Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: 7WvohkwHthCyr8iZbUu3yrt7f2Re2GIWufoIXg/rX2M=
Subject key identifier: 7C:DB:39:5F:8C:43:B3:84:47:87:2B:36:AF:A0:8B:C7:A8:8A:08:CF
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0194BAF270E77C74EEE8289866B4AE05892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:38 +0000
Manifest this update: Fri 31 Jan 2025 06:00:38 +0000
Manifest next update: Sat 01 Feb 2025 06:00:38 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: 89SbNvE0OuZq4hYiN8TmjboU2pRkRRGY/eMcz4ZBYlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:70:e7:7c:74:ee:e8:28:98:66:b4:ae:05:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jan 31 06:00:38 2025 GMT
Not After : Feb 1 06:00:38 2025 GMT
Subject: CN=7cdb395f8c43b38447872b36afa08bc7a88a08cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:af:32:32:35:9d:e0:22:be:95:e6:68:d5:
20:34:d9:9d:a3:92:51:3c:3d:b8:a6:cc:d3:81:c7:
9c:a0:e4:70:fa:5e:80:6b:39:ed:0a:77:65:f0:1c:
2b:c0:17:9b:a0:b0:bf:d5:e6:42:ca:4d:51:27:d1:
09:61:01:d2:8c:48:26:fd:fa:47:f8:7f:18:d9:8e:
16:bf:7b:be:7b:02:b0:72:21:2d:4e:65:0f:eb:78:
56:b3:c1:da:6f:23:04:ad:ab:3f:3f:87:96:28:e9:
cc:f0:9e:c8:cb:ea:1e:23:74:ad:c0:44:b6:cd:60:
9a:43:0b:08:5a:61:5a:0a:bd:47:4f:e0:12:96:98:
19:71:c2:45:65:2c:1c:a2:d6:4c:4d:cc:29:e9:9d:
5b:db:c5:0a:ea:7f:7b:b5:79:c1:bf:88:b0:cd:d0:
3c:a1:9c:15:4a:d8:8d:68:2d:6f:0e:c7:1f:d3:c4:
cc:08:4a:31:86:fe:71:7a:bf:fe:c2:ed:d6:0a:25:
09:ec:ec:e9:70:34:b4:92:ac:07:0c:b6:96:3e:9b:
51:41:8e:79:02:58:27:14:7d:52:a4:b2:d1:70:9c:
13:ac:47:66:94:0b:97:d1:c6:de:f9:d8:2b:39:b2:
0c:3b:15:34:cb:5e:4b:2d:8a:d3:09:8b:95:9b:e7:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:39:5F:8C:43:B3:84:47:87:2B:36:AF:A0:8B:C7:A8:8A:08:CF
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:df:29:04:af:00:d0:95:e5:75:1f:38:01:06:5b:ac:c7:d4:
b0:2d:86:50:ad:e1:1b:e1:9c:ed:7b:2f:e4:9b:6b:db:b6:d6:
16:cb:6f:92:ea:5f:b5:16:79:ea:4d:14:14:33:be:a0:e2:ba:
57:b7:f2:13:c7:70:ec:72:ac:37:77:52:10:51:7f:58:4e:8d:
3f:3c:aa:b4:a2:1d:60:fb:67:ff:8d:48:c7:08:f2:5c:a8:ed:
16:26:a7:49:1a:d7:b7:e5:d8:25:dd:41:fd:80:da:45:5c:37:
b1:e8:4e:9c:44:89:28:c7:ff:fd:7c:ef:e9:e7:29:9d:32:db:
db:6b:85:ae:9d:2d:84:3f:56:6c:1e:3c:24:10:a5:1a:52:47:
9b:27:17:a6:21:51:04:e0:2a:df:0f:8b:8a:62:f6:46:6d:e4:
a7:51:2c:69:31:47:33:03:cb:4c:ff:e4:ea:1c:63:d1:08:73:
e9:ba:1c:ea:64:5f:72:9c:b8:ec:30:ac:ed:51:47:93:24:67:
8c:10:77:b6:8f:6d:20:68:9b:37:b1:df:da:81:14:00:3b:cc:
08:fa:48:07:c5:ab:18:1a:68:c9:cf:44:5e:49:b9:ed:01:42:
70:a5:a0:0d:40:f6:8c:f7:b1:61:48:26:f3:79:3f:81:00:5d:
a6:3c:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:03 2025 by rpki-client on console-fra.rpki-client.org