Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: lA6sOXVMYDJlUtN/BjlDh9miSlXp78eNAUFhvv9mL8Y=
Subject key identifier: D9:5E:7D:DB:A5:9A:8F:A3:33:C8:82:FA:F5:40:EC:65:B6:2A:E2:57
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0194BA84A39E1D4400A406012F37C2689362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 04:00:42 +0000
Manifest this update: Fri 31 Jan 2025 04:00:42 +0000
Manifest next update: Sat 01 Feb 2025 04:00:42 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: J++WeRzIGZK620dEPVmruzCOcNlvs+vzf2WGgch3pIA=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a3:9e:1d:44:00:a4:06:01:2f:37:c2:68:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jan 31 04:00:42 2025 GMT
Not After : Feb 1 04:00:42 2025 GMT
Subject: CN=d95e7ddba59a8fa333c882faf540ec65b62ae257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:13:14:dd:3b:12:5a:7d:2f:45:e4:ee:cb:
a5:c7:c1:5e:2c:8e:7f:da:9f:a8:36:e4:06:d1:2f:
05:f3:e5:85:bf:0c:42:28:e7:f9:7b:a6:90:46:e5:
a9:ad:b3:c1:1e:89:92:51:0c:6a:89:dc:e6:7d:37:
ac:de:fe:9a:81:8c:0a:70:ba:1f:a5:50:96:1e:f6:
cc:31:81:c6:59:1a:57:17:66:a7:c2:91:34:3e:4c:
4f:2e:fb:d3:44:ef:c6:d7:af:fa:e6:43:f9:11:17:
9c:a8:bc:d2:cf:18:29:f3:a0:cb:c0:0b:5e:ac:a5:
68:03:c9:3d:8a:d3:a2:d9:0d:75:f0:9d:a8:c3:8e:
f7:ab:af:65:9b:cf:70:52:1e:fe:f3:62:b9:6a:f5:
1e:37:12:34:0d:c1:53:7d:a2:9f:ed:4c:b1:04:b7:
4f:eb:0c:9a:97:ee:06:8a:12:c8:89:b2:0e:65:f4:
72:2a:71:25:e0:56:b7:ce:1e:e7:17:b7:a6:7a:40:
44:4e:75:4a:98:87:76:4a:16:82:37:8a:36:d0:bf:
1c:c9:0d:33:1b:1e:78:6e:c4:06:03:8f:16:98:9e:
81:5d:2d:31:fd:2d:02:7a:e3:68:ba:aa:87:c8:ba:
7d:f0:27:7a:4e:b8:9b:97:d3:ad:56:df:ea:80:29:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:7D:DB:A5:9A:8F:A3:33:C8:82:FA:F5:40:EC:65:B6:2A:E2:57
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e9:c6:2e:7c:70:c6:98:87:3f:69:9a:79:11:89:d4:02:f8:
5c:9a:d1:d5:11:5a:e0:63:2e:e9:da:e0:57:8c:cd:b3:86:c6:
f0:57:08:ce:fe:0f:ae:67:de:5e:a9:8e:b7:d1:ff:a4:4f:6b:
51:70:08:bc:31:af:1f:78:d9:9b:2e:64:38:54:bb:50:7d:bd:
68:6b:52:71:8d:30:83:72:f2:f9:e2:85:88:de:2a:23:71:df:
5e:1a:d0:a5:38:8e:b3:bf:b8:73:00:8b:a9:df:f3:6d:2f:99:
b6:05:04:7f:ac:81:9a:b6:6d:a0:19:0f:86:24:23:58:6b:f2:
e9:d8:85:a3:0e:79:83:03:da:d2:a9:1c:24:5c:66:3e:4a:29:
58:da:6c:94:3e:61:f4:e3:7a:9b:b3:38:d2:ad:1f:cd:1c:30:
13:58:53:79:f3:71:db:8b:f4:5d:d9:61:dd:ec:cb:56:d3:7b:
9c:ed:2f:14:ba:e0:4a:a9:09:75:ae:3f:0c:58:15:69:86:89:
17:51:c9:38:22:7d:99:98:a2:72:8f:9c:17:35:57:67:1f:54:
b3:d8:11:fc:de:1f:99:d8:e7:e5:63:1e:04:b8:3a:20:17:87:
04:cc:2d:c9:fa:7e:63:9b:fc:ed:b6:21:8a:72:ed:ad:11:f4:
80:91:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:21 2025 by rpki-client on console-fra.rpki-client.org