Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: OGPneNV4fjBPud0EFRh5AMF4Qfdvayhm9itcWpL1vq4=
Subject key identifier: AE:BE:4C:59:5A:D0:4B:8E:63:A8:62:C6:9C:37:D0:AB:5C:38:E0:BF
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 0194C3881B9C0FFD1CD89B6F2574A043802F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 23
Signing time: Sat 01 Feb 2025 22:01:04 +0000
Manifest this update: Sat 01 Feb 2025 22:01:04 +0000
Manifest next update: Sun 02 Feb 2025 22:01:04 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: M3vs9XgGx/3udqLOjJDzm2VpLdqgHsk5CW2iAs9QRac=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:1b:9c:0f:fd:1c:d8:9b:6f:25:74:a0:43:80:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Feb 1 22:01:04 2025 GMT
Not After : Feb 2 22:01:04 2025 GMT
Subject: CN=aebe4c595ad04b8e63a862c69c37d0ab5c38e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:59:3e:3f:15:dc:5b:27:bf:d0:cc:68:8c:
83:93:17:6c:0c:fa:ed:18:32:ee:3b:e5:58:09:10:
b6:26:23:2c:1b:91:d4:fd:40:25:2e:a8:8b:d5:db:
4d:26:00:ab:0c:f5:3c:0a:98:6e:1a:fa:ff:52:13:
12:20:c2:4e:e9:c6:55:f5:02:e5:c8:13:0a:fb:82:
0f:e0:dc:d9:ab:d2:10:27:9c:59:a5:29:bc:90:ff:
9c:55:17:89:e8:c0:56:60:22:ea:52:f9:91:5d:eb:
57:01:d4:a9:7d:73:78:36:7b:33:73:3e:39:73:36:
de:d4:39:ec:b3:18:1d:55:cf:22:f7:00:ce:1e:58:
5b:7c:8d:1f:2e:5c:6b:5a:c5:16:e1:e6:e8:0d:1e:
9d:96:05:96:93:c1:97:fe:97:8e:f5:bb:33:89:c7:
a4:f0:74:58:21:4d:eb:b3:95:be:8c:88:6c:15:49:
66:04:fe:58:88:2e:79:f1:56:fc:2c:ca:0d:d3:9a:
9c:cc:02:dc:a1:ff:be:83:ac:21:4b:23:0f:da:7f:
5e:5e:bc:4e:44:df:ce:99:c5:b6:f0:24:56:f2:b1:
06:48:cf:1b:b0:b2:39:7e:24:4c:f1:cd:c8:15:55:
6d:f6:17:7e:f2:42:5c:67:bd:df:87:21:2c:1c:72:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:4C:59:5A:D0:4B:8E:63:A8:62:C6:9C:37:D0:AB:5C:38:E0:BF
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:b4:6a:af:32:1d:5d:7e:d5:89:7c:8f:39:31:fb:96:a4:
cc:4e:93:90:fa:7f:30:55:0b:50:82:13:e2:e9:2b:87:78:6d:
17:32:34:b6:f7:de:52:dc:a5:0a:59:5d:0f:5a:55:84:da:ba:
a6:ca:e9:a5:ec:29:9a:33:56:da:fd:35:97:ae:98:9b:1b:77:
67:40:d7:74:64:03:f2:6e:b9:b9:e1:aa:00:05:bf:9e:4f:bb:
25:f7:c0:7a:ef:d9:82:f5:57:1a:0d:20:7c:1d:1e:e0:50:58:
40:d0:ff:9f:54:01:c6:f3:0c:af:a3:a4:66:97:73:ae:a5:f9:
e8:35:8d:69:bd:e4:55:bf:d5:29:16:cb:28:b1:e9:90:3a:2f:
f1:ef:c7:d1:0d:ac:a8:c8:b2:de:8c:b5:2f:b1:ab:2f:c3:71:
45:bd:24:b8:0e:d3:57:aa:92:8a:d3:2d:28:06:64:3f:82:7f:
ba:cf:81:ed:06:fc:d1:32:d9:2b:f9:2e:08:27:0c:97:90:9c:
6a:6c:60:42:d3:b7:72:1b:36:30:ce:b9:32:d2:f5:26:5f:64:
e7:a0:0b:f0:2c:cd:7a:c8:13:38:4b:90:5b:fa:e6:9b:98:00:
84:88:00:57:c8:91:4d:d7:5f:f0:a3:10:bd:be:39:fc:a0:5e:
c5:e6:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:57 2025 by rpki-client