Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: dHBHSNJCJcTbXZX8iC914n39CC2W6yFtOz6i19o7Vug=
Subject key identifier: 49:71:BB:37:A9:29:40:E7:26:13:5C:04:4B:13:D7:0C:42:66:BD:6B
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0194BA846F61D4ED96AB91A1D3EA53BFEAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: jSGDasc2OBY652AgbWV5ZsptPSrxFF/MU/2cFccTIdg=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6f:61:d4:ed:96:ab:91:a1:d3:ea:53:bf:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=4971bb37a92940e726135c044b13d70c4266bd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:04:74:dc:d2:69:fe:68:68:8b:6b:4f:06:
7e:6f:c1:6b:0b:82:a2:d6:b6:63:26:6b:40:5e:65:
fb:ec:33:97:61:de:8c:a2:fc:ec:1f:48:af:f9:5f:
c2:ee:e7:ce:38:0d:a4:63:c2:c1:48:22:7f:8f:32:
4a:e7:b5:56:da:6a:56:79:51:30:ec:ab:56:04:1b:
e2:57:d7:85:b0:d9:ef:ad:40:ab:8a:1f:fd:98:a5:
07:4f:44:fb:52:3e:2a:fa:db:e8:a5:21:06:b5:fc:
9c:65:8c:b2:46:e6:56:9c:f0:2f:81:75:40:72:7b:
f4:0d:f2:ec:5b:d6:b2:15:2d:db:3e:bb:06:d1:bf:
d1:c7:0f:d5:f4:af:cc:4c:83:4b:39:a3:7f:5d:30:
14:d0:ea:a8:9c:4f:cc:73:55:f2:90:2f:a6:56:37:
44:a8:25:18:e8:66:f9:a2:ea:30:e6:16:2e:7e:5d:
84:10:47:4b:07:0a:2c:16:7e:fa:62:e1:c0:c6:91:
4d:e8:ea:11:05:2e:4b:b8:ec:9e:bf:05:10:12:ab:
6e:87:0e:d9:f9:d2:bb:76:ff:20:e8:ea:18:03:2f:
21:75:29:60:2b:a2:15:6a:1f:02:34:a7:98:89:b1:
84:46:90:a8:05:7a:a6:26:6d:fe:a3:dd:a4:30:1d:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:BB:37:A9:29:40:E7:26:13:5C:04:4B:13:D7:0C:42:66:BD:6B
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9a:80:f5:05:64:51:27:65:da:cc:cd:0e:9e:91:e4:7b:ff:
25:f5:bb:4b:0c:09:15:d8:ba:9a:4d:cc:4a:94:9c:f2:93:78:
25:7f:eb:04:4f:43:eb:9f:ae:f2:3d:75:89:84:8d:da:ab:ca:
76:fc:0b:73:06:2d:44:71:85:28:80:a7:9d:06:14:42:7c:37:
38:99:b0:5c:d0:0e:00:6b:3f:5b:2b:a9:36:ef:0f:63:f2:19:
9a:44:3d:dd:8a:db:ab:48:d0:4b:4d:63:be:f4:7e:4d:d1:6c:
73:42:77:1f:68:5f:94:9a:0f:b6:a7:ca:a5:d0:40:c3:91:21:
95:d4:a0:f0:7f:2b:03:85:b1:f6:9d:a2:b1:33:c1:8b:e1:6c:
89:c4:09:ab:bd:2a:ff:ea:fc:d9:7b:33:68:09:20:84:b3:c0:
7a:0e:56:94:d7:5f:c9:66:e8:46:13:09:bc:0f:7b:7f:15:c9:
74:99:6c:0d:4a:19:10:8d:d6:36:2d:9e:35:15:d8:47:3f:3c:
13:80:54:aa:de:5b:e7:5d:f8:b9:4d:04:e1:8b:d9:e1:3f:d2:
db:70:00:13:2b:eb:d5:51:4b:25:25:e1:df:07:fc:8d:00:06:
50:a2:c9:0a:9f:8c:19:4a:4a:9d:11:22:d3:64:15:e4:92:6b:
5a:3e:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:50 2025 by rpki-client on console-fra.rpki-client.org