Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: jPuAB8UYwuOvf2XHV5ttbGSZ7PzmmCevkA0klLi0f/o=
Subject key identifier: 73:36:64:80:BC:2A:8F:35:5B:2D:CF:B0:6A:16:39:A6:CC:63:41:40
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 0194BB292FA3BACE2D4B2B0268D4D15AA6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0DAA
Signing time: Fri 31 Jan 2025 07:00:25 +0000
Manifest this update: Fri 31 Jan 2025 07:00:25 +0000
Manifest next update: Sat 01 Feb 2025 07:00:25 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: wjtLL08rsqaGog2tbqeWJ/YFilfot4k0BVnsY8HUyAM=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2f:a3:ba:ce:2d:4b:2b:02:68:d4:d1:5a:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Jan 31 07:00:25 2025 GMT
Not After : Feb 1 07:00:25 2025 GMT
Subject: CN=73366480bc2a8f355b2dcfb06a1639a6cc634140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:2f:68:9d:fb:a6:3f:6d:3d:8a:1d:18:fb:
e1:ce:e3:53:ce:c0:2e:b6:91:cc:f0:bc:75:b5:b2:
db:da:54:c0:91:e3:5d:37:63:99:fe:89:f3:20:3d:
24:ca:16:8a:51:55:14:2d:2c:96:22:8d:43:49:a3:
2a:37:44:35:90:5a:2a:d3:7d:d6:48:ca:38:e9:44:
d5:33:64:61:23:d9:64:81:a8:68:4f:a0:93:3d:7c:
4c:63:d1:2a:79:47:b8:31:34:39:2e:05:cf:b5:08:
ca:ce:83:4b:2e:c4:1b:eb:aa:cb:4b:27:eb:60:88:
d3:63:78:09:f0:b4:bf:4d:45:8d:99:3a:4d:f6:59:
e5:e9:ee:8e:0f:ed:6c:22:b9:c0:d2:d7:df:ea:ac:
13:8c:ec:9e:7c:d3:75:b5:74:0f:19:03:00:e8:e7:
14:ff:6a:ad:ae:ab:2e:9c:ae:a8:bf:77:2b:c5:9c:
1d:cb:ba:86:2d:e5:6c:71:b9:c0:d1:37:9b:53:68:
fd:f3:a9:be:1d:cb:44:47:9b:1b:2b:85:e4:48:47:
a7:44:8b:b0:1c:43:09:02:0b:af:d2:75:f2:d0:19:
b8:de:8c:8a:25:7f:54:3a:78:de:b0:4b:65:f7:04:
a6:93:6e:19:f7:85:9a:eb:2e:54:d3:b9:d4:86:cb:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:64:80:BC:2A:8F:35:5B:2D:CF:B0:6A:16:39:A6:CC:63:41:40
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:c1:cf:83:5e:96:0a:78:6c:20:22:64:a3:04:2f:f7:f3:
6c:54:e0:f7:6d:f9:71:2d:d5:9f:25:c5:42:a4:29:dd:12:b4:
23:94:5f:8f:51:2d:85:c8:7b:c8:9d:5c:fb:7f:32:4f:6b:64:
bc:74:79:e1:f6:b1:0a:6e:75:25:4c:76:76:51:1a:ea:82:cc:
42:49:1e:5c:e3:bd:1b:92:bb:6e:a7:75:0d:f2:a4:27:9e:05:
63:7e:c7:6e:85:16:25:3b:5c:e7:8d:bc:1a:3e:2e:f9:98:5f:
55:98:cc:d6:01:c4:0e:1d:66:f9:c5:19:b2:f8:71:a2:28:ae:
89:5e:ee:56:58:81:c8:9d:a6:0c:70:51:09:50:88:ac:16:5e:
22:78:ce:04:2c:6d:f1:76:17:02:d5:58:9f:05:06:13:4e:19:
2a:26:21:65:b6:85:6a:ed:21:0f:a5:ba:48:74:3f:4a:a9:79:
6b:cb:60:fb:83:b0:29:1a:4e:fd:fc:d9:cb:ff:d3:f9:ef:10:
4f:30:9e:1b:12:e6:86:6b:85:82:65:cb:c7:b2:96:20:ce:81:
b3:eb:d9:f7:35:1c:b9:4e:43:87:bf:a1:24:ef:84:07:0a:39:
4f:73:cf:66:d6:f4:43:eb:27:69:0d:a3:fc:7c:e3:8a:6e:f9:
c0:35:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:57 2025 by rpki-client on console-fra.rpki-client.org