Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: 88b9PfBLa1bVbDsGANHfIa1g8dZlxqrmrxs+6rtDW8g=
Subject key identifier: C2:E7:1C:A4:1F:D0:88:6C:29:B9:EE:C0:0C:45:23:F7:58:D4:D8:DB
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 0194BB5FD73FB69E7920F687281299C76A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0B64
Signing time: Fri 31 Jan 2025 08:00:07 +0000
Manifest this update: Fri 31 Jan 2025 08:00:07 +0000
Manifest next update: Sat 01 Feb 2025 08:00:07 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: oJbthDJnE3uWvhEHpU/xe+Xi8o5v/f5dY+FRKDUS0x8=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d7:3f:b6:9e:79:20:f6:87:28:12:99:c7:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Jan 31 08:00:07 2025 GMT
Not After : Feb 1 08:00:07 2025 GMT
Subject: CN=c2e71ca41fd0886c29b9eec00c4523f758d4d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:a7:5c:83:97:0e:08:07:9a:c8:a2:8b:07:
c3:57:29:a9:c5:3b:a3:58:7c:a5:92:3d:68:ec:ef:
26:c7:0e:de:32:f3:8f:fe:a4:33:76:df:12:cf:ac:
e0:e8:0e:4d:7b:67:8e:f6:25:af:04:6a:6d:de:96:
e3:fe:bb:e0:c5:f8:df:28:86:14:d1:0c:d1:e5:fc:
a3:c3:87:51:2f:f2:7b:bb:24:8f:d3:b7:26:05:d4:
7b:b3:e3:b6:72:e6:db:06:60:58:82:48:d1:da:3b:
c7:bf:8e:ed:8b:7c:6c:89:0d:21:50:78:81:9e:98:
7d:34:89:8f:72:19:e1:2f:89:0a:84:28:6f:30:c8:
18:36:f9:2f:5b:24:1f:9d:f7:8a:88:e3:a4:9f:f6:
f0:f9:98:f8:53:ea:35:56:25:88:71:c2:63:d6:81:
08:ef:94:67:10:16:e4:c4:c1:20:7c:a1:3a:3b:72:
9f:bc:3d:5c:d3:1a:39:1b:76:f6:9b:64:7b:13:37:
19:8a:2e:17:42:8e:b5:c9:fa:80:f0:23:fa:a4:24:
eb:d4:76:59:c8:52:6b:e5:a4:29:fb:31:50:1f:fa:
23:29:5e:9d:8f:46:d4:3b:35:51:9b:a5:ce:bf:47:
ff:e4:fa:2b:46:a8:78:b5:12:90:4f:74:e4:24:25:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:1C:A4:1F:D0:88:6C:29:B9:EE:C0:0C:45:23:F7:58:D4:D8:DB
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:13:9a:27:94:f5:a8:b1:e1:d0:7f:9f:0c:d6:e6:7a:69:
7a:56:f8:32:79:ab:00:df:a3:d3:ce:24:a1:58:bb:68:ac:48:
88:40:3f:de:31:6a:1d:ad:de:0f:d9:f2:e3:4b:1d:cd:aa:8c:
1f:81:a1:e3:51:01:fe:ec:4f:1f:cb:82:69:4a:ba:16:67:2d:
cc:fc:fc:f3:f0:6d:31:0d:7a:26:03:eb:9b:8a:05:b0:3c:4b:
97:be:54:ff:cf:7d:54:36:f5:ba:b0:60:0d:58:09:10:af:ab:
2d:fa:da:9e:49:c1:8f:47:98:19:d6:5a:eb:19:c4:16:f3:b5:
4d:02:ca:7f:95:fb:3f:52:a3:3c:be:0d:d0:9c:53:1d:92:97:
9d:df:0d:f8:04:91:cc:56:96:2d:d4:f9:d9:12:3d:57:27:2b:
c0:cc:08:0b:53:d4:f4:0b:2e:b6:fd:8e:44:68:2c:65:65:d3:
08:60:de:c4:d7:a5:3d:94:f0:44:b6:e1:68:3d:b3:63:6e:a4:
36:35:c4:7a:91:d5:55:1d:30:04:a5:51:bb:5a:19:0e:34:12:
c7:f9:d9:4e:c9:af:8c:dc:c7:ca:fb:39:a6:ed:68:ff:31:05:
3a:ba:bd:a5:6f:75:97:06:71:ab:28:c6:08:68:1e:ad:f1:aa:
12:e2:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:14 2025 by rpki-client on console-fra.rpki-client.org