Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: 6lM9Rhi3yydiFKaMMYFRWNrzyV4ywAoFP2/EnMOm6DI=
Subject key identifier: D2:75:28:CF:AE:42:94:78:8D:17:E1:A1:95:69:5E:F8:25:85:99:F3
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 0194BB603B3B63FCBDE719463957B133D695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:33 +0000
Manifest this update: Fri 31 Jan 2025 08:00:33 +0000
Manifest next update: Sat 01 Feb 2025 08:00:33 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: lj4EpH0GINb9dWptybT5ionH2d7g+ko2q/BxaLpsK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3b:3b:63:fc:bd:e7:19:46:39:57:b1:33:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jan 31 08:00:33 2025 GMT
Not After : Feb 1 08:00:33 2025 GMT
Subject: CN=d27528cfae4294788d17e1a195695ef8258599f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:d2:74:96:ba:39:c9:78:48:80:b7:62:19:
a1:3d:cf:00:41:5b:96:9f:97:a9:9a:aa:29:1e:18:
e3:e5:28:a1:7c:c7:16:a2:86:6f:14:55:8e:ee:b4:
e7:5a:00:6b:a0:89:ef:bb:0d:b1:30:32:62:28:ca:
37:81:56:0d:e9:e1:07:7e:bf:87:34:df:ea:95:f8:
fc:92:68:e2:18:c4:3d:4c:80:8a:f9:30:6d:54:60:
16:2e:78:fe:42:6b:58:4a:b5:21:af:1a:82:50:7a:
36:69:8f:2d:cc:19:13:eb:a6:ac:65:be:96:5a:82:
4d:8d:00:8d:ca:7b:8e:69:9b:7e:e5:a7:79:ec:cd:
de:e1:1b:3d:92:2b:09:94:f6:1a:a5:54:c0:fe:5d:
21:73:95:d7:cc:7a:78:ac:c7:d2:32:2c:28:6d:5e:
64:80:a4:5b:d7:d0:cd:43:2a:9e:d0:0a:e4:0c:4d:
81:4a:0a:05:78:3f:2c:3f:1a:5e:86:78:00:8c:a7:
b5:fe:23:ef:fa:eb:9e:a4:ec:0d:fb:c8:a3:42:6b:
8e:25:47:49:f1:02:ea:1b:07:d3:55:94:95:eb:a9:
e9:a6:7e:4e:d1:33:1b:21:54:2d:9c:62:3c:dc:1f:
c6:dc:20:72:6f:b8:92:c6:cb:fd:79:ba:36:1f:36:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:28:CF:AE:42:94:78:8D:17:E1:A1:95:69:5E:F8:25:85:99:F3
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b9:85:23:3c:38:f7:95:19:be:7e:f0:1a:8e:5d:84:f5:1c:
2f:42:41:18:70:71:4e:8a:bd:7f:53:f0:92:93:c7:58:d0:40:
08:83:ff:dd:f6:6f:42:de:37:c9:c8:1a:4f:2a:7a:9d:a3:6c:
77:95:0f:c8:d4:97:94:fa:0c:51:5f:d0:15:a3:4d:ec:28:6e:
a7:4f:7c:1d:a9:eb:88:67:15:ad:bf:2e:24:d8:83:38:3b:34:
1e:01:5a:d4:89:d7:01:e8:ca:58:0b:4a:20:91:2b:3d:80:83:
d4:c8:d5:23:12:39:02:be:64:62:a6:62:2e:16:0c:9e:52:6a:
10:38:15:c5:65:61:50:34:b2:92:1e:19:01:db:79:d7:2c:1f:
84:d1:2f:36:09:77:0d:09:e1:9f:84:8b:b6:b1:fb:64:69:b6:
4c:3a:93:4b:40:f3:b6:b7:bf:c1:c8:6d:79:95:59:1a:c6:79:
3a:b2:55:f7:34:0e:bb:b8:2a:bd:7c:44:f0:2c:3a:64:e3:af:
69:6f:87:54:4a:0c:bb:d7:6b:ca:d8:ad:ea:f7:27:5d:1e:eb:
83:a5:39:94:85:20:a5:c9:cc:b4:74:9b:3b:ab:99:c3:2e:f6:
ab:b9:26:35:7f:96:27:48:e8:fe:ef:8c:ec:8b:65:1e:60:e6:
02:8c:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:10 2025 by rpki-client on console-fra.rpki-client.org