Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: b0RTz/ZLWkrRVu/R5yLPPD0/878IR4PtO5l+NQxjbWw=
Subject key identifier: 86:20:C8:38:55:D9:10:A6:9A:97:BB:27:A7:BA:E6:E4:B5:D8:4D:C5
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 0194BB293E0311ABE8D8079E7F31EE63F58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: MRw9/0rDYBxfX2T612smepMkboUe8PYGyzd0oI6zbOc=)
2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3e:03:11:ab:e8:d8:07:9e:7f:31:ee:63:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=8620c83855d910a69a97bb27a7bae6e4b5d84dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:6f:37:44:20:9e:6f:ec:fe:d6:63:91:2a:
67:ed:4d:04:94:dc:cc:7a:70:82:b2:a6:cf:53:ed:
56:cb:9a:16:db:5c:c1:0a:ba:be:c9:64:a3:fe:85:
d5:4d:3e:b1:b0:c0:5c:b2:a0:65:e7:ca:04:5e:33:
ba:94:b4:23:d5:7a:25:6b:1d:83:21:84:6a:fc:0c:
8d:06:99:91:9a:eb:a5:0b:df:ff:c4:1e:ac:53:9e:
5b:97:7c:27:72:52:59:17:6a:29:7b:4a:96:25:6a:
5a:dd:76:c9:a1:fa:be:9b:60:ed:76:1b:e8:bc:82:
3a:6f:b0:88:86:d9:0a:b7:c1:d0:04:a6:05:97:27:
68:0c:7f:8f:6e:25:6e:24:2a:92:81:f2:b2:19:b0:
79:1a:1b:a6:2d:13:46:92:fd:bc:ee:74:b0:f7:4c:
d8:c6:a1:40:03:0d:89:f8:22:bc:cb:5e:ae:87:81:
a7:44:d2:03:5e:65:d4:73:2d:dc:ab:1c:72:28:19:
2b:22:d5:f2:77:0f:05:d5:be:7c:6c:54:c2:17:fe:
38:b7:bb:b5:17:77:d1:b1:c0:ee:84:8b:de:1a:28:
3c:59:d4:77:b1:11:01:40:88:f3:dc:e5:28:17:f4:
ae:c8:35:4e:a0:f2:67:6d:13:35:54:fa:43:a1:63:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:C8:38:55:D9:10:A6:9A:97:BB:27:A7:BA:E6:E4:B5:D8:4D:C5
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:c5:c5:67:1b:73:1f:49:60:f4:85:07:d6:d2:1c:fb:77:
07:2f:fa:cc:c7:f7:4c:17:74:0d:66:34:2b:1b:f2:f1:ac:9f:
2f:51:36:28:61:e9:51:0f:e6:b6:5a:cd:f6:1e:b5:b6:da:99:
2d:ad:f4:76:c0:de:53:9a:6f:6d:b5:9b:18:3d:f1:ea:43:b8:
65:a6:ed:8b:c0:13:5f:32:54:1a:c5:50:84:d0:e7:34:83:97:
88:51:66:f1:bd:fb:03:83:ca:58:eb:a4:cf:9d:58:48:7d:ce:
7a:33:fe:ef:61:57:ec:6a:aa:73:ab:2f:8a:74:71:2a:12:96:
be:3d:25:05:86:70:42:bd:13:a5:40:a6:1f:33:ef:5d:28:6d:
bb:f1:ee:68:ab:5e:2b:ee:af:72:a5:f4:9f:6f:56:bc:8f:ae:
13:e6:e4:0d:77:6d:08:62:d5:1d:f0:47:d4:c2:ce:29:81:72:
d0:a8:f5:0c:1a:63:cc:cb:77:5d:df:31:37:53:32:7d:38:b1:
b2:23:d0:e4:18:45:03:64:bf:f3:e9:86:e7:17:83:e7:03:c5:
16:83:c4:2c:11:8f:b2:47:5a:ce:53:cc:54:9b:c4:2c:ab:57:
47:9c:4b:e8:0a:48:3a:9c:1f:cb:c6:44:39:f0:f7:02:5d:34:
6a:87:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:09 2025 by rpki-client on console-fra.rpki-client.org