Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: b1fMNibhqy342s8BEPRy0kpM40psaT6P7IABjGQwRwo=
Subject key identifier: 8E:49:E6:44:C9:43:91:75:A1:04:BA:49:F5:C1:D8:C0:D3:9C:13:AB
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0194BAF2402C5CC9A30674EFE7231E45BDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0B3E
Signing time: Fri 31 Jan 2025 06:00:25 +0000
Manifest this update: Fri 31 Jan 2025 06:00:25 +0000
Manifest next update: Sat 01 Feb 2025 06:00:25 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: degpCmX2UQcXsTc3eJsMOxBHVDewtJUIm7BordPEvRE=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:40:2c:5c:c9:a3:06:74:ef:e7:23:1e:45:bd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jan 31 06:00:25 2025 GMT
Not After : Feb 1 06:00:25 2025 GMT
Subject: CN=8e49e644c9439175a104ba49f5c1d8c0d39c13ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:5b:5c:29:c6:53:84:b0:76:2e:47:ee:5c:
d2:f1:d1:af:2c:05:fe:4f:cd:9f:f9:36:af:64:e8:
c5:b4:da:84:7a:0a:b3:67:96:ff:ae:9c:3a:c3:87:
e6:bb:c5:f9:36:01:25:d4:a0:c5:1a:57:7c:97:29:
cb:aa:32:8d:25:0f:af:a8:1d:2e:64:9c:cf:5a:38:
18:ed:06:8d:cc:80:e4:56:d8:49:b6:09:3f:8c:b6:
ff:96:7b:3a:3e:7f:ed:d7:de:9d:2c:5d:0f:19:b9:
aa:42:c9:8b:39:0f:e5:4b:33:4a:10:25:12:31:34:
20:36:14:ff:d2:bc:5b:68:f8:a1:d8:da:d5:71:9f:
a5:16:30:15:7c:d1:61:53:9d:de:87:e0:f0:7f:89:
1a:1c:95:d0:80:89:61:96:49:26:57:6f:02:0d:6f:
65:5b:06:a2:bd:a8:e1:76:52:95:02:b5:54:98:a0:
46:38:2f:f7:7c:42:d7:85:92:65:a4:8e:df:ed:e2:
2f:2e:66:8d:e5:47:23:ba:22:c3:38:4b:4f:76:16:
88:7c:17:b4:dc:b5:55:9c:db:0f:53:a6:c9:df:d1:
9c:21:1c:b9:45:39:3b:43:31:83:87:19:12:cf:f0:
be:07:57:cb:26:c4:d8:53:83:8a:9e:c5:bf:a2:3a:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:E6:44:C9:43:91:75:A1:04:BA:49:F5:C1:D8:C0:D3:9C:13:AB
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:52:8d:de:61:02:18:4b:81:e7:d1:1d:01:b6:d9:58:7d:
eb:1e:0f:3f:68:ad:92:12:8b:e6:c7:7f:46:58:dc:6f:c7:99:
0c:04:03:7c:3a:eb:f2:1d:24:e6:ac:a6:d4:78:97:3f:bd:07:
21:0c:ec:00:32:30:4f:b9:e5:c2:98:31:7b:ef:29:1f:8f:61:
8c:ba:42:bc:72:fe:88:6e:ee:02:5e:a9:75:23:09:0d:15:09:
3a:de:55:96:05:5c:ed:06:4f:93:67:ba:14:42:e1:4c:a9:22:
75:fe:a4:ac:67:eb:e9:d5:e3:96:f8:76:1e:25:4b:bf:61:23:
2b:81:72:28:ca:e8:e9:4a:9f:50:51:1b:22:12:89:02:b2:2d:
65:df:c4:3e:d3:18:30:bd:98:96:37:c5:08:6d:29:51:69:28:
42:a9:ab:3e:6e:4c:0b:47:c8:3a:4c:d0:e4:84:b0:ff:ca:a8:
84:7f:07:1a:32:65:aa:fa:7e:fd:96:54:48:18:c2:47:e8:eb:
66:68:45:89:30:ac:bc:f4:02:84:6e:2f:9e:38:b0:68:ff:ee:
37:80:1b:d9:06:9e:f2:fe:aa:8f:63:58:dc:76:fe:db:85:b2:
31:af:e0:f2:1c:b8:fb:bd:2f:67:bd:e8:26:ee:42:85:0b:11:
e9:94:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:03 2025 by rpki-client on console-fra.rpki-client.org