Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: rvS3C+J+v6NidvvrzQsS+vElzYi/5ZYxx3fQyTPbolA=
Subject key identifier: DC:09:A2:B2:36:6B:42:0D:69:D5:DD:49:5C:82:9D:53:90:DC:E4:1D
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 0194BB296ED7E06249A74D0E0D4D14532056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 024B
Signing time: Fri 31 Jan 2025 07:00:42 +0000
Manifest this update: Fri 31 Jan 2025 07:00:42 +0000
Manifest next update: Sat 01 Feb 2025 07:00:42 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: 8mDdKFrVsYZk2SaW9xL4sPfrNI7f9+LNSEkNCUghQ+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6e:d7:e0:62:49:a7:4d:0e:0d:4d:14:53:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Jan 31 07:00:42 2025 GMT
Not After : Feb 1 07:00:42 2025 GMT
Subject: CN=dc09a2b2366b420d69d5dd495c829d5390dce41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:c2:6f:3e:0e:a2:0f:11:5d:2d:16:9d:3c:
5f:71:91:ef:b4:8f:7a:ac:b1:03:f3:41:b6:58:d3:
b8:33:8a:9b:30:8e:e4:95:8e:b0:8c:17:2e:e9:a1:
64:df:12:80:30:e0:ae:5e:8f:6e:c2:51:14:00:3d:
91:df:f5:33:64:4d:41:fe:b9:4d:e4:26:cd:5f:d3:
6e:4e:df:4c:c8:7b:8d:f2:ed:3b:1d:9b:8b:04:e9:
6a:a3:4c:df:4a:38:48:03:97:b3:86:73:47:48:38:
15:ea:90:fc:c5:cc:82:1d:53:80:15:ea:72:2a:1f:
af:39:4b:84:cc:2a:de:44:b8:9d:ae:42:c8:65:92:
47:52:ed:9c:af:1e:86:f3:3b:cc:66:61:04:5b:5e:
6f:3e:0f:e7:ff:e6:71:a9:6a:61:11:6c:a4:90:c0:
2f:f9:ef:f7:9b:6c:5c:dd:1c:50:7c:6f:1f:18:3e:
e1:c7:ee:21:35:d6:e2:e7:3e:79:8c:4a:9d:ee:42:
2b:39:17:f1:de:c8:6e:5c:46:2f:79:d8:a8:5d:db:
13:6e:bc:62:68:64:0c:14:3f:ca:b7:9b:cb:62:7b:
0b:88:76:33:a4:94:99:c0:ae:51:f0:7c:02:b3:7c:
36:2f:65:7b:30:62:5b:ee:a8:5e:67:3f:7e:ec:55:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:A2:B2:36:6B:42:0D:69:D5:DD:49:5C:82:9D:53:90:DC:E4:1D
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:db:18:18:da:2b:93:7f:ff:ab:12:0f:29:fa:ac:18:f3:82:
41:ed:bb:df:be:27:e4:53:47:c1:ea:cf:29:58:f8:ef:61:73:
76:d4:18:17:9e:39:c3:cd:58:c6:ec:ca:27:ea:a2:4a:91:99:
c9:bb:e8:0c:ff:9d:fa:ab:a4:05:5d:c7:18:64:d9:f2:c0:cd:
e2:f0:5b:3c:b0:41:eb:cf:f3:23:80:2d:78:c7:2b:78:3a:01:
21:be:8f:36:82:35:e5:6a:b0:95:22:72:65:6f:b8:e4:65:dc:
15:d9:da:1b:5e:24:3d:b5:2a:15:0c:a0:2c:3f:2e:39:17:ae:
83:11:00:6d:dd:36:0b:b4:bf:56:f7:68:df:4a:41:8f:df:db:
03:f3:e7:65:fb:b3:56:d5:99:33:9d:56:49:14:14:6c:60:ea:
0e:ba:60:a6:85:df:b9:1b:4b:c2:be:43:5b:00:ff:6b:99:f8:
21:c3:bc:8f:48:82:a4:d4:a1:04:57:39:43:72:5c:b3:0a:64:
55:09:0e:ee:84:d8:a6:f8:0e:55:c6:20:e6:3c:22:e6:f9:00:
6a:17:25:39:84:8c:a1:0f:7c:da:0e:89:08:80:18:ac:e6:6e:
17:f0:5b:03:78:53:97:c1:b8:63:fe:3e:6e:26:cd:13:1e:71:
35:98:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:39 2025 by rpki-client on console-fra.rpki-client.org