Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: 1EuR5wwFr8BEC1RiLLGXl+ArYQjfisggA6RPHEwHoVM=
Subject key identifier: 5F:96:F1:5A:94:60:CA:D4:59:8B:AE:7C:9B:25:B1:6E:1E:53:CA:94
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0194BA8446C57A1FCA82B059703F1A010960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 0F09
Signing time: Fri 31 Jan 2025 04:00:18 +0000
Manifest this update: Fri 31 Jan 2025 04:00:18 +0000
Manifest next update: Sat 01 Feb 2025 04:00:18 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: sLSU8T75qlDC3u29EwoqMt7UkjKkq56twxX6egnhEkQ=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:46:c5:7a:1f:ca:82:b0:59:70:3f:1a:01:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Jan 31 04:00:18 2025 GMT
Not After : Feb 1 04:00:18 2025 GMT
Subject: CN=5f96f15a9460cad4598bae7c9b25b16e1e53ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:d1:b0:05:e3:49:15:68:31:02:d1:b3:35:
53:86:ce:1c:e1:cf:e5:4c:cc:78:9f:1f:bf:9a:8a:
01:30:31:96:70:29:9a:a2:50:fa:5e:46:a3:15:22:
d3:4e:a1:0f:bf:cd:40:6a:8b:af:b9:f4:06:ac:4c:
b7:5e:c4:3e:e9:15:42:80:8b:b1:4c:36:d3:b1:83:
e4:67:ab:e0:86:e1:18:d6:36:c0:b5:74:37:80:6a:
95:c4:8d:b2:b9:10:e6:d8:8e:16:7c:82:13:ed:25:
d0:5d:2b:3f:5c:1f:74:bf:fc:0b:b0:4b:0b:cc:34:
c9:3f:d5:54:64:8b:68:d5:d8:73:ac:b1:0d:3d:23:
0e:38:da:72:ac:c8:5f:c0:0f:0c:28:25:4d:d2:b0:
c8:f0:55:27:e8:2d:7d:c3:0a:7a:68:8d:6a:6c:93:
87:6d:90:84:db:ab:ac:12:ca:e9:20:e6:80:a6:90:
16:e8:fc:05:75:aa:0b:32:59:51:f8:90:46:47:54:
30:92:68:1e:50:b8:3a:12:36:7e:96:92:a9:59:0e:
ac:67:b7:9e:b8:b0:58:f5:05:24:71:e3:8b:6a:4e:
74:5d:de:63:fb:97:83:11:64:70:78:d2:f2:09:8b:
8a:e2:82:42:49:4b:86:3e:0f:3a:73:24:f5:e0:0a:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:F1:5A:94:60:CA:D4:59:8B:AE:7C:9B:25:B1:6E:1E:53:CA:94
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e8:22:0d:bb:1a:55:3c:d4:6e:35:9b:70:17:b3:2b:af:b5:
91:a9:d3:d0:f5:9c:d2:1f:31:f4:f7:bb:d0:b4:4c:23:bf:46:
8f:d4:44:a2:48:0f:de:81:91:c3:62:c5:51:7b:cf:64:de:3c:
57:af:c6:15:9b:d4:38:2a:d7:cd:f1:23:e7:8e:64:a5:1a:36:
ad:41:1a:4e:61:57:bc:04:5a:cc:5e:08:4d:eb:80:4d:7d:33:
d6:28:26:b4:08:ab:b3:bb:af:3a:4e:21:98:93:69:40:0d:f6:
da:d8:09:99:38:11:9b:e0:ed:38:1a:f7:7e:35:71:69:28:6a:
84:8a:2d:b5:d5:1e:e6:69:f9:4e:ba:85:72:a1:9b:ff:02:67:
5c:3e:91:d3:3a:ec:6c:03:3a:f2:fc:2d:cd:82:c3:ab:55:32:
8e:0f:83:e6:3a:ba:af:37:2d:67:12:47:73:9e:17:d9:af:c5:
00:a4:b1:5d:96:4f:bf:87:4d:7e:92:26:d0:80:23:81:23:e8:
48:a7:f6:20:fb:2d:6e:a5:53:49:53:1b:8a:6b:76:55:2a:cb:
f0:9c:a5:8c:e1:8a:07:ca:e4:56:05:7c:03:97:6b:12:3c:bd:
7e:ba:bb:ab:96:ff:5d:48:06:cd:e7:ff:69:a7:e9:53:0c:3b:
56:f5:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:12 2025 by rpki-client on console-fra.rpki-client.org