Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
File: Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft (raw, json)
Hash identifier: oDM68lQ5y6zszXnVOql5nzeOxZJlMMzweXphoUTTy8g=
Subject key identifier: 8C:55:48:A5:46:38:33:22:E0:46:EC:B3:C6:C5:03:1F:46:E9:65:7F
Authority key identifier: 32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
Certificate issuer: /CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Certificate serial: 0194BAF24A15B36A12BF369BD880223BC51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
Manifest number: 0770
Signing time: Fri 31 Jan 2025 06:00:28 +0000
Manifest this update: Fri 31 Jan 2025 06:00:28 +0000
Manifest next update: Sat 01 Feb 2025 06:00:28 +0000
Files and hashes: 1: 1hyld3O7OS-EMCOeBm6GjG-9ffU.roa (hash: yFGM9QizRMVTdDFt/BHrOnn73I0y7gBXUCht79YZQaE=)
2: Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl (hash: 8T/Y+HrHpw9ozO6irue9WsYPkEcMaYgsECD01OYzgAk=)
3: R4eUqOncKtq54T9DdHF5GejdBHE.roa (hash: tC9oLJU3NKN83YtbNZIAJD3IETS+fvlLYBmiYHfzImg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4a:15:b3:6a:12:bf:36:9b:d8:80:22:3b:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Validity
Not Before: Jan 31 06:00:28 2025 GMT
Not After : Feb 1 06:00:28 2025 GMT
Subject: CN=8c5548a546383322e046ecb3c6c5031f46e9657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:27:a5:af:e0:1d:82:c4:9a:d9:b4:f7:cd:
93:3e:48:dc:bc:19:69:19:a1:70:ec:44:8c:59:23:
bf:53:37:ad:56:35:9d:28:a8:5d:16:28:14:3b:77:
79:c3:c5:33:6f:0f:9d:e1:be:64:4d:01:34:03:f0:
e6:91:a5:eb:7f:c6:d1:bb:75:cc:9f:ad:91:a9:2f:
7a:a9:ba:11:c0:e6:55:5e:df:71:e8:d7:92:c1:26:
1b:54:72:58:50:f4:b2:ff:3e:83:16:af:6d:23:47:
cb:2e:87:0c:15:a3:5e:df:d5:9b:e8:58:82:22:06:
b9:64:14:b4:fa:1a:8e:8c:54:24:b8:2a:0f:df:58:
87:cc:aa:fe:6b:5c:db:7b:1b:a1:75:de:f4:da:30:
50:76:b7:df:eb:9c:8a:ae:22:42:44:e8:2d:c6:17:
a4:11:23:dc:15:26:24:d7:f8:b2:8a:87:37:96:fb:
ac:7e:d8:67:a1:be:7b:bc:e2:1c:74:d0:02:3e:de:
b9:71:d4:4c:04:90:f8:05:b7:46:2d:9e:b1:a7:f6:
85:a3:1b:01:55:ee:2e:bb:f4:4d:d1:d3:4f:20:f9:
a8:4d:08:19:dd:11:61:7c:f8:7a:36:51:ad:ba:a2:
80:0b:bb:dd:16:ad:4f:e7:9c:e1:fb:a3:68:ac:1c:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:48:A5:46:38:33:22:E0:46:EC:B3:C6:C5:03:1F:46:E9:65:7F
X509v3 Authority Key Identifier:
keyid:32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f9:a6:b3:ad:51:c4:27:b3:08:c6:88:6d:44:90:e2:94:22:
e7:3e:22:3f:74:c7:03:eb:67:b0:80:c3:60:ac:d4:e0:51:35:
64:10:03:2d:24:61:ed:2e:7f:6e:db:f1:67:58:15:e5:f0:9c:
be:38:78:79:44:f3:9f:a2:60:16:25:04:5f:58:cb:5f:9e:d8:
24:62:1d:7e:4d:41:8c:e5:bd:5a:1e:43:e1:5e:73:cb:30:eb:
a8:86:2f:46:0d:da:27:b7:23:ec:18:39:0e:c1:73:c2:da:9f:
40:1c:90:7b:22:ff:8f:22:7d:f1:d2:8c:c4:8d:de:55:98:48:
68:3e:f9:9a:b1:b7:a6:b8:8c:de:f5:0f:dd:29:78:d3:69:fc:
73:55:80:90:cc:f5:06:dd:46:f8:42:3c:28:c8:e2:ab:50:8b:
b1:d2:c4:72:af:4c:32:87:38:16:15:0c:2d:49:16:5f:04:de:
1a:f8:d4:86:45:19:b7:c0:21:67:4e:42:04:c3:3f:1e:d6:c3:
56:0c:95:35:2a:11:0b:8b:38:d5:58:99:ff:85:f8:19:fb:7c:
0e:2e:f2:36:6f:f8:72:f1:bb:b4:8d:62:03:06:10:fa:e2:ba:
c5:db:44:7a:c8:0f:7d:57:ad:0d:d6:26:22:6e:76:23:05:29:
7d:f5:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:52 2025 by rpki-client on console-fra.rpki-client.org