Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: PwqtRDFTji/mEsXm1T3ZlooFSiVsXx06RxdDgHr18XI=
Subject key identifier: 84:12:FC:45:E3:26:2E:C7:DC:FA:77:D1:9A:82:6D:0D:68:CD:84:12
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 0194BABBA1BE0EED2EE7EEE85929F9249E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:46 +0000
Manifest this update: Fri 31 Jan 2025 05:00:46 +0000
Manifest next update: Sat 01 Feb 2025 05:00:46 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: JJ75MLrelxGQ8vMlXskTLI6CkZwiKQEAszWqgeWMPxI=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a1:be:0e:ed:2e:e7:ee:e8:59:29:f9:24:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Jan 31 05:00:46 2025 GMT
Not After : Feb 1 05:00:46 2025 GMT
Subject: CN=8412fc45e3262ec7dcfa77d19a826d0d68cd8412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:8c:99:2d:c8:cf:b5:a9:3e:6b:f7:e3:1e:
7e:28:12:07:5d:33:4b:64:02:30:6c:6e:39:ff:29:
76:27:98:ce:a0:5c:8a:5c:b5:d7:61:6f:62:5d:f7:
04:eb:45:9e:ce:e4:35:b6:e7:19:80:6d:e2:81:69:
e0:70:4f:4c:b2:5b:d5:41:fd:31:28:d4:d8:82:87:
49:4a:e8:5e:d0:54:8d:ad:5f:57:c6:71:63:4a:56:
d2:4c:d3:ea:c5:b3:93:13:04:aa:2b:43:66:2c:d2:
6e:52:26:46:3a:08:75:c1:13:85:2f:b4:10:9b:3f:
60:74:5c:a6:63:2c:58:a6:62:5c:b0:16:dd:12:a2:
49:46:64:e3:e4:9b:1a:3f:19:0d:83:35:b6:b6:f6:
0b:bb:2e:83:23:8b:fc:e4:a7:8b:aa:84:89:78:b9:
68:3f:e1:03:62:99:ab:01:49:02:15:76:4f:1b:32:
cd:14:5c:83:de:e9:ce:2c:2e:7b:25:4f:dc:03:1d:
9a:8c:25:22:54:82:a1:ef:15:5d:59:35:5a:ac:82:
cb:b6:6a:b5:11:2f:00:f9:0a:f9:26:60:81:a0:31:
bf:31:53:29:1d:be:49:2b:f6:b4:b2:a1:17:fb:1f:
70:8c:ce:60:8b:af:b5:2d:b1:22:9d:41:62:52:0d:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:FC:45:E3:26:2E:C7:DC:FA:77:D1:9A:82:6D:0D:68:CD:84:12
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:10:23:74:5a:b2:9f:87:65:0f:22:e4:c0:3e:b8:ec:4e:
8d:28:5a:d1:0e:1e:aa:5a:b7:ff:b9:f7:f5:fa:c9:96:4b:40:
97:d9:60:ad:cd:73:d0:0c:1a:72:1f:51:ff:e7:06:29:d0:6a:
b7:1e:fc:78:36:27:ad:1a:0a:b9:a1:44:72:0a:6c:39:2a:a8:
52:8b:53:82:ce:2e:9e:c6:6b:51:e2:9c:b4:60:ff:32:08:56:
f8:e8:2b:d4:5c:ac:e4:4f:cf:cc:cc:42:78:29:91:d2:b6:2a:
9f:2a:9d:08:d0:70:f8:d3:3b:16:07:0e:f3:5b:b0:93:4e:dc:
9a:20:b3:9b:91:3a:a6:a7:c6:fb:b2:c7:31:97:57:17:18:b8:
c5:e7:ef:ec:93:70:fc:ca:09:d3:17:82:97:94:1c:f3:da:b1:
64:82:f3:ac:ab:d3:7e:68:25:36:60:b5:63:80:33:8e:0e:65:
a5:88:51:0c:90:5f:9d:40:f1:96:67:22:4c:dc:04:81:68:06:
08:1f:97:eb:6c:4e:d7:ba:6a:b0:14:fc:e2:9a:3e:11:9f:e3:
c6:68:13:d1:9d:88:a3:64:12:8a:45:b8:11:cb:e2:05:75:05:
b3:41:27:4a:35:45:8b:f0:ff:06:d1:a1:df:1b:2c:48:a5:1b:
21:50:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:57 2025 by rpki-client on console-fra.rpki-client.org