Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: HbaqKaVsN8K2BlGLu8udxxt7BrrcRckUMJ+LVY7ronU=
Subject key identifier: 9D:A7:39:34:98:35:FA:E0:B2:1C:A4:56:67:19:41:FE:D1:41:6A:93
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0194BA846F07843952974C11501E153C9AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: CbTJ+nG6ifuoA3z04kwELPAC2vVdAbsCTJTwe+vezfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6f:07:84:39:52:97:4c:11:50:1e:15:3c:9a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=9da739349835fae0b21ca456671941fed1416a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:73:1f:4e:4d:ae:3a:22:f2:73:3a:98:cc:
a3:6f:7e:d0:dd:cd:a6:c9:be:3a:e2:bf:55:e8:b0:
ee:44:81:2d:fd:f5:7c:63:6a:f1:3c:f7:28:e7:70:
84:bd:77:45:d0:a7:e9:8c:b6:08:31:72:6b:8a:ce:
14:ff:fb:02:e1:e2:87:5a:77:8e:d6:23:09:23:ad:
89:a5:13:f2:2a:b0:9f:52:7e:d4:61:ff:1f:08:85:
19:95:c9:f7:b0:bf:e5:64:da:08:bb:ea:30:0d:27:
2b:d7:77:05:2e:ab:7c:4f:ab:a9:1b:9e:83:17:fd:
eb:34:a8:4e:76:93:0e:0a:09:e7:e7:23:3e:4b:5d:
92:bc:56:22:fb:3e:a8:05:f9:41:e1:28:3d:ec:4e:
52:bb:b4:02:64:2a:b6:2e:ff:ab:e1:46:93:7f:1a:
c4:f3:1a:93:98:c4:b2:e9:f0:5b:d2:44:b2:74:e0:
d0:0c:80:db:2d:dd:27:3f:2e:44:22:1a:ab:af:29:
b9:56:2b:48:af:21:17:35:eb:e3:4d:f6:dc:9f:0d:
77:b3:d5:40:07:e5:af:1b:a6:ef:b2:66:e9:bc:5d:
23:3c:eb:b3:d3:bc:eb:68:c2:a5:1c:bb:69:8f:7f:
33:de:9a:c3:00:85:ca:9d:67:ab:d2:78:98:6a:29:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:39:34:98:35:FA:E0:B2:1C:A4:56:67:19:41:FE:D1:41:6A:93
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:ea:f1:92:18:99:24:ab:27:a9:c9:6e:49:67:0b:57:bb:
79:6d:d8:52:cc:69:62:a6:df:39:85:5f:62:2d:67:6c:01:72:
bd:25:c8:75:91:f7:b3:45:88:33:27:4b:38:50:a3:2c:7a:aa:
a6:56:19:6e:d0:6e:c2:41:d8:b6:a7:e8:8f:b8:05:6f:3a:10:
b5:eb:b6:71:8a:e2:57:12:5a:25:c5:b3:4a:e0:7d:fb:4b:15:
95:16:3a:a8:fb:12:b2:24:a6:f7:81:7c:36:75:d0:38:76:47:
c8:15:36:e0:c5:b1:a5:c7:56:e6:ec:83:a2:5c:75:c0:b4:66:
ab:8a:18:8f:c1:c7:29:d3:66:bc:b1:17:fa:e8:0e:f9:5a:3f:
d3:bf:eb:cf:f7:01:36:4e:6c:12:19:c3:32:c5:bb:3f:2f:19:
fb:c3:5a:d2:c5:bf:b6:62:ad:f9:8c:68:58:37:fe:cd:3e:72:
20:b7:eb:80:fb:05:07:70:5e:46:ad:51:05:89:50:e1:36:20:
28:30:a4:04:e2:ac:ef:2d:bc:99:f3:af:f7:6b:ed:e3:78:c4:
f9:b3:7a:6a:bd:ba:fd:55:13:f6:30:fa:e7:31:32:c6:ae:e2:
99:0b:97:36:bd:d9:2c:06:a8:de:5d:68:a7:56:c6:8a:d2:ef:
75:65:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:06 2025 by rpki-client on console-fra.rpki-client.org