8:4d:da:e6:
76:f7:75:d8:dc:75:dc:61:95:b8:cf:4c:59:96:a1:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:26:74:97:9F:5D:D9:78:14:08:22:65:B2:B6:53:0B:AE:12:E5
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:2c:89:33:df:e8:6d:88:06:24:b0:a1:b4:6a:a0:26:ac:
9c:20:29:96:6d:03:03:4e:0c:a0:cc:49:0c:35:d3:42:2b:e5:
9d:65:f1:79:e2:31:6e:b1:19:d8:0b:b4:bb:16:d3:54:39:b9:
5f:02:76:03:bb:f8:4c:ea:65:ed:a7:c5:77:3b:a1:3f:d3:15:
9c:c4:6d:bf:0f:c4:1b:56:25:86:b5:6b:ca:2e:d1:14:82:c8:
ab:8d:6e:08:1c:ad:bd:be:74:3c:dc:4e:02:f9:af:a7:1a:91:
48:33:23:22:72:40:d9:e1:da:85:f6:ed:1e:b8:b1:fc:b6:45:
6d:b6:c2:3e:35:84:f8:f0:84:31:4c:af:1e:24:43:2b:5d:e1:
bd:45:a0:81:35:51:0e:40:ea:54:73:69:94:c1:46:0a:02:1f:
fd:82:22:98:a5:af:2f:69:1c:77:52:49:fa:1d:e3:a3:20:43:
35:62:7e:48:be:63:91:f2:ee:6f:7b:e8:26:59:c5:15:83:b5:
13:98:91:bd:cd:84:3d:92:94:f4:36:27:7a:ce:d3:e8:e5:5f:
89:43:78:4a:1a:bd:76:09:0b:0e:d0:c2:5a:37:4b:77:cd:48:
a9:56:51:cf:76:a3:a9:e7:b6:43:f9:1a:83:1c:eb:8b:9b:af:
a2:8c:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:29 2025 by rpki-client on console-fra.rpki-client.org