Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: pKoViC51CzljxT08zkBJ6ZYPHnyZyssbLwRsjsMHScg=
Subject key identifier: 2E:61:4A:B5:44:3B:BC:E5:DB:62:8C:37:73:E4:E9:1E:F6:D0:B8:F5
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 0194BB9744D56C23088829F5922514AECD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0DE4
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: u5AXuLYH3tUMwmht+TwZ9+rRuxjDHrGHuN7DuReR+lw=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:44:d5:6c:23:08:88:29:f5:92:25:14:ae:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=2e614ab5443bbce5db628c3773e4e91ef6d0b8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:05:db:25:32:b7:4b:02:34:78:87:36:01:
89:a5:7b:00:7c:3a:9e:3d:0e:88:c5:0e:e2:74:a3:
28:96:c0:f2:9e:84:ff:3e:e3:0a:e9:8f:79:5a:da:
2c:a2:49:8e:ec:52:3e:25:e2:08:a5:13:f1:79:b0:
bb:ea:79:d4:47:b0:e9:1b:e1:a7:2b:f7:f7:df:2f:
4f:32:57:d6:39:62:5e:6c:7d:30:19:00:d4:31:ad:
c6:fa:f9:0a:42:5a:06:b3:7b:51:15:79:ee:bf:3a:
97:00:f4:e5:88:92:3a:51:4d:53:f8:24:30:87:1b:
ea:91:3e:f0:61:33:db:e6:ae:03:de:f1:7d:85:18:
e7:5c:17:77:5b:4d:34:27:66:69:a4:9e:f6:9b:e1:
3d:92:c7:1f:1f:e0:ae:55:60:f7:46:07:5c:bd:d4:
28:2a:58:1e:d2:8f:ea:91:ca:c0:88:66:c4:d5:ed:
58:84:8f:7b:ff:66:82:f4:e3:b4:a4:3a:6e:bb:d2:
7f:f5:e7:7f:5b:65:2d:0a:27:65:3e:6f:1b:3e:75:
f8:7b:45:2b:bd:bc:aa:31:aa:8d:61:84:d3:d0:cc:
03:17:26:67:40:40:f4:69:d6:14:78:94:65:39:dc:
22:e7:e6:24:07:1f:fb:47:7e:21:39:ab:06:8a:36:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:4A:B5:44:3B:BC:E5:DB:62:8C:37:73:E4:E9:1E:F6:D0:B8:F5
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:b1:2e:1c:1f:f6:b9:b0:75:50:57:c4:f4:c2:60:78:a1:
8d:55:c8:49:8d:3c:91:de:0f:c5:48:aa:d1:92:78:df:78:81:
94:4a:d5:91:30:a0:d8:53:d2:9c:6c:17:ff:43:fe:90:48:57:
73:ef:ac:14:e5:be:d9:ba:16:c7:b9:b4:5e:74:59:b2:25:aa:
ba:36:1c:87:7f:c2:f6:df:2c:e7:98:9e:e8:8d:97:12:04:ca:
dd:f5:57:8c:7d:9f:b6:d1:e2:68:35:af:2a:04:3a:3c:fd:f4:
9e:88:e9:fe:22:40:64:ee:d3:60:bc:6d:47:a8:f8:df:14:49:
f4:4f:a7:cd:c5:01:28:98:84:1b:50:f9:bf:f4:6f:39:3c:64:
1a:91:31:53:33:33:86:49:4b:24:6c:c6:61:37:10:07:d9:b2:
f8:60:38:60:35:3c:b2:e2:58:21:21:d0:73:08:7e:10:f4:19:
3f:0c:44:23:48:a0:b6:c6:d1:eb:03:5c:da:cc:32:de:15:a6:
40:a1:6f:9a:e3:77:f1:7a:7c:5f:55:d2:e1:b4:37:1a:cd:b3:
0d:c0:4f:bb:d6:0a:db:36:bd:ca:c2:f9:60:49:41:21:d4:b6:
1e:8b:38:42:0d:b2:46:9a:e2:2b:1a:ca:e0:0a:0d:60:0a:46:
fb:89:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:00 2025 by rpki-client on console-fra.rpki-client.org