Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
File: RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json)
Hash identifier: l/zyBoV7GoTdX+1aGo5Q+SEAscnvJsVTK0WpzBwvgzY=
Subject key identifier: F0:E2:FE:08:79:49:0C:CD:D7:80:A0:DD:C0:11:20:2A:8B:E0:60:39
Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
Certificate issuer: /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Certificate serial: 0194BAF270FEDF7EEB576DAA364EC8270B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
Manifest number: 0203
Signing time: Fri 31 Jan 2025 06:00:38 +0000
Manifest this update: Fri 31 Jan 2025 06:00:38 +0000
Manifest next update: Sat 01 Feb 2025 06:00:38 +0000
Files and hashes: 1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: twWpavXMI8Cf/SKyus/grGj7R6Sz2cJr+LELtahPfGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:70:fe:df:7e:eb:57:6d:aa:36:4e:c8:27:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Validity
Not Before: Jan 31 06:00:38 2025 GMT
Not After : Feb 1 06:00:38 2025 GMT
Subject: CN=f0e2fe0879490ccdd780a0ddc011202a8be06039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:05:77:c3:70:b0:ce:1b:64:3d:6b:77:1c:
38:60:fa:e7:9d:a8:01:5d:de:e3:7f:1f:77:99:37:
dc:e5:60:3d:bc:08:f6:78:60:82:58:5a:28:a6:05:
dd:6d:e7:2f:a7:7f:40:f8:55:ab:f8:f4:b0:5c:80:
7f:1c:58:3e:75:de:68:47:e6:43:00:21:41:cf:91:
c4:2e:71:32:53:67:e5:8e:cb:50:54:52:c3:2d:a1:
44:34:e9:f1:8d:0b:f6:53:5c:fd:30:bf:0f:13:6b:
81:02:ab:c0:4a:ec:b4:f1:c3:e7:3a:b3:75:5f:67:
f6:cc:1a:ee:40:01:e4:b1:24:f6:e0:f3:d4:91:2d:
f8:20:81:38:8b:59:32:3d:99:9f:c3:b1:c0:86:65:
49:56:3d:cc:9e:6a:28:bc:e6:e5:60:e3:41:f9:2d:
6b:0d:f8:ea:b1:fe:f1:f3:bf:90:39:17:2b:64:34:
32:65:56:7d:8a:88:4d:11:a8:8d:ba:fc:f3:51:22:
65:6a:ce:4e:10:e6:00:5b:db:67:3a:0f:27:91:d8:
ed:16:09:36:b4:23:da:66:20:b4:e3:7f:d5:ef:fc:
bb:61:22:ce:d6:b6:b9:0d:38:2f:dd:ff:5e:43:ed:
c4:1a:33:3a:3d:a3:4a:74:a7:3b:1c:25:a6:6b:51:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:FE:08:79:49:0C:CD:D7:80:A0:DD:C0:11:20:2A:8B:E0:60:39
X509v3 Authority Key Identifier:
keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:03:c1:5f:23:52:eb:3e:74:c7:8e:2b:03:d4:45:ea:75:
89:20:a5:94:f0:4a:db:1e:42:51:f5:da:5a:f7:51:1f:9f:f5:
75:55:12:c8:a3:fe:f1:0a:c7:18:5d:f4:ee:9b:f7:d7:77:08:
0d:c2:76:e2:9c:42:fa:b4:7f:27:3a:67:2a:24:9d:cf:ef:28:
7d:ac:ba:49:69:b4:d7:bf:52:c8:56:ab:ff:b5:5a:08:f1:57:
b4:67:83:74:13:b1:0e:c4:ad:27:8e:41:75:a1:d3:ca:0a:7c:
f9:dd:d1:93:e8:01:7d:9b:26:8c:1f:32:cc:d5:d8:b9:3d:fb:
30:94:82:d9:51:9e:25:9d:bc:bd:1f:7d:9d:d2:4b:15:1b:63:
e4:18:86:5d:7b:94:44:f6:39:cd:c7:29:4b:63:22:30:94:e0:
14:48:ee:ae:6f:c9:8e:14:51:db:2e:95:a5:b1:80:82:ef:e3:
75:51:02:2f:ed:86:a3:9c:1d:64:f0:0e:29:0d:71:c1:7b:54:
4a:42:1c:cc:cf:b8:c0:5b:b4:e6:f7:55:3b:8f:16:7f:27:2f:
08:f9:dd:36:94:41:cf:97:b9:c2:6b:96:a6:22:fb:4f:ff:bb:
eb:df:61:22:03:62:c7:6e:07:49:7d:fe:9f:b8:2b:36:12:c0:
2c:d8:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:38 2025 by rpki-client on console-fra.rpki-client.org