Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: hYihrJJK3v/sjNvSKR7UOSDALnKXJorYiG+9UMmkUoc=
Subject key identifier: C3:30:73:E1:C8:EC:B2:1C:3E:9B:D0:25:4A:DF:FA:15:68:1D:D2:31
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0194BB2962EB02483D43EEB74DDF562BAFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 0BB0
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
2: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
3: U3ZZ0MP6-WvC7DCbTK7IROY_N18.roa (hash: /zW6qkrMBvzd3apM3F2o24ZiFtjP8bAURrhlU84Fgj4=)
4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
5: gVvoQC5WLC_irZeVLNyYcK9Hyy4.roa (hash: L2JvAwIemBTM0EMeQ48+bq59AHbI1bQ47BUq0nUpm24=)
6: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
7: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: Wmx93tBf92AHT3hqBcdhI6/xjdHuJjo8l5yBRiKFpSA=)
8: sUVG_n72Y0BsPTQLs7HdE3k6hqY.roa (hash: 5DGMMzTfJHjceBlrAlCZ8hf2mikIq6NUlE8LlW1OeFc=)
9: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
10: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:62:eb:02:48:3d:43:ee:b7:4d:df:56:2b:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=c33073e1c8ecb21c3e9bd0254adffa15681dd231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:9d:51:5e:19:80:a2:06:14:92:b9:e9:6c:
e7:56:67:65:4e:28:90:5e:0c:cc:ff:e1:2c:5e:09:
f7:1a:86:94:c0:f2:40:e8:d2:3a:1c:8a:12:4d:79:
66:1a:71:15:9c:d4:cf:f8:92:98:f3:9e:67:f9:17:
90:6d:d6:29:fa:75:c2:bc:87:4e:5c:8a:5d:9d:fa:
5c:a6:18:99:52:c3:56:54:ca:3c:30:67:38:3a:17:
67:90:e1:96:0b:0f:9c:95:17:a9:7f:60:d7:a6:d1:
16:18:20:ad:ea:54:c3:d3:d0:e6:37:3e:53:17:51:
d1:b0:0a:3d:cd:3f:bb:5b:f8:a2:c6:ea:e5:47:79:
75:7e:33:20:4d:47:2f:66:76:08:f1:5f:71:5a:3b:
be:34:6c:97:30:58:ea:b0:b2:35:ef:42:cf:f3:25:
e0:a3:15:e3:66:81:6b:f0:ce:39:eb:d4:4e:66:55:
fa:c4:fb:65:f7:0f:d0:87:32:a8:fe:99:01:b3:ed:
85:db:a2:ed:fd:b7:47:af:68:69:3d:e4:a5:cd:8f:
b7:82:95:77:e1:98:0c:4c:fd:f5:17:13:fd:fc:28:
a5:fc:f4:9a:62:e0:6d:be:c3:b4:d0:62:13:a7:a7:
11:90:98:b5:52:11:9e:7a:3d:3c:52:90:19:6e:69:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:73:E1:C8:EC:B2:1C:3E:9B:D0:25:4A:DF:FA:15:68:1D:D2:31
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:55:4d:60:02:2d:7b:73:a9:21:83:5a:24:b0:84:29:24:
7d:f5:a7:a1:58:f5:ea:0f:38:b4:0f:10:f0:dd:df:b7:2a:10:
83:03:c0:02:e7:e5:df:d6:57:5a:9a:af:15:c0:79:10:53:1d:
57:c6:61:1f:a3:67:8e:d1:0a:dc:c9:b7:e4:c1:e2:90:da:c9:
33:29:4a:3e:6e:73:81:a1:6d:89:c3:e9:d3:0c:0b:5a:7b:a4:
eb:c1:5c:00:92:d9:25:48:ba:0e:0b:bf:c6:95:0b:d6:10:72:
04:2b:03:5f:96:27:f4:70:81:83:4e:78:88:f2:82:87:af:8d:
cd:bf:b1:a5:f0:f4:9d:93:75:fd:75:27:5a:ed:12:09:b6:a1:
a3:88:bb:e1:23:5c:64:91:7f:4b:a0:a6:9d:4f:65:db:34:4e:
8f:98:5a:fc:fb:35:5d:dc:ce:16:a7:5c:4d:13:ea:14:49:3b:
7e:64:77:2e:f3:92:68:82:87:65:19:4c:bb:d5:d9:85:63:e4:
fa:63:e7:0f:69:f8:a5:20:9a:20:56:dc:59:e4:a5:b6:c0:9b:
47:1b:56:4a:53:8e:16:eb:cd:4c:46:29:71:9d:79:d5:b3:8c:
8d:56:6e:4c:25:50:8e:e0:7d:69:ff:2a:55:1a:80:64:dc:96:
c1:e9:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:09 2025 by rpki-client on console-fra.rpki-client.org