Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: bIEJDUsurKDzZj0Vh+Ju4hP2sB+QTaQQZD6ZjEDVp8k=
Subject key identifier: 4D:AF:58:4C:79:CC:61:67:51:E3:DB:3C:58:A9:BF:AC:5A:3B:58:C4
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0194BABB9D50B8015AE5A8B80B23AF5509FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 093C
Signing time: Fri 31 Jan 2025 05:00:45 +0000
Manifest this update: Fri 31 Jan 2025 05:00:45 +0000
Manifest next update: Sat 01 Feb 2025 05:00:45 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: zMea/aWzpR4Gic0d/13Ut3DX/0hL8wU7E6MjxPn7P6g=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:9d:50:b8:01:5a:e5:a8:b8:0b:23:af:55:09:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jan 31 05:00:45 2025 GMT
Not After : Feb 1 05:00:45 2025 GMT
Subject: CN=4daf584c79cc616751e3db3c58a9bfac5a3b58c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:d7:83:2f:de:1b:bd:dd:00:ad:89:15:5d:
f9:c8:e4:44:d9:66:4f:cf:ee:b2:91:ca:f9:e9:b7:
83:e6:16:71:f2:ab:d7:f9:3f:6b:a5:1e:24:dc:c6:
68:bb:42:e5:a8:12:d2:83:53:d1:b0:17:12:1a:fc:
9a:2b:87:01:d6:d5:c5:d8:51:eb:4b:9a:b1:f1:b7:
15:60:6d:ec:26:4f:75:98:2e:f1:68:d0:9a:93:b7:
72:f4:fa:c1:fe:fa:2e:6d:bc:b0:d4:09:b0:eb:cb:
b7:1a:0c:34:73:1d:da:6b:d7:91:d9:66:f2:c1:b0:
26:1e:c7:b1:04:3a:7a:37:ca:c7:9d:e5:3b:c4:1c:
3c:67:bd:ce:01:cc:87:21:37:7c:b3:f7:0e:65:98:
6a:fb:2c:96:ba:d0:55:f1:15:9b:5a:17:0a:b4:fe:
ff:52:ec:d3:1c:b2:af:64:c8:ec:d7:91:d3:93:06:
b1:1f:64:cb:2c:18:52:e7:8d:44:1c:54:0b:36:b6:
ad:a0:f1:48:05:5f:0f:9c:48:da:60:d4:82:e2:af:
f4:1b:8e:c1:05:f7:2f:2b:12:b7:29:b5:4e:aa:bb:
af:76:a5:1b:00:fb:dd:d3:34:77:5a:62:1f:47:61:
a8:fa:5c:6e:76:30:0b:c9:68:0e:0d:be:8b:4d:b1:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:58:4C:79:CC:61:67:51:E3:DB:3C:58:A9:BF:AC:5A:3B:58:C4
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:3a:8b:71:f7:d5:1d:35:53:54:aa:db:27:0d:73:59:e6:
97:ca:09:c3:37:c7:a5:be:2b:d3:5a:cc:21:b4:e4:e6:9e:0d:
b6:6e:d5:a0:ee:71:51:84:7e:92:88:ab:57:0a:6c:bf:d2:54:
33:96:e3:97:2c:f7:ed:80:6b:93:df:c8:77:22:71:6b:c5:89:
de:a1:72:f5:4a:97:94:9a:43:e6:63:1a:2e:59:f8:6b:48:78:
be:09:c0:80:4d:4b:42:38:da:77:52:a1:01:9f:1e:4e:45:99:
80:b4:f1:fa:06:7d:60:b3:85:b4:5b:45:fd:bd:dc:2d:c8:ae:
46:cb:5e:37:3b:f0:85:98:d9:3a:e9:a7:35:47:c7:05:82:23:
2c:bc:fa:57:64:f9:21:99:66:59:83:3e:57:cd:09:07:f4:2a:
33:98:f0:52:a7:c8:ab:99:29:01:79:e4:cc:87:11:38:04:9f:
d8:c6:aa:58:fd:77:cd:74:74:0f:77:c3:eb:3e:b7:27:02:60:
c2:58:22:ad:c2:bf:71:b8:80:d2:b4:5b:2f:92:5d:31:0c:90:
d2:96:88:06:5a:94:1d:82:f9:8f:37:ad:18:49:be:a0:fc:a9:
0d:3d:4e:6c:f3:a2:07:9e:96:a6:01:6b:f5:16:f2:da:11:4c:
8f:1f:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:47 2025 by rpki-client on console-fra.rpki-client.org