Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: Gv193l2GT23/yZdBvLrweJIZSAV96Jq+ExqGvItXaik=
Subject key identifier: 45:5A:9C:91:5C:A9:A3:0B:11:21:62:34:E1:CB:53:3F:1B:0B:78:A3
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0194BB96F1D441ECD59BD3EC9A7E3E7D23FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0BD1
Signing time: Fri 31 Jan 2025 09:00:19 +0000
Manifest this update: Fri 31 Jan 2025 09:00:19 +0000
Manifest next update: Sat 01 Feb 2025 09:00:19 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: I35qEps68VErNPlmKrOhRQnC7EMmRknGhnPLVIHW0HQ=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f1:d4:41:ec:d5:9b:d3:ec:9a:7e:3e:7d:23:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jan 31 09:00:19 2025 GMT
Not After : Feb 1 09:00:19 2025 GMT
Subject: CN=455a9c915ca9a30b11216234e1cb533f1b0b78a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:c3:fe:53:ab:7e:3e:ee:dc:66:a9:ed:07:
3a:a8:9d:34:fa:e3:95:7d:e4:58:1a:70:13:b6:ed:
15:23:a1:b2:26:d9:e8:c7:77:b8:e0:aa:48:35:9f:
78:7a:f2:44:ff:ca:f7:35:c4:87:64:34:62:9e:8d:
36:a8:5a:7a:0d:cc:d2:93:59:02:c8:07:d7:f6:e4:
f4:b7:e2:e7:8a:27:11:3d:1e:98:70:1e:06:4b:70:
e9:a5:1e:dc:40:76:bb:93:1d:1a:d2:b5:eb:15:16:
bf:10:34:5e:7e:f8:72:57:57:d7:2f:9b:97:a6:7f:
4e:7a:b7:e5:b6:0c:46:1d:e0:6d:8c:06:a8:a2:1a:
37:d9:93:cb:2e:b4:4a:53:f0:da:32:52:bf:9e:39:
09:66:20:e3:12:36:83:ae:9b:64:6c:15:83:35:31:
83:56:a2:f6:bc:c0:75:12:93:99:2d:19:96:fb:16:
cf:ca:29:e8:2b:94:1d:b4:80:78:92:bb:2b:62:de:
29:e6:92:5d:58:82:79:ea:d9:8e:41:f5:69:05:a2:
4e:50:2b:c8:61:c9:35:dc:5d:34:1a:18:17:ae:b5:
c4:2a:bb:99:5d:62:ee:57:79:e6:ef:66:ac:8d:22:
8e:7f:bb:31:2b:9b:9b:fc:46:4d:22:a9:af:68:b3:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5A:9C:91:5C:A9:A3:0B:11:21:62:34:E1:CB:53:3F:1B:0B:78:A3
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:d9:5e:30:33:a6:7b:6e:74:5d:ca:3d:a6:b8:5a:20:f5:
78:64:fb:ae:69:ae:e6:12:4f:08:84:68:48:2d:4d:08:b0:de:
1c:76:f6:3c:b8:1a:45:6c:a8:f3:d5:4a:16:db:70:da:c4:ca:
4b:62:1e:ac:e1:67:33:cd:12:99:8b:f3:8b:00:54:77:b3:12:
85:b8:3f:77:f6:31:30:82:93:73:3c:55:45:b5:48:2d:06:65:
f6:13:c6:ae:c2:b9:a2:73:66:67:16:14:46:bf:16:3e:4d:f4:
ef:61:16:b7:a6:2e:51:dd:5f:c2:7f:30:e2:fc:c4:8f:92:d3:
25:a5:64:c0:96:b8:62:0a:4b:88:6b:8d:22:0e:1b:99:ef:04:
cf:f4:d5:bc:61:f8:af:c1:1d:6b:f4:53:2f:4d:a0:d2:4e:b6:
53:0a:a9:e1:68:56:e8:68:f4:53:af:e0:18:ac:a3:89:93:fa:
70:01:c1:40:ab:16:46:2e:c4:a4:1e:28:c3:10:fa:c4:a4:6f:
83:97:b0:9c:bc:2f:70:cb:56:04:f4:bd:99:86:9e:e3:d4:36:
7d:cc:e4:b0:e5:25:b4:f8:9f:a5:ea:e3:bb:a8:6d:59:3c:47:
11:2d:d8:53:83:c0:c0:ab:05:e2:e0:79:98:d6:3e:43:ed:e5:
23:21:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:16 2025 by rpki-client on console-fra.rpki-client.org