Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: w+RWWyw/4asRRvkCzXg8sCvLviVxhfbLW7Kf94iQNoU=
Subject key identifier: CC:57:06:78:4E:08:A7:96:25:99:C2:F8:56:E5:46:F2:F1:6A:9E:BC
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0194BAF248DEDC345476E5D8C95728D4415C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1319
Signing time: Fri 31 Jan 2025 06:00:27 +0000
Manifest this update: Fri 31 Jan 2025 06:00:27 +0000
Manifest next update: Sat 01 Feb 2025 06:00:27 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: fXbUB9IUYsBENBJWwfsc70SbRp7xsJVpkWrTJFwx9V0=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:48:de:dc:34:54:76:e5:d8:c9:57:28:d4:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jan 31 06:00:27 2025 GMT
Not After : Feb 1 06:00:27 2025 GMT
Subject: CN=cc5706784e08a7962599c2f856e546f2f16a9ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:31:80:af:9d:c4:73:3b:67:bc:08:61:12:
09:67:57:e4:4f:cf:d8:7e:e5:a1:ff:24:6c:f9:b6:
40:3d:a3:f4:f0:c7:bf:90:3d:2a:0b:7b:d4:4b:7b:
43:dc:99:03:23:1c:77:b0:b0:14:74:61:f7:ea:da:
b8:5a:2d:ea:9f:db:e8:74:03:79:b7:8f:0c:cd:25:
33:a0:f8:66:ba:87:d6:10:0e:8f:e0:5f:fc:60:f3:
0e:68:eb:ba:f8:ad:2e:d2:a7:92:e8:46:29:ff:2a:
7f:86:70:4f:0e:2c:02:e7:4d:3f:0b:70:70:8f:aa:
a8:84:29:d1:dd:48:11:ee:3c:6e:ca:13:cb:0a:3d:
61:75:5d:44:c4:28:14:f5:aa:4e:50:43:be:e9:4d:
40:13:2b:3c:aa:87:ff:d5:fb:87:ff:b0:c9:71:c9:
dd:ac:61:fc:8a:c8:47:bc:4d:bc:af:b3:2a:88:a4:
9e:53:92:2f:4c:c5:d7:3b:40:7f:d0:1a:ae:0c:57:
2c:88:7d:83:56:9c:76:1d:42:8a:fc:74:2e:fe:4e:
c9:83:9d:d2:1c:e1:3d:35:8a:8a:4c:ae:1f:07:f0:
55:6b:a1:d6:e2:c9:a5:4f:2c:d5:3d:a0:dc:a5:72:
d5:22:f1:cd:d3:d2:61:53:94:b9:24:0b:e5:fa:5b:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:06:78:4E:08:A7:96:25:99:C2:F8:56:E5:46:F2:F1:6A:9E:BC
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1e:a8:14:1e:a3:a3:30:d0:6f:90:6b:eb:0c:7e:15:ef:54:
0d:06:74:c9:0a:02:71:93:bb:14:66:95:d9:7e:2c:f7:fd:9e:
9e:85:1e:6c:c2:54:53:0a:c3:d7:3f:7b:c8:b4:ba:72:19:1e:
91:9f:ed:e8:35:71:7c:a0:01:af:68:6c:3f:5f:5b:b0:44:8d:
67:a5:52:5e:ba:3b:fe:bc:f4:75:7c:af:f9:7a:b1:87:93:05:
66:73:e6:3c:5f:be:b9:a8:90:03:28:5f:a2:bb:eb:49:b4:98:
de:00:54:bb:17:7f:90:6c:16:85:9f:05:52:16:cc:ad:b7:d5:
ec:f5:5e:dc:4d:89:f2:24:bd:4a:e7:92:4b:84:90:f6:8b:04:
90:70:38:1c:6c:d1:74:98:59:b9:60:69:92:82:ee:64:c2:7f:
85:d8:54:e1:3a:b1:b1:a0:81:80:33:42:f8:4b:6f:eb:26:0f:
97:f9:17:69:2b:46:1b:2e:8b:99:19:83:e3:a6:3b:b6:9f:55:
fc:82:f3:36:dd:76:9e:16:b6:a7:ef:47:14:de:fb:a2:a4:d5:
1e:42:de:08:8e:2b:28:0a:2c:bd:b7:0c:b8:23:80:6e:67:d1:
54:ef:c8:b3:24:4b:31:cb:30:1a:58:07:01:e4:82:e2:59:27:
18:5b:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:14 2025 by rpki-client on console-fra.rpki-client.org