Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier: vPqQ+NnECF3TNqOEUhT8KZ+plmZxe+TxMa+fTWWIk5E=
Subject key identifier: 49:D6:1E:66:E0:4A:D1:4B:E9:CF:E7:CE:82:A4:DD:B4:01:31:21:93
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer: /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial: 0194BBCE449C84FB4E1F04C7045015BE8032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: fpIBLdye95pvMgleXZbkD2hSOEhiPGRa8icdKiaS8Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:9c:84:fb:4e:1f:04:c7:04:50:15:be:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=49d61e66e04ad14be9cfe7ce82a4ddb401312193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:d4:2f:bb:95:2d:6a:c7:5d:7e:37:3a:21:
24:ab:3f:43:49:b7:15:2a:10:10:f4:b0:c8:a5:7a:
c8:9c:75:ab:a0:35:35:35:42:1d:c6:70:17:68:ff:
01:e4:79:37:fa:c4:99:67:29:a7:f8:f0:af:ff:40:
b5:4f:cc:fd:75:9e:89:1c:90:46:f6:b8:ae:2e:69:
d8:e4:d9:69:15:20:41:00:22:fc:2f:22:d1:dc:81:
52:92:fa:57:91:80:92:da:23:1a:75:d9:1b:da:ed:
e1:39:17:fa:ff:5b:9a:a7:33:f8:e0:4e:1f:a9:29:
27:63:9c:a8:fb:5c:2f:18:d8:de:24:79:c5:a8:d3:
f6:14:b7:fd:a1:64:ed:89:a4:7e:f5:d0:d5:71:a6:
a7:ca:f5:77:51:52:97:7b:65:5e:74:33:76:c4:cf:
46:dd:da:18:5b:f8:98:47:e2:19:ae:b9:86:cb:3a:
57:04:57:f7:3b:96:e8:36:ad:32:39:26:62:0f:12:
f5:5f:32:ad:53:d6:95:d1:4b:71:c8:77:96:52:75:
aa:d7:f6:f8:d9:60:84:1d:99:58:d7:2f:b7:a0:b0:
66:53:b4:f0:b2:c7:01:6a:47:e5:5f:0b:8a:3c:ec:
71:df:06:15:11:55:63:0e:c0:4b:ed:2a:bb:15:d7:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:1E:66:E0:4A:D1:4B:E9:CF:E7:CE:82:A4:DD:B4:01:31:21:93
X509v3 Authority Key Identifier:
keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9f:c1:f2:9e:04:be:a2:5a:e8:2b:52:18:e3:b8:70:46:ba:
0e:32:8d:c2:02:e9:1a:cb:6e:ce:41:2a:d8:b8:c2:56:bf:af:
8a:8e:79:1f:20:e7:dc:24:cb:00:27:b8:e5:a3:4f:5c:a7:54:
b7:3c:4b:7d:cc:a1:ff:69:83:64:70:17:0d:6e:69:2b:d3:4e:
2c:a8:c1:71:87:cd:11:68:b1:38:cf:f5:64:4e:db:ce:15:ba:
77:ea:07:ed:fe:b9:ea:de:b0:cd:e6:fb:f8:41:a2:1c:a7:a4:
24:f5:62:bc:70:da:8d:ad:c9:97:38:6a:60:a6:a4:b5:b3:df:
fd:af:30:9e:03:b4:68:be:01:c2:10:11:32:91:43:55:49:49:
04:cc:db:5b:89:9d:c1:3b:8e:1f:fb:90:69:07:31:fe:5e:72:
30:38:7a:19:3f:27:68:d6:5c:7c:d0:2a:75:91:de:39:b6:80:
9f:fe:50:f9:11:fc:56:5c:0f:a4:65:f8:9d:29:27:dc:8f:d2:
e8:64:70:ad:e8:bd:ba:0e:4c:cb:b8:a6:97:63:c7:73:a9:a3:
98:42:47:e0:a3:b0:3c:9f:c5:c2:1f:f4:8b:3d:17:d9:c2:7f:
ee:06:5f:62:66:31:ee:59:c8:a1:0a:13:e3:12:a4:1a:a5:26:
50:01:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:33 2025 by rpki-client on console-fra.rpki-client.org