Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: gXNuBAykJS+0xljMxCsa7QzK3aOX7YELMRqTJfZgQeU=
Subject key identifier: DD:4D:69:A6:5E:41:A0:52:6A:A7:23:E1:B0:21:9F:01:B3:B0:84:72
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0194BAF21549672D5600B89E34C9AB86C20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 0D5D
Signing time: Fri 31 Jan 2025 06:00:14 +0000
Manifest this update: Fri 31 Jan 2025 06:00:14 +0000
Manifest next update: Sat 01 Feb 2025 06:00:14 +0000
Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: qN82sFSXqIgxuEWo6jb4WqbZ55AmlHLs3rRXQ3kyijs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:15:49:67:2d:56:00:b8:9e:34:c9:ab:86:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jan 31 06:00:14 2025 GMT
Not After : Feb 1 06:00:14 2025 GMT
Subject: CN=dd4d69a65e41a0526aa723e1b0219f01b3b08472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:1b:78:bd:f7:86:75:4a:3f:ae:1f:d0:1d:
8b:85:8e:ee:ac:8a:4a:9d:cd:fc:0e:bf:37:bc:8b:
dd:01:41:36:bb:f9:3c:b1:10:ca:5c:4d:01:a0:c8:
de:b5:9b:e4:15:02:05:7a:c2:a8:60:17:db:00:04:
f7:71:bc:2c:b3:d6:3e:04:1e:7b:f2:4d:f8:d3:c3:
17:44:f2:ca:9e:8f:62:e8:e8:e0:68:e5:d8:19:30:
3e:84:ae:b6:b3:34:20:1a:94:ff:ca:bb:2d:76:c8:
c2:de:bb:e9:34:85:1a:9d:41:fb:9c:d7:94:44:b1:
2a:14:a9:41:29:78:91:a6:2e:91:8b:32:90:df:26:
94:c0:63:b1:ff:7d:70:71:9e:54:c9:dd:2c:ee:ba:
24:8e:2b:0e:f7:34:bc:6d:5e:2c:8b:b6:b4:66:de:
19:25:6a:fb:34:b1:0e:7f:a2:77:32:11:e0:bb:f6:
47:9d:30:3a:9a:17:84:92:46:db:cf:cc:3c:f3:b1:
84:e6:6e:20:8d:43:bf:6d:d5:21:53:cb:e4:93:66:
4c:c4:25:97:82:ad:91:75:4d:07:26:26:b3:e1:09:
f0:ed:aa:a2:20:b0:ef:38:83:44:93:c3:f6:20:b2:
09:aa:07:94:46:66:dc:50:7f:cf:87:d1:e3:95:6d:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:69:A6:5E:41:A0:52:6A:A7:23:E1:B0:21:9F:01:B3:B0:84:72
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e3:11:d9:fb:12:4e:fe:56:c8:84:f3:b9:e7:31:c7:b0:19:
49:0a:ef:a6:9d:ea:13:14:84:ae:c3:97:c7:53:4f:f2:24:36:
1d:ae:d8:07:e7:59:da:91:ce:e5:28:35:85:dd:54:2c:3c:34:
4b:a1:76:63:b7:a9:9b:1f:28:98:80:50:00:32:b1:d8:08:8b:
90:77:61:ca:dc:84:1e:47:3a:e6:aa:74:11:2f:58:d2:4d:95:
72:71:4b:02:f5:39:59:8d:1d:da:d9:2e:89:33:de:56:5b:3d:
ff:76:38:dd:4d:00:2b:b7:df:15:01:98:ec:f7:18:a0:b8:4d:
57:9d:76:0c:a3:d8:52:01:fb:fa:fa:ee:63:f9:cc:d4:f1:c6:
d5:4a:53:3d:bb:dd:54:34:82:98:1b:31:6d:e4:1e:dd:6c:ef:
b2:3a:72:7f:f1:cf:91:6a:2c:8f:84:c6:5c:cf:be:3c:88:c1:
43:e6:a2:c0:15:26:f8:af:81:76:be:2f:0c:e3:c5:53:dd:04:
ad:25:a2:e2:65:f7:0f:8b:e2:af:0c:64:0f:b4:f0:98:8f:92:
b9:07:c0:6c:4f:0a:5a:bd:05:bf:a9:cb:dd:28:6f:29:1b:90:
3c:63:4b:88:cd:26:4d:89:60:bd:98:0a:36:8d:2e:b0:f3:7e:
55:82:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:06 2025 by rpki-client on console-fra.rpki-client.org