Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: Jsw02ZJc6lViEtPzhtxpXXxXNtpL0W6F33IDIHUW5lU=
Subject key identifier: 34:CD:92:8E:40:2F:0F:7D:6B:96:37:01:6B:F9:D9:F6:0B:2F:B2:0B
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0194BC3C456892F73400A12262E02ADEDC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: CpVh0RtVtAELFi7IH3MYYzeKDhKvwCAU9yOT2T+YnfQ=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:68:92:f7:34:00:a1:22:62:e0:2a:de:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=34cd928e402f0f7d6b9637016bf9d9f60b2fb20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:4f:38:0e:74:18:01:90:b2:c1:34:c6:d7:
cf:c7:09:2b:a4:89:8a:bf:61:52:f4:b0:e6:ad:72:
8b:ca:22:c9:2a:c2:5b:76:81:bf:59:8a:09:34:4e:
85:29:3c:d6:02:05:e1:31:c1:33:1c:2a:37:48:91:
84:1c:97:6a:23:b0:79:f9:24:30:38:18:14:ba:1c:
e8:9f:19:b7:53:c6:ef:e6:3d:c3:99:6d:0b:4a:cf:
59:a8:3a:18:55:5a:b8:4e:ff:5b:50:da:31:15:62:
d1:59:3d:db:a1:98:f6:9e:e4:aa:b3:e2:9c:f7:d4:
18:f3:d5:bc:fe:14:b7:23:5d:96:71:19:c2:54:b9:
67:18:22:b2:fb:9f:aa:30:e6:c4:07:8a:41:49:e5:
7f:d0:16:05:04:19:1b:60:b5:8d:18:e5:36:fe:3b:
02:c7:bb:18:0b:d2:02:e7:00:6b:4a:5f:cd:1e:01:
b8:e6:8e:0e:b5:34:f4:dd:8c:06:7c:13:b4:4c:9d:
af:51:33:bb:1c:55:fe:80:0e:29:c0:8a:81:fc:6f:
36:18:e4:92:d5:4b:b3:fe:7f:d1:6b:1f:2c:fe:70:
ab:a5:a2:67:9c:31:33:6a:61:42:32:93:e1:5f:43:
d1:f0:f4:88:e7:9e:b1:de:c6:a3:54:7e:fa:bb:83:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:92:8E:40:2F:0F:7D:6B:96:37:01:6B:F9:D9:F6:0B:2F:B2:0B
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:3b:dc:58:42:45:4a:4d:e3:93:96:52:67:34:fa:13:fd:
eb:4b:70:1c:49:cb:99:92:05:ca:3f:32:81:7c:08:ad:3c:f1:
d1:fa:88:5f:47:e3:7f:2f:df:30:87:da:3c:b3:ca:52:ac:59:
68:3e:dc:fb:18:67:27:91:86:6d:d0:19:df:bf:4d:20:3f:35:
7b:a5:3a:64:7f:05:b0:00:d9:6c:ef:10:f6:63:72:2d:69:e1:
ed:99:ab:2b:08:6b:0e:93:c9:38:7b:cc:89:43:a4:fb:27:95:
7e:d3:dd:68:f7:ce:80:3e:c4:a7:a4:ab:41:6e:0b:43:4d:64:
ea:2a:38:53:ba:f6:6e:fe:f7:e4:57:b0:0b:25:e6:11:a7:53:
d6:6b:73:ec:05:6b:7e:6a:7f:66:be:0a:46:7c:29:2b:68:a0:
68:eb:dc:6c:39:c5:69:5d:25:9b:94:10:8b:fe:f4:40:17:0e:
1c:7f:53:3d:09:87:db:c6:2e:b4:71:00:09:85:bf:c5:44:87:
e0:73:64:f5:35:8a:58:a5:b6:05:eb:73:90:a4:40:79:d5:5d:
f9:9a:1b:2f:f5:89:71:a3:ab:56:35:66:47:1d:0c:c3:d5:a0:
6d:83:ff:cb:80:25:ee:88:d8:e9:e2:1d:b3:37:65:90:e6:fe:
38:d5:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:11 2025 by rpki-client on console-fra.rpki-client.org