Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: svE8A83GgkCJN3DxmzoEcZPZoulJsizJVg4xd5hdFh0=
Subject key identifier: 56:AF:31:8A:54:D1:D1:7B:8B:31:8D:24:4E:70:B6:6C:B4:3A:AD:12
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0194BB2983F39FEA8599FA8E524C780F977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0175
Signing time: Fri 31 Jan 2025 07:00:47 +0000
Manifest this update: Fri 31 Jan 2025 07:00:47 +0000
Manifest next update: Sat 01 Feb 2025 07:00:47 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: HrCg8obSxZlstZXq5C/8snxxULOD5isagAqxGrvtFAo=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:83:f3:9f:ea:85:99:fa:8e:52:4c:78:0f:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jan 31 07:00:47 2025 GMT
Not After : Feb 1 07:00:47 2025 GMT
Subject: CN=56af318a54d1d17b8b318d244e70b66cb43aad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:09:6d:7a:57:b5:8d:4a:46:60:b8:1d:84:
c1:30:83:4c:8b:b5:79:de:a0:04:be:ee:92:50:67:
51:d7:48:f1:5d:12:07:ec:a0:2d:9e:ca:00:55:f0:
15:4a:65:76:77:9e:7e:3e:cb:de:85:15:54:74:27:
e4:9b:90:a8:59:6a:5e:71:ca:eb:a4:b1:dd:39:74:
90:76:d1:d3:a0:c5:ec:e6:cf:f6:94:98:06:bb:d1:
c9:f3:9b:94:2c:a2:9b:0a:d0:e6:52:33:8b:ad:f6:
14:82:4f:f2:2e:15:4a:49:f3:db:f1:4c:86:24:0f:
1b:21:3e:47:09:19:30:73:8d:da:4e:4e:37:ee:c5:
98:91:e2:92:fd:07:50:8d:9c:a4:8a:02:08:49:7f:
ea:56:69:48:52:28:bf:0d:21:5d:8a:b3:56:73:13:
d3:7e:e8:fc:1d:47:a0:77:70:54:84:56:21:9d:7d:
22:cd:51:02:2b:74:38:43:5e:80:32:17:c6:2d:30:
cb:54:21:17:4b:f5:9f:4d:22:df:df:d4:1e:36:1e:
04:22:19:74:ef:20:e6:64:7f:81:60:fa:b0:43:4c:
dd:9d:15:71:7b:31:67:33:f6:4f:29:cd:ec:41:41:
80:56:0f:8a:1f:e3:a3:f8:5e:42:84:6a:f9:14:4f:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:31:8A:54:D1:D1:7B:8B:31:8D:24:4E:70:B6:6C:B4:3A:AD:12
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:ce:04:66:80:4f:d4:e6:1f:ff:b5:99:23:cc:2f:d0:e6:
49:ac:11:59:7f:aa:4f:b0:e4:f8:6b:84:dd:53:51:52:44:41:
67:2c:bc:90:85:85:1a:c1:9c:71:0c:c2:11:8c:cd:eb:11:c3:
f5:52:27:5e:c0:7c:24:e4:ba:93:5e:fb:bd:66:1c:64:d9:9b:
67:ae:6e:6d:af:44:4f:c3:8e:2b:0e:d4:ed:23:c8:71:f9:bb:
e0:ed:05:8b:ea:77:55:59:f7:bf:bc:9a:6e:e6:44:99:8c:a8:
c4:b1:06:b9:a9:36:a7:1d:9d:4a:de:fb:5b:b3:38:93:55:80:
19:72:31:89:05:ac:5e:e6:43:ec:1b:3b:f2:37:d4:f2:e7:fc:
29:cd:d0:ef:4f:4f:77:89:a9:a0:71:15:3b:0a:de:6c:df:ca:
6a:f6:02:5c:56:a9:1d:8c:a8:de:d9:ed:8f:c4:64:f2:e3:b9:
a8:ce:44:47:d4:ca:02:d6:de:02:d2:97:3c:d3:f7:e2:e4:e9:
11:79:e8:ac:a9:68:51:52:72:f7:36:dd:c5:d1:e4:73:08:2e:
a4:0c:9c:7c:42:05:a5:ff:19:59:d8:54:63:47:9e:f5:38:74:
fc:f7:45:af:e6:d8:fa:c8:86:ea:d7:a2:e0:e6:7a:de:75:a9:
0f:b9:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:44 2025 by rpki-client on console-fra.rpki-client.org