Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: zcLfX9j7p+3XFrlBnVit7tyaHOYD1649yeBHsQRpZgE=
Subject key identifier: 45:1E:87:2B:A2:91:94:9B:D2:7F:24:90:FD:5E:8D:A4:DE:75:36:F4
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 0194BABB9ACEB00C72E4D0A89506374CEBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 027F
Signing time: Fri 31 Jan 2025 05:00:44 +0000
Manifest this update: Fri 31 Jan 2025 05:00:44 +0000
Manifest next update: Sat 01 Feb 2025 05:00:44 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: K8bAw05n6YrlgrAUPB472Lvmd+Tl0EcqOlBwGZK4/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:9a:ce:b0:0c:72:e4:d0:a8:95:06:37:4c:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jan 31 05:00:44 2025 GMT
Not After : Feb 1 05:00:44 2025 GMT
Subject: CN=451e872ba291949bd27f2490fd5e8da4de7536f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:36:ae:a3:ed:0b:2e:82:34:fd:fa:06:49:
13:c5:ea:74:b2:ff:d4:1b:dd:89:51:c0:98:b1:8e:
3b:26:33:bc:e1:98:d5:64:74:cd:ff:4c:12:d4:b8:
64:3c:69:2c:87:4d:17:ed:0c:2b:15:75:e2:02:81:
8d:64:20:f9:8a:fd:3e:2e:2f:ca:e6:11:32:39:a2:
82:14:ff:b9:8d:c1:32:2a:79:6e:4e:7b:e8:ca:ec:
a9:5a:ff:2a:69:2e:88:fc:22:4f:81:6a:02:88:e6:
74:ca:d9:6a:f7:f0:b8:ee:8b:7e:a0:53:bd:22:6c:
9a:df:c3:3f:f8:cb:2c:9f:46:e4:ff:cb:7d:90:f0:
be:72:32:b7:d0:86:49:6e:16:ac:e3:c6:90:99:a4:
fd:d3:0e:98:65:03:e4:ea:53:8a:b5:c7:6f:c9:88:
a9:f0:a9:88:9e:96:f6:12:44:cf:40:c3:49:ec:2b:
f4:42:5c:38:ca:b1:da:ac:30:84:f2:4e:8d:9b:aa:
c8:84:fc:15:6b:c2:b1:43:d6:81:fe:e3:84:76:12:
0a:35:f1:40:74:ca:bc:fe:d6:20:03:71:94:2a:d5:
26:f9:d7:3e:a1:c6:b6:4f:34:ec:62:f4:dc:cc:c1:
47:4e:c5:c4:c9:a1:8d:6b:38:f9:4c:84:5e:d3:9c:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:87:2B:A2:91:94:9B:D2:7F:24:90:FD:5E:8D:A4:DE:75:36:F4
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:9a:3e:42:a9:83:b4:e6:c1:12:11:f6:a4:44:0f:c2:d3:
d0:8e:c8:ad:67:e3:8b:dd:b6:38:7c:c1:22:65:7d:cf:1f:90:
d5:c3:7f:f2:bb:a6:f1:07:c8:d5:e8:66:85:07:6e:2c:2d:6a:
30:68:61:e1:b8:8f:48:ba:da:87:4b:b7:59:f2:c7:86:36:e3:
6d:ca:77:3b:be:76:65:aa:1c:93:35:93:c4:ab:c2:a2:66:4f:
3c:28:ec:5e:c1:97:50:8d:c1:f1:07:9f:c7:91:b0:42:4a:db:
db:2d:4e:a0:bc:70:54:43:d8:4f:82:5b:d7:d0:ed:f1:66:67:
7c:e5:68:40:0c:a2:5e:b2:3c:96:a1:eb:f1:c8:b6:2f:f9:6c:
ab:9e:b1:49:5a:14:72:30:3a:91:43:5b:ba:6b:0f:41:f3:b9:
28:f2:fd:e4:05:74:ac:1f:15:d9:f9:32:24:69:45:0b:40:c8:
bd:d7:ab:df:59:3d:99:dd:73:64:4c:64:fb:e2:82:d2:18:7a:
be:c6:76:7d:2e:59:7f:b7:e3:58:46:ba:7b:e2:81:1a:bd:fd:
2d:45:57:9d:b2:c7:ba:72:f4:26:f8:6d:e0:11:d6:f0:98:29:
20:72:99:0f:4f:2f:a1:04:ce:d7:2b:82:6f:6d:d6:56:87:d8:
a3:ae:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:28 2025 by rpki-client on console-fra.rpki-client.org