Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: TFbeauIhHA3JHTCYRNd86CKYWzhVfN1Bn+ch40SYsXA=
Subject key identifier: 21:CC:02:21:D2:DB:24:3C:DA:A4:8A:29:CA:E1:8E:33:55:AF:9A:84
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0194BB2933CF286F4E6548B78812ECB0FF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: dZKGLjoSFnEiBHIy/X642yhLooQxLKIuWeQTGFmJUaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:33:cf:28:6f:4e:65:48:b7:88:12:ec:b0:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=21cc0221d2db243cdaa48a29cae18e3355af9a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:7d:f9:7a:da:2e:03:51:91:05:9d:25:86:
95:b3:e0:3a:d3:ec:bd:70:4e:87:16:32:7e:85:d3:
e8:00:6a:13:ff:d7:3f:3e:62:f3:16:3a:6a:67:51:
fe:fd:31:e7:cc:aa:56:84:d0:1c:b3:0e:97:98:8e:
4d:d0:94:cc:ca:96:5c:34:b5:23:90:9e:85:d8:27:
0e:69:5a:d9:fd:1b:b7:b9:dc:e0:04:a6:91:82:71:
e7:4b:7e:62:71:8d:ff:5d:e9:b1:7b:e5:e1:23:90:
2e:6f:a5:4c:e1:7a:7a:53:78:61:a2:65:07:e8:1a:
a5:5e:4e:f7:0c:95:2c:3d:df:08:54:41:66:05:10:
57:52:3f:11:c0:9a:94:42:14:b4:43:5f:60:52:d9:
26:49:e2:d0:f0:d5:3f:52:a4:f4:3e:2c:23:7e:6e:
1f:b3:48:1b:6a:db:87:e1:9b:9f:9d:a3:98:b7:88:
b6:ef:3f:6f:e1:79:26:37:90:47:bf:1b:57:74:a4:
b3:bd:70:bf:5f:e4:17:3c:30:43:25:64:74:eb:13:
56:f9:1f:fb:09:d3:ac:f5:7f:0d:1e:7d:2b:63:16:
57:33:7a:f0:3d:85:ea:a6:4a:4d:f5:95:59:52:73:
b5:da:cd:e5:71:55:55:1f:df:cd:91:0b:ac:65:89:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:02:21:D2:DB:24:3C:DA:A4:8A:29:CA:E1:8E:33:55:AF:9A:84
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:25:d4:b8:a8:c5:ec:44:9b:6a:4c:38:bd:44:f7:aa:c7:82:
77:72:c2:6b:ed:22:31:bd:74:46:8d:09:a3:e8:57:1d:8e:11:
47:1f:13:4d:50:3e:41:95:e3:19:71:ff:8b:6f:08:a6:39:87:
63:ca:15:db:5c:e6:41:88:6b:13:f2:28:95:a7:1f:84:20:91:
ab:f8:25:b6:a7:60:50:95:04:58:88:fa:6b:f7:ee:ae:80:28:
61:6b:b7:09:80:d0:1b:8d:89:07:36:18:3a:c3:af:3a:a3:2e:
d7:da:c8:42:b6:eb:aa:87:dd:1a:fc:b6:fe:00:58:9c:57:41:
65:f1:0e:33:33:2a:46:e6:8e:7f:22:0a:31:d3:f0:56:d6:42:
9c:17:9e:21:16:2c:53:e4:00:91:c6:d9:6b:b7:55:50:d4:98:
73:26:81:a2:b5:52:64:2f:10:f8:28:65:5e:78:48:10:b6:44:
02:9b:30:e5:25:44:9d:08:b5:41:1c:ba:fb:6c:fe:f0:63:e4:
88:59:98:d1:70:9a:c5:a2:7e:b5:05:75:2b:d6:7d:81:cf:14:
da:3b:25:d0:cd:df:66:69:75:d8:19:88:08:72:ec:fe:90:46:
36:22:e0:57:3a:8d:e3:c9:19:08:cc:04:a0:e2:10:8a:6e:25:
88:e7:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:00 2025 by rpki-client on console-fra.rpki-client.org