Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: lGmBgNjpFJ77ZAHQF73q64aYto85kj8UGzFTUtXkk9w=
Subject key identifier: AC:F9:67:5C:68:9E:C3:D9:12:28:70:79:D4:B0:11:26:63:47:05:5A
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0194BB9722BA11B09872014852F7B05748CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: Ue+wvJH3aXtPqYULuCLd8aOyibjwqfhAL8TF73e/13c=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:22:ba:11:b0:98:72:01:48:52:f7:b0:57:48:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=acf9675c689ec3d912287079d4b011266347055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:21:36:49:4e:90:e9:ce:1f:b5:b1:fb:58:
c0:69:2a:19:7d:0c:51:bc:7b:a1:fc:3d:fb:58:7a:
d7:7b:94:c0:7c:5c:cc:10:92:11:3f:eb:3d:ae:0a:
8b:c8:69:c7:78:e9:aa:73:43:93:b4:38:e2:9a:dd:
92:cd:18:90:17:53:a0:e4:bb:79:97:cc:48:6b:6a:
8d:7e:af:d1:f2:b8:25:89:6a:5d:14:37:85:3d:b8:
9c:1e:10:e7:06:a6:4f:2b:31:3c:8d:76:3d:44:f8:
06:88:1f:19:0c:03:0d:f9:08:39:21:27:c0:d0:45:
b4:02:9a:12:67:8e:b7:ec:4b:bb:e6:37:31:94:e5:
b5:be:ae:fd:94:ab:4d:1f:f1:a5:65:0f:61:18:50:
27:23:d8:ac:30:be:0f:32:e4:1c:0c:c1:52:14:f8:
0a:a6:36:5f:7b:22:c1:6c:2a:8a:1e:5a:35:4e:2b:
a1:63:7e:7c:8a:15:4b:7d:fb:86:f5:92:d6:24:eb:
7f:72:fd:61:e6:5b:e8:da:c2:1e:11:d8:7e:c4:77:
b0:a6:d7:fb:e6:eb:fe:e7:93:3e:5f:33:64:c2:ba:
57:f1:5f:c7:2e:6b:03:a6:ab:49:12:65:89:11:f3:
ef:a4:a3:4f:ff:2b:8e:ad:81:99:b2:65:8f:c9:ac:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:67:5C:68:9E:C3:D9:12:28:70:79:D4:B0:11:26:63:47:05:5A
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d2:ef:1f:41:d8:b8:0e:82:8b:47:bc:11:0e:65:74:05:04:
3a:1c:a2:c6:56:5d:99:9d:20:4f:ab:3d:1e:83:66:55:13:9e:
e3:9a:0d:93:72:65:fe:0b:89:64:f5:f5:5a:42:77:14:d1:cd:
4b:50:1f:0c:e2:91:bb:66:29:bd:5a:c4:22:ed:b4:da:6c:1c:
95:7a:16:08:bb:3a:3a:3b:f2:b8:da:dc:a7:8a:c7:68:e3:55:
62:52:10:05:04:35:03:71:71:82:aa:81:93:eb:08:b3:b6:88:
3c:97:1b:db:95:36:e5:aa:73:1e:41:df:00:28:39:e5:51:52:
1f:7a:a0:25:99:ba:0f:b0:00:8b:98:24:02:e7:79:9b:c4:62:
1e:0b:bd:29:a2:20:1b:36:c8:8f:31:b4:1d:71:d9:e6:d8:c8:
5f:92:d9:31:e6:4e:cc:2d:d9:e9:62:b4:78:81:85:9a:ae:06:
b5:2c:41:6e:0f:1e:74:ce:88:fe:5b:f3:66:86:ee:fc:9f:09:
fe:9c:69:fd:d5:6e:ef:ad:e8:92:24:f3:ae:8b:f7:8d:83:98:
b7:7b:f2:83:01:90:77:7b:1d:d0:41:23:0a:96:4f:a9:9a:3d:
aa:92:49:f6:81:1d:54:2e:e0:be:fc:0e:18:09:62:8b:d0:15:
e2:c8:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:25 2025 by rpki-client on console-fra.rpki-client.org