Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: NxWKvNWDRkLHjbq1adpgA0trz32qOywWrsmqdbjFNSg=
Subject key identifier: 58:0E:D7:1D:2E:E5:EF:37:34:C8:15:C3:7E:38:97:AE:A0:CE:69:74
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 0194BB299158110293873F516664F84DFA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 07:00:50 +0000
Manifest this update: Fri 31 Jan 2025 07:00:50 +0000
Manifest next update: Sat 01 Feb 2025 07:00:50 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: kstVUmfeJnUWF6pMmJUXh8b97vPThGRFWCEzlM7Y5Io=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:91:58:11:02:93:87:3f:51:66:64:f8:4d:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jan 31 07:00:50 2025 GMT
Not After : Feb 1 07:00:50 2025 GMT
Subject: CN=580ed71d2ee5ef3734c815c37e3897aea0ce6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:9e:f5:0b:c8:71:38:6e:b5:cc:cf:62:9a:
22:a7:1c:46:b1:e0:d6:2a:cc:b0:2a:56:53:24:78:
86:54:fe:9d:1d:ba:e4:0f:a2:04:2e:bd:6a:dc:f7:
8f:a4:68:f6:42:a7:03:e2:86:82:2d:3c:8f:6c:c7:
1d:bf:c9:d8:3b:90:94:1a:08:a2:db:68:eb:8d:01:
05:d8:9e:7b:18:5f:e0:f7:b8:40:04:94:c6:5a:83:
38:d3:de:05:a0:08:d0:25:ff:5b:2b:fb:da:57:df:
1f:1a:92:7b:c2:1b:0b:00:b8:8f:4f:c2:f3:d5:3e:
c8:f0:59:67:38:09:19:83:2c:69:12:25:c3:7a:86:
3b:5c:b2:9c:8d:17:66:b3:e6:c9:3c:02:17:ff:dc:
15:84:94:27:34:4b:e5:1a:91:88:12:21:c8:1f:e8:
bc:56:c8:30:79:22:3c:5b:0c:e2:b5:a3:06:94:fa:
5e:a0:a6:1b:72:7f:81:78:57:0a:cd:79:8c:e6:7f:
cc:2c:be:03:ce:85:41:4b:83:7e:28:bc:95:7f:3f:
85:a5:33:46:38:77:5c:16:de:37:4b:01:fb:59:21:
a9:19:c2:1e:ae:26:06:d9:3e:91:4c:da:e3:cf:84:
c4:93:49:75:b2:c0:93:dd:61:70:f8:35:86:27:fe:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:D7:1D:2E:E5:EF:37:34:C8:15:C3:7E:38:97:AE:A0:CE:69:74
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ec:d8:70:30:fe:3d:ff:7e:1e:bc:67:d6:52:28:31:6b:14:
e5:01:95:60:cb:18:ab:5a:05:c8:5a:dc:d8:64:6d:2d:b6:da:
e9:89:95:d3:2d:aa:48:7a:36:17:72:0a:ce:fe:e6:ed:31:3a:
2f:4e:3f:80:83:fc:08:27:ea:b0:bb:0f:b3:e1:59:f9:cd:8c:
65:2e:98:2c:04:20:63:f7:a4:84:db:c3:eb:cc:ac:48:3b:94:
19:bd:25:58:b1:33:13:f9:9d:92:26:cb:13:8a:19:98:d5:13:
d3:bc:8b:0f:93:dc:9b:1b:32:e6:41:ef:1a:94:e3:e5:36:08:
c2:d0:6b:67:09:f3:cc:e3:ef:96:56:d8:4c:87:24:2b:ea:f8:
00:16:57:9c:58:f3:81:f5:8e:1e:24:b9:98:df:78:31:a5:af:
ca:f8:ba:56:be:73:2e:35:8c:fb:db:84:02:53:6a:f4:05:0b:
52:51:37:4c:08:ac:45:a9:48:ec:6a:18:2f:ef:22:3c:01:f0:
77:8c:a1:17:80:16:6f:ec:99:a2:29:4e:61:d3:1e:2d:af:90:
eb:9b:d4:94:98:9f:9a:7b:e6:ec:20:83:da:21:7e:a5:b5:50:
4b:95:59:48:33:27:62:02:01:37:b3:28:f1:c8:1f:7b:32:12:
a2:36:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:42 2025 by rpki-client on console-fra.rpki-client.org