Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: 1BRBfbRyA1gItrMbKj0xGHlNd+Q/QoHc1K+S6RupKcE=
Subject key identifier: 56:C9:74:84:4B:6B:C4:22:AF:3E:51:3A:D0:56:FB:A5:71:C5:88:43
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 0194BB9745FEE5E02CD64DFF8E831041CC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: Nau4SWysFSMi4poOj09chipJkEpxBb4YxharSqgzZSI=)
2: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (hash: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:45:fe:e5:e0:2c:d6:4d:ff:8e:83:10:41:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=56c974844b6bc422af3e513ad056fba571c58843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:00:36:1c:5c:d7:71:86:9d:9d:bd:5b:83:
d9:46:1d:75:af:47:b3:25:dc:c6:e8:bf:ce:33:1b:
aa:a6:2d:11:34:c8:ea:06:f7:e5:cb:f7:bc:27:92:
b5:8c:a1:7d:09:41:63:1f:4a:ca:4f:32:0d:27:6f:
01:ba:3d:4f:f8:1a:38:02:6b:14:0e:22:08:04:b3:
45:5b:cb:e4:41:dc:56:c6:87:97:97:6f:88:e6:96:
88:b7:c2:3b:2d:24:01:18:2b:a0:0d:ef:7e:8d:e5:
54:82:31:da:9c:04:f4:b1:e4:79:d6:e6:e1:fa:f2:
cb:90:92:5a:2f:02:62:42:0a:d7:f2:a7:ec:fc:2f:
91:6b:b3:b9:4b:6f:bb:9c:a2:82:ce:e7:c1:7b:da:
fb:6f:58:5b:79:c0:d0:91:d5:c0:75:a5:62:2a:9a:
10:c2:13:56:1e:3e:83:48:c1:08:1e:ed:37:3e:f3:
5b:4f:54:da:23:65:35:85:8a:8a:1c:e5:26:cf:86:
f7:af:8d:7f:44:6e:7d:6f:10:0a:2f:0a:14:0e:4d:
a4:9e:8b:b1:6c:84:7e:22:f0:f4:77:eb:5f:50:b4:
7c:db:c0:de:bf:fa:47:4a:65:e5:85:d0:3d:fd:20:
c7:f1:0f:33:e1:11:77:25:3c:1b:cc:82:89:51:75:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:74:84:4B:6B:C4:22:AF:3E:51:3A:D0:56:FB:A5:71:C5:88:43
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:a0:f8:e9:3b:b9:70:1d:fc:ee:c6:b0:ca:71:2a:6a:cf:
61:d9:2d:3d:8c:c1:22:42:f5:4f:64:0e:8c:fc:44:5d:be:d2:
63:0e:38:06:52:5f:90:4d:eb:ab:53:07:4d:c8:21:11:f6:e8:
1c:46:9e:88:ab:9e:5e:62:84:47:47:cc:e2:95:15:93:44:b7:
bc:4f:99:ab:04:b8:cb:ea:1a:d3:f6:56:15:42:f8:bd:fd:96:
e9:0a:74:a7:a7:6a:9c:b4:27:2a:3c:d0:6b:5c:90:48:a3:cf:
a4:d5:ac:0f:6b:3a:60:f4:7a:9d:ac:a7:64:2b:dc:c6:42:cc:
22:26:ba:f4:29:26:4a:1a:30:46:a1:89:75:a5:00:0b:c7:62:
58:91:9d:90:3a:49:70:d3:0f:15:26:90:f6:35:72:e8:e2:69:
41:0c:e3:dd:eb:91:59:b6:6a:9d:be:36:0c:01:ee:03:c7:a8:
ca:b8:43:0b:b5:98:dd:51:5c:41:62:6a:73:59:3b:22:92:a8:
67:18:25:60:3b:9e:c7:84:03:f0:0f:ff:f9:c0:f9:19:25:c9:
ad:8d:15:40:7f:22:ca:68:60:b9:e6:3c:e5:1c:74:10:a5:03:
ef:09:b5:98:c7:1e:5b:1f:e6:b5:44:bc:aa:73:b6:cc:cd:55:
fe:a4:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:00 2025 by rpki-client on console-fra.rpki-client.org