Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: vT1qO7ZHllfBEcNReMXkUo38xCL+JEoAeUAmmyODPXU=
Subject key identifier: 87:B0:E8:42:FA:F5:C7:07:2D:D9:20:BF:64:9B:6E:FB:8A:01:43:37
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 0194BB60331087C4DCBF55055AA7134A422C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: UxPnIK5LnhqvPA7spi7XdzXWzBSbBR/h5Ty27v3HBgk=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:33:10:87:c4:dc:bf:55:05:5a:a7:13:4a:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=87b0e842faf5c7072dd920bf649b6efb8a014337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:53:37:dc:fa:74:ad:e0:1a:58:b8:9d:32:
17:c5:57:ea:67:af:a6:d6:26:72:80:f7:a2:f9:5c:
b1:5b:86:4c:73:4f:11:31:b5:34:7d:ac:22:17:11:
c8:80:48:5c:00:0e:ef:a2:92:35:30:dd:b6:83:58:
e5:5c:8b:f8:98:66:c2:b5:73:57:32:e0:09:ce:d9:
db:6a:d7:df:12:57:65:fe:d0:75:a4:c7:2b:22:3d:
7b:6f:51:54:b8:5e:11:e7:5d:eb:32:f7:dc:3d:a2:
a1:10:98:86:cd:6f:24:f4:1e:4a:43:12:24:e7:c3:
c7:59:fe:ae:7e:2c:53:cf:7c:f5:68:d5:65:0e:34:
4f:bb:93:2e:0f:0b:90:14:d4:17:82:d3:df:c8:f4:
59:1e:56:60:08:08:f2:f1:30:c2:a8:6a:d9:e8:81:
db:df:24:de:74:e8:9a:43:08:8b:00:28:1d:9d:68:
56:08:8d:c9:8a:4e:f8:80:5d:51:3c:07:ca:c0:97:
fa:c5:d1:77:33:9a:3b:13:63:94:0b:83:6a:f9:35:
1f:53:21:3d:4d:70:4c:08:db:d4:4a:e4:9b:fe:b1:
c2:aa:9b:dd:b4:f4:4f:6a:d0:78:a9:05:68:c7:93:
ce:f3:40:6c:df:61:73:b5:d6:3e:62:5b:d2:7d:74:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:E8:42:FA:F5:C7:07:2D:D9:20:BF:64:9B:6E:FB:8A:01:43:37
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:b2:63:4e:69:80:1c:d6:71:fc:05:83:96:c7:b7:b5:d3:
da:49:51:8f:15:94:58:3d:bd:03:8a:81:35:e2:eb:92:36:43:
9b:59:ae:18:9f:a1:4f:a5:ad:99:86:65:cd:86:3b:44:fd:27:
a2:53:a4:4d:82:cb:2d:07:68:fa:b5:57:b0:dc:1b:bf:f3:b3:
f5:c7:35:7b:6f:60:63:b4:60:58:56:5f:f8:11:53:54:91:2b:
64:ee:b8:ec:af:1b:22:8f:cb:f5:49:92:a2:f6:56:40:e8:aa:
09:43:25:d8:82:6d:d0:19:5c:35:2c:c8:03:27:c0:c6:39:8a:
68:40:43:1a:2a:0f:fc:9d:e8:d1:dc:c4:39:4d:34:b2:03:ec:
d8:ef:01:5a:67:4b:b7:70:23:d1:92:2a:b6:b8:7f:07:1f:3a:
3d:9e:ca:40:a5:de:86:0f:2b:8c:98:af:84:c2:8a:77:f3:5c:
9a:e2:c9:2a:cd:c1:3b:c3:8e:67:3d:b5:26:83:ba:96:6b:a9:
3e:ff:29:32:3c:34:db:39:cb:bb:f3:88:a7:86:cd:e8:2b:4e:
8e:a1:05:8d:5d:db:77:2a:55:08:12:29:34:ff:97:12:70:c1:
ba:84:d0:0d:22:a4:52:93:61:90:20:83:c5:70:75:1c:fc:ac:
9a:0d:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:25 2025 by rpki-client on console-fra.rpki-client.org