Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: eqX0IugrmvNh7DBqgCld6Fn+pIUkbRvQCtcs97BrO4E=
Subject key identifier: 8D:5D:24:51:59:69:48:40:01:10:50:ED:02:4A:74:87:78:D4:B2:31
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 0194BB291061A10697BAEBB2E60D6BE88881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:17 +0000
Manifest this update: Fri 31 Jan 2025 07:00:17 +0000
Manifest next update: Sat 01 Feb 2025 07:00:17 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: QuJ2R2ttmHmjMy79WhHbm5Wk+loGqrbrQewYESycv5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:10:61:a1:06:97:ba:eb:b2:e6:0d:6b:e8:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jan 31 07:00:17 2025 GMT
Not After : Feb 1 07:00:17 2025 GMT
Subject: CN=8d5d245159694840011050ed024a748778d4b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:76:ed:c0:1d:a2:fb:9d:af:1d:e4:c6:d9:a1:
f3:20:05:12:e8:64:b6:00:7f:97:43:54:0f:45:e2:
7f:85:8a:fa:50:99:dc:aa:3c:fd:96:72:10:2c:fd:
e2:b0:de:f5:b2:bd:ed:66:15:ca:bd:cd:2d:35:c0:
69:26:8a:40:59:71:b5:85:29:2d:ec:3b:05:65:4c:
0a:fa:cf:d4:30:72:62:03:e3:4c:58:46:42:2a:e5:
ac:4f:c4:11:6b:47:a6:a0:ac:c4:25:15:23:0a:74:
f6:7f:7d:fc:35:a8:d3:a1:e2:28:d3:42:55:ba:1d:
0d:d6:88:9c:bb:fa:43:c4:d6:8f:e4:6a:c7:4c:c3:
b0:a5:23:c4:21:9f:6e:e3:9d:85:fa:e4:ef:3e:a8:
ac:67:c0:af:38:0a:08:a2:41:f3:58:79:16:d9:e3:
0b:d6:32:3e:03:f1:62:02:29:7b:c2:83:32:84:2a:
3f:66:ff:9a:13:f2:d7:2e:2c:ed:4c:38:11:4e:5f:
8e:8d:61:f3:47:8e:ac:2c:dc:f8:a3:21:a6:44:0d:
15:33:2a:83:ef:92:19:ed:75:58:e8:6e:42:54:af:
6d:0a:de:d1:5d:e9:7a:58:43:5c:9b:af:e5:ef:df:
62:bc:79:69:1e:4d:8e:47:69:a1:4d:fb:30:c7:8a:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:24:51:59:69:48:40:01:10:50:ED:02:4A:74:87:78:D4:B2:31
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:5f:fd:16:80:94:aa:18:2f:e0:7f:31:3b:dd:ce:ca:63:
f0:ac:95:d0:5a:5b:de:5c:10:e3:cb:50:8f:89:42:75:df:a1:
f3:dc:53:ae:d7:b7:dd:d8:00:d4:a2:8a:85:43:d4:88:27:92:
e0:5a:53:c4:ff:8f:88:71:ce:f4:ca:fa:01:bd:3f:c6:6a:a1:
dd:d3:d1:24:63:65:94:19:e6:16:d8:f7:f7:c1:ed:0f:ff:28:
8c:0e:ab:05:f2:81:57:27:9c:ba:35:8b:18:c0:4b:55:56:c1:
c3:fb:81:04:88:e0:3f:02:dc:bc:69:f1:92:a7:93:6f:f8:9f:
87:06:5a:29:13:de:a6:c3:f6:90:e5:f8:80:55:55:6e:8c:8a:
7c:94:53:40:78:1b:be:f4:c3:0f:94:54:6d:34:75:87:df:44:
92:fa:30:7a:a6:fe:aa:55:b9:de:6c:fd:56:cf:da:58:66:b1:
d7:f5:be:43:f4:1d:96:01:44:a7:43:43:9c:4f:a5:14:98:1d:
e0:7f:4a:5b:11:71:da:95:32:00:14:0d:fd:29:9c:6b:68:84:
e1:de:8e:b2:54:9d:30:27:98:69:4a:0a:44:88:a7:7d:89:6c:
9d:13:95:91:81:e4:bd:b4:82:57:79:0b:66:2d:86:a4:89:c3:
80:d5:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:37 2025 by rpki-client on console-fra.rpki-client.org