Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: +jY9LrsHWV4atL67zkTx6O+qg7Kknuq5EV5Cnx4FHsc=
Subject key identifier: 68:93:38:80:2A:BB:65:A0:71:B7:41:8F:53:64:B9:49:76:4A:96:D6
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0194BBCED4A8D761681B5D6E57A3868A8916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0AAC
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: ZGNvhFG4EcMNNyHCJriBNCsmG6+q37lYueUW5ngFaH4=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:a8:d7:61:68:1b:5d:6e:57:a3:86:8a:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=689338802abb65a071b7418f5364b949764a96d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:27:a8:94:68:69:81:78:79:ae:65:be:6b:
c2:e9:17:ab:04:ab:90:0c:94:94:55:ee:c9:3c:fe:
79:c5:36:48:8f:4c:a5:9c:9e:5c:5a:8a:c9:70:11:
40:6e:02:db:88:36:07:68:00:06:e0:1d:64:c5:fe:
90:a8:c6:23:ff:c5:61:6f:9b:d9:87:13:40:55:af:
a9:9d:d0:0c:b2:97:44:85:d8:a6:02:4f:c8:e1:12:
5b:97:a3:25:a2:57:ab:8c:5f:e3:ec:c7:f3:5e:f6:
1f:c3:b5:91:04:d3:eb:2b:39:b0:5c:48:48:5e:79:
9b:f2:9e:e4:5f:c7:48:c8:26:e1:ea:63:97:24:a0:
b3:75:f7:d7:11:84:f9:fd:65:77:3a:7a:1f:70:08:
4d:21:c4:14:5f:f1:7f:43:c5:84:7c:bf:7a:91:1c:
be:28:c4:31:de:da:29:00:fd:07:ba:10:6b:d6:b0:
29:5b:18:21:1c:91:42:ff:f4:e4:a8:3e:cb:06:df:
66:69:f7:da:47:19:3f:5b:fe:c6:4a:d5:d2:19:50:
39:f4:b6:46:aa:5e:4a:ec:5c:b8:d6:a9:ac:37:30:
77:fa:2e:91:fe:ea:f5:57:f3:1b:c5:b6:94:e8:28:
2e:ff:32:c5:d5:1c:6f:83:8d:b3:26:4f:47:4b:35:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:38:80:2A:BB:65:A0:71:B7:41:8F:53:64:B9:49:76:4A:96:D6
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:74:5f:d4:fc:c5:9d:4b:35:85:de:08:88:18:1a:ff:ba:
3f:99:7c:26:3c:98:fd:99:48:95:22:21:59:20:cf:7b:61:be:
4c:c1:7e:da:51:92:22:20:b8:6c:39:ce:e3:4e:44:63:64:b4:
e7:6d:44:24:37:cc:a3:c9:65:21:c5:fb:a2:62:21:76:e6:7f:
1d:c8:34:b5:61:e8:f1:b0:57:43:0e:4d:bd:77:80:43:c0:58:
73:d5:7a:79:13:57:de:b0:1b:f7:2b:b1:e9:dc:91:b2:c0:a5:
24:cf:53:4c:0e:36:f2:59:eb:06:bf:c7:f4:32:8b:1b:13:ba:
d7:87:06:d6:87:6b:30:ed:57:30:23:12:20:3a:80:b0:92:1f:
9d:8b:a4:53:88:52:1d:12:63:49:cc:d3:91:4f:15:b7:c7:2b:
6d:4c:34:88:78:f7:17:34:86:92:fd:ed:fd:0e:7f:b5:41:ad:
42:f0:c5:c7:a0:1e:d2:10:7a:77:29:10:29:7b:05:be:b2:b8:
f1:76:51:16:93:8e:6f:ba:55:f1:f0:8b:74:89:ed:27:6a:a1:
97:39:7f:df:d2:40:24:89:7f:77:a6:ba:b8:14:89:b3:77:64:
08:b4:ab:64:0f:31:49:7f:3c:d0:75:5d:ce:c9:ee:51:ba:b2:
44:30:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:34 2025 by rpki-client on console-fra.rpki-client.org