Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: N0Nfg7ilef7Ujk0hfrccOKKz0yf7PxOMoLtKymt41BI=
Subject key identifier: E9:8C:E9:13:88:53:0E:E6:6C:6A:20:B5:F7:96:1D:5D:C7:D5:A2:EB
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 0194BB29726AD6DE0BC52C71B5C08817F324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 04D8
Signing time: Fri 31 Jan 2025 07:00:43 +0000
Manifest this update: Fri 31 Jan 2025 07:00:43 +0000
Manifest next update: Sat 01 Feb 2025 07:00:43 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: 3hFNy0B5IamLgHQTMqZLJeYAHF0Ctk2EPZ5GaST1xb0=)
2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:72:6a:d6:de:0b:c5:2c:71:b5:c0:88:17:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Jan 31 07:00:43 2025 GMT
Not After : Feb 1 07:00:43 2025 GMT
Subject: CN=e98ce91388530ee66c6a20b5f7961d5dc7d5a2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:1c:1c:d5:ce:d4:22:a3:cd:dc:30:a1:7c:
9b:23:fc:80:0f:5c:a8:35:2a:50:af:36:30:c7:10:
47:5b:31:c8:bd:1f:a5:7a:e0:04:43:52:ef:9b:e7:
b6:63:b7:c0:55:80:96:0e:7b:04:46:0f:5a:1d:c0:
12:b4:f4:48:c3:b1:1b:48:21:28:d0:7a:21:dc:40:
fa:cd:c9:7d:32:98:6d:c2:75:22:50:09:4a:83:6e:
75:89:32:ba:52:f4:84:46:07:d7:45:a5:1e:14:f6:
48:f3:17:77:0d:7c:48:70:6a:48:fb:e9:ba:73:4b:
02:fc:82:41:91:b0:6c:dc:97:a7:a4:32:72:7d:ac:
ac:a3:30:a0:94:35:29:2e:bf:d3:cb:e5:c3:35:a9:
18:6c:4e:49:71:e7:6d:72:33:0a:41:35:02:89:72:
74:eb:e8:52:b7:84:08:ce:f3:94:c1:c2:72:95:fe:
25:33:f5:ce:34:98:15:90:5e:a8:ce:a0:ee:7c:01:
c8:44:61:bd:ed:2c:b9:3a:84:db:c7:ce:a2:a2:26:
91:6c:d9:45:f5:c4:ce:d1:0c:5a:2d:7a:fa:75:e7:
b6:3e:b7:29:95:01:b5:0c:81:e6:db:ab:ed:39:72:
35:e3:56:f6:e2:97:0f:95:ef:e1:8a:7e:53:8d:5f:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:E9:13:88:53:0E:E6:6C:6A:20:B5:F7:96:1D:5D:C7:D5:A2:EB
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:96:3b:5b:3d:7f:f7:a6:5f:6b:ed:99:3e:2c:c5:de:a6:
cb:fa:7e:34:2c:a8:c4:c5:d2:fa:d2:ab:53:f5:c9:aa:23:c3:
9a:08:e9:71:2a:87:37:02:d7:96:9d:75:8b:82:f1:f6:b0:07:
10:5d:0a:ab:98:2f:c6:37:93:89:3a:b6:94:93:48:0e:ba:b5:
39:63:30:46:7a:38:3e:4d:d9:e4:44:f9:2c:09:68:b6:e0:9f:
9d:5d:c3:66:de:2b:f4:0b:fe:e3:53:3e:5b:bb:d7:ae:7c:6e:
02:1c:29:83:c9:d9:18:bf:db:0b:d8:24:3d:57:0e:76:4d:4c:
51:3f:ce:88:9a:f3:54:c5:78:f9:b1:7e:ff:2a:a5:2f:21:b7:
6e:29:86:7c:c4:79:90:a1:b9:26:d7:f8:0f:4c:d7:a6:2a:9a:
50:33:46:ce:2b:89:ba:c3:59:4c:b6:3e:04:e7:95:59:b6:88:
9e:e1:30:26:a8:36:80:e7:24:4c:fd:ef:4c:2c:00:a6:aa:7c:
24:1f:b3:d5:e2:b9:99:4a:6f:fd:58:82:58:44:07:e0:f4:99:
94:9c:26:0e:1d:4c:3d:64:3b:9f:94:cd:b0:84:c7:86:52:fa:
8b:a1:d4:7c:75:2e:ca:7a:0d:ea:b5:b8:fa:93:fd:11:fb:b7:
5f:cd:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:22 2025 by rpki-client on console-fra.rpki-client.org