Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: aszw9PSTiB2qfKpjLcqvL656vV9ULLMVk/7G2rSf45I=
Subject key identifier: BD:FA:B2:C7:D1:76:E1:FE:0D:3D:5E:96:DA:A9:52:A3:38:C8:BD:64
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 0194BA8423BD0E040B8846EB117FDF4A61E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 0281
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: QWkT31GYhkK2dZU3UMSr2Ck3CMY.roa (hash: bsZQ/G0U8862JpB88PTG8FxX7m4i8ha16ESClmf3E34=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: AeSZ1HJ0rgzT7efDsHI7t2bda6dbNYAzMVyQvlCKfl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:23:bd:0e:04:0b:88:46:eb:11:7f:df:4a:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=bdfab2c7d176e1fe0d3d5e96daa952a338c8bd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:b6:73:8a:5b:85:fb:e1:2a:a8:ad:31:68:
2b:86:fb:ca:68:49:73:72:23:57:81:0c:41:9d:77:
fa:58:23:5e:3e:b7:e1:54:25:09:80:14:62:95:16:
52:18:0d:06:60:3d:f6:69:3f:bd:46:2a:25:3c:70:
55:17:6e:42:cf:bb:81:05:95:64:17:a0:b6:4d:f0:
9b:63:de:50:71:b5:5e:ce:c8:2b:37:3c:cc:a9:b8:
74:fe:7e:6a:1f:fc:06:33:05:da:a8:ea:9f:0f:d9:
cb:98:77:ae:57:c5:b1:67:c0:cc:07:9a:45:7c:0f:
ec:c6:ea:48:5d:ea:04:8f:42:37:f1:56:54:e4:21:
98:3f:69:1f:df:1f:b5:86:0b:7b:56:83:43:29:79:
c7:30:7e:f9:c1:58:c4:10:66:bf:7f:10:29:32:e0:
57:fe:44:dc:ae:fc:ef:26:38:50:c2:31:8b:df:66:
85:a1:49:19:61:e4:b5:aa:5e:7a:33:97:88:a6:d6:
fe:68:d8:f4:98:92:6b:c4:55:38:57:c1:12:5f:47:
3e:e7:93:6a:96:00:4f:39:c6:74:b9:1f:15:d7:d3:
aa:b7:a4:a1:dd:48:ac:7e:78:2b:bf:b6:d2:36:1b:
ee:87:d6:1c:81:5a:a3:ed:41:bd:1d:f6:ef:49:cc:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:B2:C7:D1:76:E1:FE:0D:3D:5E:96:DA:A9:52:A3:38:C8:BD:64
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:c7:7f:6d:8c:2f:32:db:66:5f:45:a1:74:ba:aa:80:c8:
e1:6d:8d:cb:81:ce:97:23:ea:45:77:c9:4e:a1:c1:47:53:39:
79:d2:0a:dc:87:8f:0f:10:da:81:e5:92:08:bb:62:02:4a:a5:
a1:b7:35:19:eb:1d:0b:5b:72:62:c9:d9:79:bd:e0:d0:03:0c:
fc:3d:89:96:25:c1:93:9e:2c:ba:7d:0c:da:55:84:35:f1:42:
8a:25:68:e8:77:f2:27:91:cc:b8:2f:e6:17:93:87:4d:fd:2b:
15:e0:10:77:0a:a2:c3:53:f9:68:51:4e:ec:0e:e1:77:aa:24:
f2:31:46:67:03:71:b8:6b:1a:3f:5c:db:85:22:29:e6:af:3f:
5b:da:a0:26:bf:07:ff:59:78:7c:33:80:c3:75:2f:27:9b:1a:
5c:db:39:02:de:e1:f2:72:8d:a7:71:08:f1:51:ac:c0:60:6c:
9f:0b:ca:ab:d2:38:99:ca:99:fa:f7:7f:23:0a:e5:ee:29:73:
7f:7d:99:33:91:cd:6e:aa:04:b6:32:f2:fd:77:49:68:84:ba:
ea:35:a4:51:a5:d6:ae:fd:5a:79:46:56:6d:cd:96:61:a7:e6:
35:83:b2:18:97:00:17:82:3f:0f:e7:01:c3:a6:7d:ee:e3:2a:
85:29:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:05 2025 by rpki-client on console-fra.rpki-client.org