Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: bOruJxv11IpJ9o/yU/yleA1SJbYGX93LUjW+v5A8w/Q=
Subject key identifier: D9:62:9F:54:F4:06:CE:66:70:26:D3:0B:C8:9D:EA:1A:30:90:DD:B9
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 0194BA84B5943FE02B66B934D8AA14EC1DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 0FB8
Signing time: Fri 31 Jan 2025 04:00:46 +0000
Manifest this update: Fri 31 Jan 2025 04:00:46 +0000
Manifest next update: Sat 01 Feb 2025 04:00:46 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: wlj5AT0jw3eobO2CIVlGcfc60njPJZTSZP5zESoN1LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b5:94:3f:e0:2b:66:b9:34:d8:aa:14:ec:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jan 31 04:00:46 2025 GMT
Not After : Feb 1 04:00:46 2025 GMT
Subject: CN=d9629f54f406ce667026d30bc89dea1a3090ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:b6:9b:4f:f0:6a:5b:11:f4:bf:64:ab:b2:
79:b6:bd:7d:1a:7f:bb:38:08:b9:1b:e7:7c:ab:fa:
8b:71:7d:d0:f2:92:87:43:49:00:92:c1:80:e4:05:
9e:d9:85:e3:1b:a6:91:1a:87:65:18:02:eb:61:c9:
14:eb:ca:ef:6f:f6:7a:75:d0:17:e9:c7:1b:69:ba:
ed:1c:8f:6a:a7:3d:66:a5:d1:ef:7d:65:09:8b:e8:
fc:9e:bf:36:c4:8f:6d:d3:62:7f:a2:26:bc:0b:7b:
ee:a3:1f:0f:29:2e:64:78:d6:f1:c3:58:63:d0:20:
42:7c:80:7a:1f:a0:64:7b:fc:01:f0:6b:34:57:fc:
53:7a:70:6d:76:fd:01:08:93:9f:4d:67:d0:b7:99:
db:d1:03:63:fe:77:be:72:00:02:f4:b7:37:fe:f9:
ab:18:cc:b7:2b:7d:af:f5:fc:22:b9:a3:28:85:68:
20:de:57:09:f3:71:86:09:03:09:7e:28:0b:a7:85:
54:3e:65:ae:9f:1e:d3:20:da:53:7e:fa:4a:4c:06:
aa:c8:3d:29:92:31:c1:c5:4c:8b:16:2e:98:51:2b:
42:2d:d8:e0:12:e0:fc:52:dc:c9:c8:80:4f:fb:5e:
c7:99:9f:86:73:4a:f9:97:11:10:40:bb:96:9f:45:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:9F:54:F4:06:CE:66:70:26:D3:0B:C8:9D:EA:1A:30:90:DD:B9
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:10:fd:71:44:c1:eb:0b:f6:be:22:12:27:e4:1f:50:10:
00:a1:29:8b:97:67:05:e2:77:af:da:83:cd:74:3a:a3:d6:57:
2b:59:c8:4b:61:0c:81:e9:ac:58:b0:f1:74:df:fb:bd:c8:5f:
89:9f:b1:78:b8:c6:e2:f0:13:93:c4:2c:0c:b8:04:92:c8:0b:
42:f1:27:56:3d:72:a1:84:3b:40:e6:99:64:eb:d4:83:f2:35:
58:32:82:f0:79:46:e0:c3:d3:eb:e6:16:ac:12:d8:a1:c3:aa:
7a:60:35:8d:ff:a3:80:27:92:0a:ac:4a:50:9c:38:aa:2a:20:
5d:f1:2c:89:c2:9e:0a:98:0b:63:4d:40:ad:c1:7b:b2:5d:be:
93:ee:a2:be:dd:7d:9a:01:86:81:be:d6:fb:77:26:62:34:e5:
52:60:89:15:01:3c:bb:0d:f8:af:b3:f4:fd:a7:65:e2:6c:f7:
da:da:7a:91:e4:b8:98:b0:5e:3b:dd:38:30:cc:49:1b:a9:e3:
2c:3a:5a:fc:3c:45:be:63:91:9f:fe:21:ad:f6:67:08:80:d3:
96:d2:84:fe:e8:92:66:a7:67:90:3d:fd:d7:6b:ca:5b:e6:ac:
5b:c7:2a:b4:8f:87:bc:83:b7:a1:ae:a7:18:db:19:c1:62:b5:
c4:61:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:46 2025 by rpki-client on console-fra.rpki-client.org