Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: Ti+PzwNntK9A8VifIoxjPntX7G+WKUzQzoHwl0JMBy8=
Subject key identifier: 9B:ED:C7:28:4C:83:F1:C8:7C:85:37:44:9C:7D:DB:74:72:BF:F6:95
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 01941FFB05C22BD0584D078BE6C7C482A1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 49
Signing time: Wed 01 Jan 2025 03:48:52 +0000
Manifest this update: Wed 01 Jan 2025 03:48:52 +0000
Manifest next update: Thu 02 Jan 2025 03:48:52 +0000
Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: wGOrQq5LKq9vI4nFUJjGDGQn/tei15ct7PM1sI7YhAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jan 2025 01:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fb:05:c2:2b:d0:58:4d:07:8b:e6:c7:c4:82:a1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Jan 1 03:48:52 2025 GMT
Not After : Jan 2 03:48:52 2025 GMT
Subject: CN=9bedc7284c83f1c87c8537449c7ddb7472bff695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:00:67:45:9e:7b:af:bb:cb:8f:9a:71:7a:
ab:d9:70:44:91:ff:ef:1f:51:d0:b0:38:25:4c:4c:
b6:87:4f:1e:94:9c:a5:1a:aa:5b:0e:93:81:c3:55:
38:b4:8b:33:37:78:40:08:e8:70:c1:3f:70:49:d7:
e4:2e:3b:d3:ea:a1:5c:16:f1:20:a0:68:22:d1:a0:
f1:22:9a:a9:8d:dc:db:4b:bd:b9:6c:f4:7d:64:fe:
40:64:ba:6e:49:fc:89:17:65:91:e8:57:c3:1e:46:
7d:a2:8f:9a:33:f4:35:7b:64:ba:db:85:d5:b2:1a:
67:a1:48:58:52:03:c7:7c:3e:e8:91:c8:2e:19:e9:
4f:2b:4a:fa:0a:76:15:54:fb:b5:cb:a9:aa:99:90:
48:be:56:7c:a3:63:b1:b9:f4:13:ba:23:06:d3:f8:
39:8c:b9:15:87:90:d3:3f:63:9a:e2:e3:9a:fe:72:
3a:39:1e:0a:de:b5:f5:b5:65:76:6f:aa:41:94:57:
4a:c6:64:22:c1:53:16:5c:83:e3:89:83:b7:a1:c7:
75:35:ea:1d:e9:c7:90:36:97:49:38:9c:3c:00:0c:
cf:4e:ee:86:6c:bb:09:38:c1:15:5e:0b:9d:10:45:
ba:bc:23:d9:a5:1e:b9:3a:d2:5e:df:e7:04:96:9b:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:C7:28:4C:83:F1:C8:7C:85:37:44:9C:7D:DB:74:72:BF:F6:95
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:72:f8:d4:74:8b:b9:ab:e5:a7:f2:4f:bd:aa:5b:ed:f4:f3:
fb:c0:40:8a:ef:29:d9:50:4f:ad:3e:8d:0b:25:d3:2d:b6:6a:
2b:a2:56:a0:eb:34:1b:99:18:2c:23:b0:6c:6a:3d:d0:b3:09:
19:c0:cd:f5:d6:60:4a:fc:83:fc:87:bd:a3:ae:ec:89:8e:dc:
7a:01:ec:0a:48:56:ad:50:8f:94:60:74:bc:fe:dd:aa:de:0d:
2f:ca:a0:1b:2b:3f:9a:e1:88:b5:33:cd:9e:ca:71:54:38:bd:
eb:01:a9:2a:b1:52:2a:ef:13:12:d1:f4:d7:c9:96:7b:9b:63:
68:44:7c:06:a4:5b:c0:0f:21:27:7c:e0:53:10:b7:b4:a0:86:
73:e9:f3:48:c1:4b:92:75:f3:08:38:62:14:da:cd:4e:31:fc:
f3:bc:8d:df:df:9d:38:52:be:42:5e:3d:14:b2:f9:95:5c:41:
2a:97:05:99:6b:3d:cc:f7:60:5e:d3:54:16:4e:00:93:cf:68:
fd:b4:fc:5d:69:55:90:12:31:df:1c:35:22:e9:ca:7d:e8:5d:
0f:07:6a:ed:e9:ae:c3:f5:13:cd:92:b2:03:ab:06:15:40:e5:
68:c7:ca:3b:b1:b0:12:3f:32:2b:49:cb:3d:44:f0:9e:8f:89:
f4:66:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 06:53:44 2025 by rpki-client on console-ams.rpki-client.org