Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: JiINjaPibcPsioTSduWmo+EJd+ITWCH/kmwL+MUMSGY=
Subject key identifier: B9:3A:13:87:D9:E7:3E:40:09:4F:6A:FF:CE:A9:5B:33:71:F2:71:B4
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0194BA847C27DFDB0E82A82BAC67644CA4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 10AF
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: YAhloM1D2cV2zLskZIBo3vcBsknrGztJhsrh9Vwf63Q=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7c:27:df:db:0e:82:a8:2b:ac:67:64:4c:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=b93a1387d9e73e40094f6affcea95b3371f271b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:c1:c2:28:92:e0:66:0f:1c:24:f7:6b:54:27:
14:57:00:cf:7e:b0:48:49:0c:a6:f5:19:8a:42:39:
d8:75:e7:df:27:8b:ce:47:69:7b:da:5c:35:6a:d1:
ff:b8:a2:d1:72:69:cc:fb:60:ca:7c:e8:57:9f:53:
58:3b:0c:23:15:6c:f0:5c:92:eb:27:21:3c:d4:e6:
ef:fb:18:85:76:4d:35:2f:f3:e3:0a:6e:9d:8a:a7:
9a:75:d1:86:11:68:1a:18:1a:79:a2:1a:ad:7b:42:
53:8c:65:51:93:99:4c:f2:6d:21:89:a7:e4:e6:0a:
50:4f:cb:4b:3c:60:b1:bb:50:ed:f6:5a:9b:b1:19:
76:8d:73:8d:ed:e4:bc:e4:bf:26:79:b3:b3:ff:1e:
9f:ac:01:af:cc:43:c9:75:d2:3e:91:bf:15:42:15:
73:9f:79:dc:0b:ce:ad:e4:f6:4e:b9:72:c1:66:af:
79:56:c1:31:c1:07:8a:20:9b:8b:2b:6d:69:59:4f:
45:54:e1:ef:99:78:e2:b4:42:49:21:93:5a:aa:1e:
4f:8e:10:bc:7a:e9:a9:00:e3:74:db:12:f4:55:15:
ed:5a:a6:9f:81:ad:15:43:90:59:1f:64:8a:10:65:
d2:e2:24:6e:8d:f6:46:1c:9c:b8:6e:aa:41:d7:ce:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:13:87:D9:E7:3E:40:09:4F:6A:FF:CE:A9:5B:33:71:F2:71:B4
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:a7:7a:8b:7b:7f:e3:9f:fd:96:f2:2d:8a:4e:7f:08:a5:
97:66:cd:02:48:97:05:a0:57:b6:d1:66:d1:dd:44:42:53:0f:
e5:dc:9f:58:8d:d4:c9:a6:54:f4:ac:17:14:5f:38:34:6c:54:
51:15:5d:dc:78:75:26:9d:7b:31:d4:fd:5e:b2:0f:28:93:2b:
7b:f1:cb:82:1c:8e:ee:06:8c:74:82:27:41:11:26:67:db:ef:
59:5d:5e:bf:f8:d6:d8:30:c7:4b:0a:3c:76:a8:77:ee:d8:57:
89:ce:ae:97:9d:10:8a:4a:27:58:11:51:e1:b9:6d:9c:f4:e2:
3c:6d:97:c7:da:2f:e4:85:72:60:a4:26:29:d1:10:75:84:6d:
b2:6a:11:70:25:a8:6e:44:cd:41:30:ab:0b:9a:13:a7:b3:8c:
1f:84:91:07:a1:4b:1f:65:2e:54:37:af:3c:92:b7:20:2b:50:
c5:b8:79:e9:4d:89:8e:3a:a4:1a:ee:38:17:8e:70:03:95:3f:
af:3a:9d:e9:42:14:ed:5a:2c:d7:f0:34:b8:76:a3:3e:34:ba:
1e:75:b8:56:b6:eb:74:5b:d2:32:40:cf:bb:6a:cb:30:e3:6c:
ff:98:f2:8b:92:b4:a4:47:ec:2f:9c:4b:b9:e3:bd:28:b2:95:
b7:e6:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:54 2025 by rpki-client on console-fra.rpki-client.org