Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: S3qt9Lg2kLFAP1aT8/P/9VZKRsdXHu7AVwJ7EqkBd3U=
Subject key identifier: 01:24:47:A4:D7:6A:32:99:87:A0:04:4C:3F:E7:92:73:BA:2F:3D:89
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 0194BB29428AC5890F755BBFF668260C4C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 07:00:30 +0000
Manifest this update: Fri 31 Jan 2025 07:00:30 +0000
Manifest next update: Sat 01 Feb 2025 07:00:30 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: AdpAqOwbQ8BilSiRqrpiTDxthhwzecSMGpi3/fpL5kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:42:8a:c5:89:0f:75:5b:bf:f6:68:26:0c:4c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jan 31 07:00:30 2025 GMT
Not After : Feb 1 07:00:30 2025 GMT
Subject: CN=012447a4d76a329987a0044c3fe79273ba2f3d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bd:1b:95:2d:63:23:95:9a:d8:3a:72:cd:58:
ec:8b:29:cc:3d:ce:89:3e:55:b1:a1:44:96:ef:d2:
4f:e0:6f:ed:e1:df:cc:fa:ba:17:6a:60:89:91:da:
6c:b4:e0:f7:fd:82:7a:55:48:23:35:56:77:08:04:
a5:1d:bf:35:96:85:93:58:f2:42:72:c5:4d:28:0e:
8e:03:53:66:5c:e4:26:cc:b7:df:e3:fa:1e:a8:7a:
49:90:29:e1:c6:89:d6:4d:24:41:58:bc:da:94:b5:
79:3c:ed:16:b3:5d:ca:d4:b0:55:ba:0c:1a:1c:6e:
78:7c:19:85:35:f6:6e:ea:56:2f:92:9e:22:3e:26:
38:2b:15:6c:ca:f7:63:07:e4:6c:66:1a:3e:79:88:
63:b2:37:95:09:4c:a6:74:60:09:56:8a:0f:da:a7:
ea:a6:42:c3:ac:a1:9a:e4:02:69:46:9d:64:f1:c3:
3f:c8:52:6f:a5:06:2e:5b:8b:c9:6f:4a:a3:bb:8f:
b3:87:36:ec:5c:a0:0d:a2:06:30:0d:be:ed:2d:86:
61:80:8d:ad:8a:44:5a:58:09:35:8e:5a:5a:e2:7c:
96:a1:03:0e:06:5d:c7:f9:88:2d:88:07:f4:e6:fc:
95:2b:b6:b2:31:18:10:1d:7d:70:2c:b6:81:93:ca:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:47:A4:D7:6A:32:99:87:A0:04:4C:3F:E7:92:73:BA:2F:3D:89
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:37:92:c5:00:9a:00:28:9d:e6:c7:02:76:a9:db:91:bc:
d3:42:06:b5:88:9e:17:fc:06:35:39:62:9c:55:27:f1:cc:a9:
7d:fe:ad:ed:76:58:6a:f8:b0:57:54:59:d6:bf:90:c7:e4:2d:
e1:95:75:80:b7:82:4b:e0:99:e9:b7:31:99:a9:dd:de:e1:c2:
1d:b2:94:d1:db:b3:64:e9:8a:93:d9:1e:84:5d:10:37:6d:4b:
74:90:a3:a4:da:9b:32:f4:ec:7a:bf:96:f0:b6:10:b9:6e:2f:
40:1e:41:a0:6e:69:02:a5:c5:f8:11:d6:da:6e:3a:88:3f:da:
b7:a1:94:a9:9a:3f:0f:8d:31:ba:19:de:9b:da:c6:24:6b:6d:
0e:7b:3e:d4:49:ac:d1:df:28:e2:5f:3c:aa:6b:e1:4d:67:91:
77:d4:0e:6c:fb:ad:97:ce:21:40:3e:92:bf:0b:18:74:e1:f3:
67:c7:4f:2a:74:40:2d:db:44:11:b4:42:98:c6:e1:fe:58:12:
ed:c2:64:85:d3:7b:b8:4b:25:7a:af:2e:06:9f:83:d9:51:1b:
4d:d2:36:e0:79:22:b9:f7:9e:0c:cf:5d:13:44:75:31:14:82:
bb:43:4f:6b:30:b6:6b:a4:32:3b:bf:88:d7:f7:e1:97:0c:a3:
e1:dc:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:09 2025 by rpki-client on console-fra.rpki-client.org