Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: MpOLDPM3WFXwHCWaJa4npbIfpCLUcBfZCWL2x9gS6jY=
Subject key identifier: 0B:AF:0F:82:84:EB:02:AB:37:1D:6C:42:FC:73:17:5F:42:77:3F:0D
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 0194BA845FD1903F30310848C46703DE4A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 04DC
Signing time: Fri 31 Jan 2025 04:00:24 +0000
Manifest this update: Fri 31 Jan 2025 04:00:24 +0000
Manifest next update: Sat 01 Feb 2025 04:00:24 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: 0IBoWmOXSUcG9bLgpkGojiGcok9hh5UKC2Vv72cgLbY=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5f:d1:90:3f:30:31:08:48:c4:67:03:de:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Jan 31 04:00:24 2025 GMT
Not After : Feb 1 04:00:24 2025 GMT
Subject: CN=0baf0f8284eb02ab371d6c42fc73175f42773f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:cb:ac:8f:19:e4:01:7b:3a:5e:ba:3c:76:
46:3c:b1:f3:dd:45:64:ba:b7:ec:ae:94:bc:3b:e2:
56:db:e1:42:01:7c:29:01:54:f7:3e:5a:62:3d:88:
a4:d1:19:cf:10:cb:ad:3e:6d:46:f7:ec:a9:b0:f4:
1f:97:10:7e:31:18:38:51:35:0b:7a:fb:ef:b1:8b:
11:97:3e:2c:96:61:e2:6f:e3:f1:63:f7:6d:2f:d7:
ba:14:58:76:9e:43:ca:88:54:23:b7:c1:f8:9f:d4:
cc:d7:dd:e5:18:40:e6:eb:da:50:c4:24:74:22:23:
2d:67:da:2b:0d:0f:24:c7:c5:90:3d:03:0a:88:cc:
43:1d:6a:8e:ff:d1:c6:38:19:4f:0a:30:d2:a4:6c:
fe:96:cf:4a:b8:0a:ec:62:5f:75:cf:be:b4:06:db:
10:d0:bf:a9:d7:09:b7:4c:f1:ad:01:40:3d:80:50:
90:f3:16:0e:49:ce:6c:95:ff:7d:03:92:1b:3c:62:
ac:ff:f6:57:de:80:06:6f:96:f7:d7:bb:95:4e:ce:
a7:05:75:11:6d:fb:05:f8:6a:7d:11:2b:52:ba:28:
c0:0b:f8:e9:45:ca:2c:74:a9:b8:63:a5:01:15:7c:
ff:e8:d5:63:5d:02:14:36:c4:cc:27:08:74:4b:a5:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:0F:82:84:EB:02:AB:37:1D:6C:42:FC:73:17:5F:42:77:3F:0D
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c3:c4:66:21:f1:18:96:27:76:60:ae:a1:9b:be:87:31:52:
1e:0e:a8:51:09:40:9f:e5:84:6f:f8:b9:ec:15:a7:e8:82:a9:
71:47:0b:a9:7a:63:f2:24:5c:42:8f:86:8e:d8:2c:00:2f:d0:
24:76:d0:b1:4a:af:97:cd:27:51:c5:d9:05:52:66:d8:54:d2:
bb:4d:e5:53:e9:dd:b9:47:d0:cf:9c:77:a5:1c:82:9c:29:5e:
b8:7b:25:eb:6c:b0:4a:f6:29:3d:1b:0f:57:9c:5e:97:b1:d2:
6d:96:7d:4d:8d:ae:e6:5b:ed:72:0a:0b:33:5f:84:6a:14:09:
90:0d:20:99:22:2f:e7:7e:b7:bc:2f:3f:cb:29:85:49:c5:12:
d1:00:13:f3:78:24:0e:ef:9a:e9:97:a8:7d:ee:a9:16:98:bb:
c3:97:cc:fc:d2:59:94:cb:d9:e9:0c:98:55:9d:16:2f:94:38:
e8:67:aa:c3:af:32:27:1d:60:02:3b:8d:3e:64:e6:b2:7f:2e:
f1:77:28:14:84:a8:bf:bc:b5:e5:51:b5:7c:6d:e0:d1:4f:6d:
b6:37:0a:b9:ab:4b:f9:e1:24:ac:5e:6b:b5:f2:48:e4:19:b6:
de:75:9a:7f:c9:c1:14:51:29:a9:d1:34:76:53:21:95:b0:b5:
33:5e:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:26 2025 by rpki-client on console-fra.rpki-client.org