Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: VDnVauu3WvjWCuyrKPzIny+7pGgdddnYPmlehG7mNek=
Subject key identifier: F9:4F:96:3D:60:61:AE:F9:DC:8F:A8:CC:59:8A:41:C3:A4:CF:F6:A2
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0194BABB0F9A018389B8036E620A05423908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 0EAE
Signing time: Fri 31 Jan 2025 05:00:08 +0000
Manifest this update: Fri 31 Jan 2025 05:00:08 +0000
Manifest next update: Sat 01 Feb 2025 05:00:08 +0000
Files and hashes: 1: 6gcvZTZXP4ZLMiI5jebyFlo2UHw.roa (hash: RQsjYw0xdW4sDKfB24mkwlHzLhlqiQP7AvUyqjMzN5A=)
2: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: ZX8zqE18GTMTX7C8n5tGCwqwxakTpAnv15cN6F74T2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:0f:9a:01:83:89:b8:03:6e:62:0a:05:42:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 31 05:00:08 2025 GMT
Not After : Feb 1 05:00:08 2025 GMT
Subject: CN=f94f963d6061aef9dc8fa8cc598a41c3a4cff6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:90:27:26:c8:b5:2c:c1:a1:fe:13:7b:4c:
78:8b:c9:61:af:cf:8d:bb:9e:7d:c8:e4:60:8f:96:
2f:60:e4:4a:43:22:98:0a:e9:35:4c:81:70:5b:ed:
5c:89:da:54:c3:a6:8f:20:b2:ef:bf:ed:e3:fb:e3:
e0:7c:a3:02:1a:21:3f:58:6b:16:95:d5:42:84:43:
d0:14:a5:40:c7:23:5e:d6:52:34:70:3b:09:66:13:
9d:fa:e7:88:5e:29:27:58:00:48:e2:56:2e:61:e8:
78:c4:5c:70:ce:fe:c5:93:fe:07:47:df:83:89:12:
d0:89:78:ed:43:ad:ad:24:d8:ef:45:55:33:45:6c:
bd:3e:54:95:17:81:e9:93:5c:8d:20:ab:c6:16:1c:
f1:f8:26:99:74:5f:b5:10:e7:15:01:28:9c:ae:24:
40:0d:7c:85:e5:56:5a:32:c7:7f:05:63:d0:80:98:
cf:e9:65:70:a0:e2:3d:38:b3:e7:9f:f8:39:56:f0:
73:56:33:37:74:ee:27:88:6e:a8:0e:b8:9c:d7:bf:
1f:48:d6:d2:b4:6b:b5:fb:fd:60:d6:05:ae:ff:3d:
7a:df:1d:09:43:9e:3e:20:c2:5c:b8:62:57:48:f1:
4d:95:5d:9a:c9:4c:23:78:62:6a:53:84:48:74:d9:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:96:3D:60:61:AE:F9:DC:8F:A8:CC:59:8A:41:C3:A4:CF:F6:A2
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:be:3f:d4:cd:ad:60:a3:1e:f5:91:6b:9e:21:fd:9a:d4:
70:61:b4:55:2b:4a:20:a0:f7:85:c7:6e:dd:3a:91:03:1a:0c:
38:60:84:b7:a2:39:6f:18:b1:aa:77:51:25:cd:cc:05:1e:7f:
12:81:54:fe:b5:ea:7e:71:bb:a8:a6:b7:a6:0b:3d:8a:3d:d9:
74:1e:9d:7e:37:0f:b9:36:20:bf:a0:9c:c0:b8:a2:d2:a0:98:
52:d6:f7:c2:6a:64:36:39:d0:a2:8c:e1:a7:a1:c5:06:f0:1f:
81:0e:04:83:fa:6d:53:77:4d:49:d7:6e:ca:c0:9e:4d:d7:86:
81:c7:fc:c3:cf:26:2f:71:7f:55:a9:74:0e:28:90:b0:67:11:
a0:90:5a:15:39:2f:ba:89:bd:a9:54:b8:00:7d:d6:08:db:d7:
c9:09:0a:1d:37:2a:bb:9a:bb:7f:6d:f6:d2:66:06:7f:93:af:
a8:cc:bf:52:d6:68:11:9a:0f:08:e2:3e:62:4c:27:ee:65:de:
d7:78:de:c8:7f:cb:da:0a:9a:ea:6e:fd:18:00:b1:a3:e9:b5:
ed:cb:54:5a:05:01:b8:cb:88:80:c5:53:01:5a:b0:02:94:41:
71:63:72:86:51:ce:6b:36:cd:09:95:a7:f7:8a:a7:14:80:24:
20:d8:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:02 2025 by rpki-client on console-fra.rpki-client.org