Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: CDLrR2xxXIUbu4Ornq5+QIAHKAOHipMNGqRV9lDxumI=
Subject key identifier: 6E:53:8A:9E:17:BA:5E:5D:AA:B0:9D:39:66:EE:C8:40:47:2C:BC:6F
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0194BA846138E837CAA9D11BA1F456F3EA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 04:00:25 +0000
Manifest this update: Fri 31 Jan 2025 04:00:25 +0000
Manifest next update: Sat 01 Feb 2025 04:00:25 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: s5Q6IP6wD0PVBHx+m4sedLYXVBlYUj7W5kkAhyoDVj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:61:38:e8:37:ca:a9:d1:1b:a1:f4:56:f3:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jan 31 04:00:25 2025 GMT
Not After : Feb 1 04:00:25 2025 GMT
Subject: CN=6e538a9e17ba5e5daab09d3966eec840472cbc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:77:c3:8f:7e:37:fc:f1:68:62:ad:ed:ab:
37:90:2f:58:ee:10:5d:65:aa:14:5b:39:1b:ca:93:
65:f4:99:13:ae:06:92:8a:10:e3:c0:05:a4:1f:ff:
20:29:61:b6:c4:f8:03:0b:77:b6:e9:31:cc:51:5b:
be:6d:e0:05:8b:c1:d7:4e:aa:e5:f2:70:f0:bb:f0:
55:34:16:82:f3:eb:32:d5:16:a2:87:6c:0c:5e:3f:
43:49:01:89:4b:c7:78:c3:fa:63:65:37:ce:ea:97:
14:92:fd:45:eb:d8:69:a9:2a:44:71:e7:44:a1:3c:
b5:15:df:d9:fe:29:47:b2:d9:48:6f:a6:16:f3:41:
50:20:7a:26:97:5c:b9:b0:40:28:88:6b:f9:a9:d4:
03:d2:8d:3e:b6:f2:58:0d:34:57:70:76:e8:14:76:
63:bf:19:2b:ac:d8:ea:02:92:26:8c:77:a4:79:6f:
d8:c9:f1:b1:10:9b:5c:ac:e9:8f:aa:9e:63:76:b5:
fa:56:bb:db:23:7f:43:a5:d1:16:ee:26:d5:7e:f3:
3a:42:4c:51:26:2f:31:1d:25:12:d9:2a:b4:b5:da:
b5:8f:c2:60:9e:1c:e2:9e:0f:b7:32:ea:63:48:e1:
af:e9:1c:41:c8:13:b6:b1:ef:e4:8d:4b:1c:1f:cd:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:8A:9E:17:BA:5E:5D:AA:B0:9D:39:66:EE:C8:40:47:2C:BC:6F
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:62:9e:0c:37:4a:da:dd:d5:98:99:e2:d4:69:27:31:c6:
d9:1b:cd:52:7a:3d:7d:4c:f9:5c:78:a3:f3:f9:84:22:ea:22:
d1:e0:9c:9c:83:7a:71:0f:63:34:d2:19:a5:30:e3:af:46:db:
4d:1c:ed:36:a1:62:fd:d5:02:e1:47:74:48:0b:f7:4c:30:24:
a7:6e:f7:76:06:b4:47:3d:3a:bd:21:fa:16:35:4b:7f:12:31:
1a:ac:49:ba:1e:a4:3f:39:ce:a9:02:e9:60:05:0a:90:ff:8c:
57:e1:77:3d:90:c8:f4:b3:85:ed:56:2b:c7:d4:fa:95:e8:41:
27:f8:e3:57:8b:cf:9b:f5:df:84:30:2b:4a:8b:dc:12:01:50:
6a:32:92:d8:52:72:26:a7:c1:96:de:b5:e0:7f:92:9a:39:63:
a5:c7:60:f3:16:b8:8b:65:ab:3b:23:f0:f7:90:e8:84:35:3e:
36:3d:c4:21:5b:34:31:a8:19:e5:37:56:d9:22:99:f6:5b:36:
8f:ca:cd:aa:39:31:cf:6e:dd:64:a3:bd:64:99:a6:4d:b5:73:
01:ed:87:18:1c:4c:ba:58:57:7e:f0:1e:72:94:75:18:f9:8e:
e0:f6:85:68:ce:e9:31:de:db:5a:d0:45:07:40:58:8f:2b:13:
f4:26:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:10 2025 by rpki-client on console-fra.rpki-client.org