Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: EAxT9ldS6OB6tdp7aI6U1GvHJzknWKaeY1RkkzfiOsk=
Subject key identifier: FF:41:B7:6F:73:AE:69:B4:4E:BB:17:69:17:AC:53:AB:06:6A:45:54
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 0194BABB5CC49B80427BF2598C7974685933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: ngwKP/ZhOApRdh7+tbwjL+A3FFdduh0k/D/Ox9XBXXw=)
2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5c:c4:9b:80:42:7b:f2:59:8c:79:74:68:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=ff41b76f73ae69b44ebb176917ac53ab066a4554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7b:f8:60:9f:9c:18:66:d1:3a:7a:e1:f0:cd:
69:02:f8:9b:ef:dc:0b:fc:6c:6c:4a:13:b7:53:52:
6c:59:6a:84:5d:46:bc:c9:db:04:e9:4f:6c:e0:c4:
ba:fe:99:d2:b3:e4:07:c2:b2:16:fd:95:35:51:6b:
9d:fc:05:c9:b7:15:c5:7f:27:1a:40:bf:f8:39:74:
ca:ef:bc:7d:44:1f:fb:d2:d5:3a:29:1a:e7:7b:73:
a9:ff:61:b2:9c:09:66:2e:fc:80:04:47:44:5d:17:
fc:60:81:b0:54:61:33:23:24:76:e1:54:6c:db:cd:
53:b4:21:d9:cb:0a:71:0e:15:1c:bf:a3:0d:10:b9:
5b:4f:e2:8f:ca:d8:4b:3a:a1:1b:20:41:92:7d:e3:
01:43:7d:91:d5:80:fa:99:31:ef:f0:c9:19:36:7e:
37:97:d8:56:6d:fe:20:ce:bf:e9:34:e2:80:59:ad:
cd:2b:06:c5:db:cc:c2:23:d8:ee:fa:66:90:1e:84:
b1:fd:42:9f:56:03:88:e1:37:a0:18:1f:5e:23:85:
2f:dc:e3:72:eb:73:3b:25:da:35:28:e6:9c:09:11:
90:ea:7e:f1:3c:f9:07:c7:fa:9d:c1:13:a0:80:c7:
01:ca:99:4c:b5:df:71:97:50:12:78:b7:a1:4e:48:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:B7:6F:73:AE:69:B4:4E:BB:17:69:17:AC:53:AB:06:6A:45:54
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:4d:1b:70:a3:13:76:1c:be:9d:2a:b2:42:3a:1d:18:d0:
5d:3e:67:1c:27:22:2b:44:e9:cc:76:ff:4a:fa:39:ef:b9:e7:
ce:71:be:0c:20:9b:36:fe:4d:46:5c:a8:4f:f3:3e:c3:44:02:
ae:18:fb:cf:ae:cf:c8:75:6c:0e:e5:ef:fd:10:b7:37:db:f3:
50:77:1f:a9:f7:b5:eb:ba:06:18:24:90:8e:1c:d7:f4:6a:25:
83:12:57:c2:5f:16:12:37:15:e8:69:7d:db:cd:d0:3c:c4:74:
8d:5b:f3:1f:f2:fc:54:e9:04:30:73:a0:a1:dc:12:51:e9:44:
5c:a5:99:32:62:2a:2d:a8:c1:c9:0f:f6:67:ea:c6:f4:cd:11:
5b:da:ac:fa:a7:06:77:ac:6b:19:c4:82:f6:89:8f:d7:16:2d:
06:52:d1:ec:c5:a1:38:7c:2c:39:7f:6e:21:1b:58:dd:c3:9d:
05:0b:27:92:35:6d:89:e4:b1:03:78:98:ca:2f:e7:22:61:f5:
44:26:37:e2:17:7a:1b:0a:52:a4:07:22:05:da:97:40:cc:40:
b9:d5:c2:f2:8a:d8:fd:e3:c5:9c:1f:28:34:cd:c3:fd:e5:ee:
e0:64:3b:44:97:aa:02:0a:d8:56:77:2e:16:0e:31:d3:ee:fa:
f6:0f:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:11 2025 by rpki-client on console-fra.rpki-client.org