Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: Hj5rwdcy+F/hIJsrN3DhN/DMoCeAy+bIs4FWqHfU2rM=
Subject key identifier: 8C:2E:CA:6D:38:1B:BE:17:50:94:56:31:F9:1F:CF:27:AD:51:0E:8F
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 0194BAF23624BEDBE0251E759D86A55AA7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 10D4
Signing time: Fri 31 Jan 2025 06:00:23 +0000
Manifest this update: Fri 31 Jan 2025 06:00:23 +0000
Manifest next update: Sat 01 Feb 2025 06:00:23 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: npf/XZCqbOfTpMWbijJCWNWeX9qsih2SRNaHUrvCTuY=)
2: pTXcU1-027t2C2Vu9gFY335XMJc.roa (hash: VazQFR0+HiS2IaElmJ/i9QSFb0To3uFvpZ1ELlNt0rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:36:24:be:db:e0:25:1e:75:9d:86:a5:5a:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Jan 31 06:00:23 2025 GMT
Not After : Feb 1 06:00:23 2025 GMT
Subject: CN=8c2eca6d381bbe1750945631f91fcf27ad510e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:99:e0:58:7b:66:87:33:bf:d2:b7:f6:d9:
28:31:4f:0c:6f:ce:4f:80:23:dc:5b:2f:35:91:48:
cc:2e:93:eb:45:7b:f0:f9:7c:98:30:94:ee:ff:cc:
df:77:aa:0b:04:23:ba:c9:c2:71:26:03:f1:00:1a:
e6:6e:10:70:78:99:e4:52:b0:20:e2:0d:c0:74:8e:
34:89:8c:04:4c:63:75:bc:fe:24:f9:68:07:2b:c4:
3d:16:32:f6:96:84:17:d6:1e:32:a8:18:2a:2a:e0:
0e:5c:69:6f:38:fb:8e:a2:44:9b:09:98:7d:42:af:
6c:43:d9:cf:af:9d:82:83:9a:5e:bf:be:29:c1:3d:
f1:80:0e:aa:ec:42:07:8f:3c:9c:9c:0f:04:aa:f7:
66:fe:bb:16:91:85:8d:c2:69:52:d2:33:36:6a:20:
dd:ad:c0:2a:c5:14:46:b9:79:99:9b:0b:30:a9:25:
f4:47:79:94:6e:f3:91:07:2f:1b:a2:5d:54:ce:7e:
f1:5c:97:18:c5:84:5a:d6:5b:ac:19:13:c8:f1:c9:
c9:72:1a:d0:80:5f:98:64:c7:c0:c1:4a:80:21:e0:
78:60:9b:8f:e7:36:60:6b:87:72:d9:4a:1d:1b:4d:
c2:6f:e2:0b:f3:3d:d7:05:a1:b1:18:0a:60:72:8a:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2E:CA:6D:38:1B:BE:17:50:94:56:31:F9:1F:CF:27:AD:51:0E:8F
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:3b:ae:30:ec:af:3f:ef:fb:25:cf:6e:be:1f:2d:f0:01:
2b:45:f0:27:77:02:67:77:f1:e5:ad:81:9a:20:2e:84:27:c9:
f4:73:3f:d9:9f:21:1b:cf:df:bb:b4:93:be:64:b2:8e:fc:22:
6b:5f:68:49:ee:fe:e0:2b:25:cf:e4:ea:b8:cf:21:a7:80:61:
4f:14:b0:d4:4b:e7:0a:b2:0e:24:5c:d9:a3:29:97:b6:39:2c:
e8:dd:c7:93:7b:04:6f:01:08:53:71:a0:b8:52:3a:f1:4c:bc:
b7:df:94:5b:14:4a:25:82:37:f5:9c:9c:d2:54:42:4e:9b:7c:
bc:67:12:ba:76:27:b4:3a:a5:65:83:76:7d:54:ed:a3:c0:f5:
10:29:1f:ba:0c:dd:70:dd:7a:e7:6e:7e:90:66:d7:35:2f:28:
75:ad:bb:fa:a0:fb:f4:39:d2:c7:d9:46:56:67:fa:b7:53:57:
bd:10:48:91:15:1c:63:b3:02:74:54:b2:11:ce:44:49:6d:45:
f4:76:56:0c:27:b7:59:96:22:17:ab:fc:61:5e:c5:fe:64:45:
8d:bd:78:ee:b3:a8:93:af:79:6d:6f:b1:b4:bc:b5:77:4a:07:
ee:b6:db:c7:38:39:69:5f:a7:7d:c5:45:b7:75:6c:8d:1e:9d:
07:0e:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:40 2025 by rpki-client on console-fra.rpki-client.org