Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: +urUhk37vamyZ30H8lFVfbu2v9SC68knGbpBzQPqmnQ=
Subject key identifier: B1:71:01:22:2E:89:10:43:47:30:A2:16:D8:4B:29:9C:5E:C8:27:7E
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0194BABB127618F8F358C322E0C79770425B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:09 +0000
Manifest this update: Fri 31 Jan 2025 05:00:09 +0000
Manifest next update: Sat 01 Feb 2025 05:00:09 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: 9AfK4wVfqprphFuoveqzmVa/xBBDVJpZlum/2XBrof4=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:12:76:18:f8:f3:58:c3:22:e0:c7:97:70:42:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jan 31 05:00:09 2025 GMT
Not After : Feb 1 05:00:09 2025 GMT
Subject: CN=b17101222e8910434730a216d84b299c5ec8277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:01:fa:4c:32:ef:72:ea:6f:32:1d:86:95:
a8:eb:fe:00:4d:96:aa:d0:fa:75:04:e3:28:af:a5:
5e:a3:27:b5:8f:a1:6f:1b:1e:d3:1a:99:91:aa:c8:
4f:dd:c4:51:27:0a:e8:38:62:98:02:7f:2a:1b:ed:
30:11:fb:7d:0b:1d:89:f3:02:5c:2a:0a:89:bf:00:
6c:ea:bd:bf:35:1b:48:13:1f:72:df:1a:4e:29:d9:
af:a0:50:72:97:7f:21:d5:50:ab:6b:bf:7d:66:c5:
83:cf:83:4b:82:95:a7:49:db:69:77:25:77:69:9d:
96:09:bf:bd:7e:7e:ff:62:08:c9:a7:cc:f2:ac:39:
12:2e:b0:ef:d9:09:7b:35:02:29:25:27:0a:19:7a:
bb:11:b8:6d:d5:8b:81:17:bb:be:c1:58:6e:30:78:
24:83:41:51:2b:6e:ed:5d:f5:26:6b:0f:24:0e:2e:
5b:62:2d:6a:e1:66:f9:35:60:fd:62:5e:fc:4f:b3:
08:c6:dd:60:ef:e6:10:7a:24:20:71:ff:98:fe:62:
9f:07:e6:1b:76:17:07:54:c1:b0:d3:37:d6:18:c0:
a2:05:76:81:35:41:6e:63:3d:14:a2:81:02:58:11:
98:ba:53:72:c4:2e:ae:96:1c:fa:4c:1b:11:56:6f:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:01:22:2E:89:10:43:47:30:A2:16:D8:4B:29:9C:5E:C8:27:7E
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d9:1c:80:d7:c0:bf:b2:c9:55:b0:b8:65:24:9d:44:d7:bd:
18:32:e9:48:18:14:1a:89:d8:99:e6:83:b9:2f:c1:43:8a:31:
13:01:f5:fd:49:e2:d2:54:8f:a0:04:05:12:ea:de:93:04:60:
32:f8:d5:66:c2:37:7f:a2:c0:93:31:9e:21:19:e0:b1:c5:0a:
37:34:3c:d5:23:33:a7:84:5b:54:dc:af:a4:4b:b8:4e:a7:aa:
ca:00:7e:26:21:7e:b4:69:1a:78:76:c5:42:46:d1:2c:db:5e:
eb:f3:7d:25:5d:e7:12:96:0b:56:72:75:2f:c9:c0:a9:17:89:
2b:76:8f:f0:8f:56:a1:88:81:22:60:49:48:66:a9:69:99:bc:
13:7e:e9:d5:9a:dc:92:0d:ab:90:0e:da:aa:8c:99:4e:20:cf:
d7:44:73:bb:c9:85:a2:03:6f:30:5d:fb:01:0a:f5:b7:e1:fe:
3c:1b:e7:c5:de:26:65:ba:db:0b:04:a4:1d:0b:8f:50:9c:82:
95:c2:66:bb:33:95:83:5d:ae:dd:6a:33:38:95:e8:19:73:ea:
75:b2:c3:22:5c:59:ea:78:f2:ac:94:e8:81:47:11:d1:1d:8f:
d6:56:dc:47:fb:41:81:04:6b:eb:07:8d:96:04:d9:25:0f:27:
37:3f:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:34 2025 by rpki-client on console-fra.rpki-client.org