Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: WBYjcu6kWAYs0iwMT/hd0fWTrxHiQRHJCef3PQwrCY0=
Subject key identifier: 97:6D:84:3B:EB:7C:1F:0A:4B:CE:96:0E:0E:26:42:88:AE:BF:28:39
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 0194BA8454D60F2C6539E3A0CCA61679753D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0525
Signing time: Fri 31 Jan 2025 04:00:21 +0000
Manifest this update: Fri 31 Jan 2025 04:00:21 +0000
Manifest next update: Sat 01 Feb 2025 04:00:21 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: i6fMpSZrZFCc2pPk27lkicSB6IioAwLg13SpuDG8Qjs=)
2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:54:d6:0f:2c:65:39:e3:a0:cc:a6:16:79:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jan 31 04:00:21 2025 GMT
Not After : Feb 1 04:00:21 2025 GMT
Subject: CN=976d843beb7c1f0a4bce960e0e264288aebf2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:c7:69:7c:08:fe:ae:a7:fd:d3:ab:04:60:
6b:7d:e0:fb:fa:e5:5c:d6:bb:78:e2:8c:40:fa:68:
34:92:b3:07:15:1a:07:ab:92:b6:1d:fc:7c:89:b3:
39:a4:be:06:59:9b:89:d7:aa:a1:3d:81:6e:b3:b2:
83:eb:8e:ef:50:28:6c:f6:04:38:35:99:fe:9b:c9:
86:0a:5c:85:51:41:e4:00:1a:02:e5:e7:f9:98:12:
87:68:0c:fc:8b:53:48:39:45:36:36:3d:7c:2e:c8:
30:12:31:e9:e7:e7:fe:20:4d:b0:28:9d:bd:72:11:
77:14:c9:20:6c:44:a3:d8:fd:9d:cf:01:d6:5d:bb:
97:e6:d0:76:f7:cd:8c:a2:1c:57:76:66:07:c8:34:
98:04:b8:f9:ff:b0:6b:2f:fd:14:9f:9a:b0:27:8b:
88:1f:1b:c0:9c:8f:97:e8:02:8b:eb:39:30:d2:53:
19:cb:28:bc:0c:34:19:63:dc:a8:d5:73:29:fe:43:
b9:09:8f:59:7e:d5:63:42:74:a2:60:00:94:7a:92:
e8:8a:11:d1:c5:d5:79:28:77:43:9e:08:5a:ff:b6:
b6:22:0e:7f:94:b1:c6:59:37:ab:31:0d:ea:d2:84:
e4:38:28:d0:8d:ec:7c:10:b2:5f:4f:02:e9:9c:bc:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:84:3B:EB:7C:1F:0A:4B:CE:96:0E:0E:26:42:88:AE:BF:28:39
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:71:64:26:b6:bc:80:3d:11:4e:15:9c:77:35:fd:48:c3:6f:
2b:d8:43:8e:1e:b8:09:ea:0c:18:17:42:3f:9d:d9:ee:20:be:
ea:a8:c5:46:65:f9:dd:cd:75:c4:f8:b1:46:4c:14:ab:45:3c:
8f:4b:98:4a:68:a6:e8:55:84:2c:9f:56:e1:41:75:ed:9d:be:
ce:17:9e:ed:3b:30:a3:d2:12:0b:3f:1d:c5:9c:93:9c:fc:88:
20:0d:e7:6c:de:6a:a9:10:a3:b7:87:39:56:21:60:b3:3a:2a:
92:5d:08:98:dd:9f:be:a2:2e:e8:6f:0d:b9:e3:29:9f:97:e2:
25:27:80:75:97:5b:75:58:3c:3c:9d:74:c8:d7:53:5a:7c:de:
6e:14:9d:1f:56:59:0f:ff:f4:33:c2:1f:fd:99:1a:d7:b1:a8:
c9:c9:1f:25:82:12:6b:2f:8d:d0:c6:9d:f5:11:78:6a:72:74:
e2:bf:ad:bb:f2:76:2f:70:0b:d8:76:e6:32:c4:77:3c:f5:77:
22:41:4e:9c:7f:af:cf:06:d1:38:d3:27:2d:80:03:1b:00:1a:
b6:5c:13:04:16:c3:9b:3b:98:94:f0:3c:ad:82:f0:94:19:97:
37:37:06:19:ed:b6:62:c1:b8:c9:11:04:ae:31:e9:f9:09:5f:
df:93:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:20 2025 by rpki-client on console-fra.rpki-client.org