Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: ZM8hHxNHaIyM6dP3Duv+Y58ZTWa3L0by+/1ifW7o9e4=
Subject key identifier: E2:81:68:FF:FA:21:7F:8C:99:1F:5A:31:03:98:33:77:F1:CB:84:80
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 0194BB971E215390D92E47CD642C78FA6D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0C90
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: UvTK/rN7G9SWnRvyO9LMyVzyBiRJUbqtZvaqn64l4jk=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1e:21:53:90:d9:2e:47:cd:64:2c:78:fa:6d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=e28168fffa217f8c991f5a3103983377f1cb8480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:df:ca:f6:cc:1c:cd:d6:af:4e:5a:4c:f3:
6d:79:79:40:cc:b8:23:6d:96:1f:6f:94:45:62:50:
66:4e:df:4e:21:8b:97:92:73:d8:32:04:9a:67:1e:
49:8f:41:a8:f5:32:c9:f9:ce:0a:ad:4d:3a:d2:98:
a9:d1:ee:02:9a:a6:1a:c8:c7:c0:d9:58:bd:f7:78:
53:60:52:0d:12:23:f2:d0:fa:56:3c:a6:31:47:f3:
8d:01:e3:4a:62:82:fa:e5:0b:a8:f1:41:3f:58:8d:
81:d2:64:6c:5f:5a:8f:a1:d8:f2:73:a7:7a:65:d0:
21:9e:e6:74:fa:1a:fc:80:83:ea:5a:b4:01:a9:e6:
b6:a2:92:f9:7e:51:1a:7d:bc:2f:c9:22:7c:e6:29:
73:b5:50:dc:b7:81:0f:79:82:35:c3:14:a4:34:5f:
e8:60:b5:53:fc:07:7d:43:c0:2b:f8:90:d7:96:da:
d5:bd:3c:ce:16:0f:7a:ce:16:49:a1:03:ae:9a:a7:
78:a3:16:14:37:ca:3f:e2:4c:3a:ac:58:7f:00:03:
df:04:21:2c:da:58:8c:aa:1c:66:a9:db:e2:ec:e5:
15:c2:32:5f:64:0b:a3:90:40:1a:f8:ec:91:0f:97:
10:df:61:b7:c3:ec:40:c7:65:fb:bc:76:9e:78:b0:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:68:FF:FA:21:7F:8C:99:1F:5A:31:03:98:33:77:F1:CB:84:80
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:00:b9:be:4f:78:8a:15:0d:7c:90:0e:1c:4b:da:32:08:
43:7e:6a:77:b5:41:4e:64:51:1b:7d:78:92:04:b4:f1:b0:c3:
f3:3e:a8:0b:ea:6e:b6:1a:46:28:de:2e:40:0f:48:74:76:b0:
68:ca:31:08:3c:d9:20:16:c6:3b:e6:9d:9e:e4:de:f5:ff:2a:
36:db:17:07:38:21:42:bf:36:5d:7b:7e:2f:e2:fe:ae:b6:03:
83:e0:10:75:82:9b:e9:b0:4c:43:52:87:95:09:7a:13:9d:05:
9a:78:d9:cb:87:38:22:f6:c7:e8:94:d4:c2:50:13:a5:bd:2e:
ad:8f:7e:6a:a3:a3:73:88:c5:a7:65:a9:fd:6e:00:57:9f:da:
6d:7b:b7:a5:18:73:0f:ec:13:36:04:8d:72:82:f2:8c:53:99:
73:61:5a:7d:e9:8e:38:4b:7c:be:6a:c5:70:63:6a:a8:6f:25:
8a:c9:a6:ee:20:a4:28:8e:a7:4e:4c:f8:d1:dc:d1:f3:b7:3b:
07:b1:9c:1f:97:04:c4:a6:70:2f:23:ed:29:1e:96:be:3e:7e:
21:7c:d3:60:9f:e3:14:45:e1:f1:cc:5e:a4:a7:c2:57:41:ad:
34:ca:24:ea:98:50:dc:ce:8f:1b:62:94:db:ba:dd:83:c9:32:
f6:df:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:22 2025 by rpki-client on console-fra.rpki-client.org