Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: vB5Atl+7R8Du2yMrKEUL2tBBeRViCaZhx5We4esbb40=
Subject key identifier: 49:AF:B3:DC:56:D3:B4:21:58:FD:1D:C3:56:DD:6E:9B:12:C8:71:2B
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0194BB9738A9E6EE8C105C644777CA218FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 09CB
Signing time: Fri 31 Jan 2025 09:00:37 +0000
Manifest this update: Fri 31 Jan 2025 09:00:37 +0000
Manifest next update: Sat 01 Feb 2025 09:00:37 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: w+TOO1V3LAg2wBIO3Nec2GD+49jt8nMR0AUq6lMoAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:38:a9:e6:ee:8c:10:5c:64:47:77:ca:21:8f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jan 31 09:00:37 2025 GMT
Not After : Feb 1 09:00:37 2025 GMT
Subject: CN=49afb3dc56d3b42158fd1dc356dd6e9b12c8712b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:8d:d3:a3:ff:f8:4e:c0:9a:f6:d4:1f:44:
e9:ae:6b:5e:cb:9e:c6:05:1a:c1:69:94:cb:70:ae:
ee:1a:0b:d8:8a:de:54:c8:4a:2e:9a:85:46:f6:95:
3e:9e:36:72:b1:a3:18:3a:09:cf:53:10:8a:f5:80:
76:13:9a:a7:bc:0d:f8:be:c9:d3:2a:a0:51:78:8b:
3f:98:ed:7a:d2:ff:05:29:bb:c5:46:a7:cf:90:69:
b5:c8:c3:4a:4f:53:59:38:1e:e8:04:8f:66:73:12:
f5:03:f3:8a:f4:2e:70:18:d1:bf:72:8a:65:e3:55:
75:1e:cf:cf:6b:77:3b:b0:61:5d:9e:56:48:14:37:
35:04:c6:b8:4b:e9:07:e7:22:75:d6:66:b0:7b:71:
91:07:8d:4a:f0:8d:87:7e:1d:bd:aa:41:fe:2a:a7:
09:0c:be:8b:e4:35:c4:3b:92:98:58:b4:d5:05:d1:
21:d1:74:a1:cc:60:bb:74:e1:f5:ac:3a:ea:f4:89:
3c:e1:08:47:54:67:6e:fc:d4:d2:ec:60:04:34:85:
80:92:5e:0d:f8:1a:5e:bf:be:d5:f3:5b:e0:30:ca:
76:a1:ee:3c:f6:1d:e5:bd:23:50:23:55:15:05:eb:
84:4f:98:d5:78:43:50:fa:33:b0:39:2b:6d:eb:b5:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:B3:DC:56:D3:B4:21:58:FD:1D:C3:56:DD:6E:9B:12:C8:71:2B
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ab:b4:d3:fa:9e:a8:a6:18:9e:52:21:04:ce:28:69:7e:b8:
9d:09:59:0c:1e:53:a9:d3:c7:f2:11:bb:64:f3:2a:92:41:d6:
40:69:16:96:5f:f2:d5:38:16:b0:b2:c3:c0:fe:70:ee:8d:8f:
ed:2f:6f:ed:29:79:f5:36:06:1f:62:73:2a:eb:73:42:9b:c1:
8a:4d:27:f5:bc:95:6f:fc:24:fb:fb:96:47:da:82:2b:7f:0f:
fd:7c:b4:85:a4:a0:4e:e9:9c:56:8d:5a:27:51:4c:31:77:93:
6b:9a:6e:e5:8b:82:4c:dc:39:de:75:a1:88:79:56:06:59:61:
3f:b3:1b:d4:4c:1e:0d:30:ef:79:b5:d2:fe:0b:f7:97:1a:88:
86:3e:b8:5c:04:41:12:40:d6:82:3f:65:cf:9e:38:d0:fe:32:
c9:23:92:fc:69:f5:b8:e2:50:b5:4f:7e:f8:c4:43:c4:c5:29:
60:1c:ac:34:7b:f6:d2:14:77:6e:07:cb:90:94:c5:ac:da:e3:
d6:a1:1d:18:97:d6:8a:47:d7:13:96:3d:04:8e:1b:37:93:05:
0d:f4:13:e9:3d:d7:d2:7c:bd:fe:5b:29:32:42:76:51:b4:26:
cd:63:09:85:dd:0f:cb:28:71:fe:5a:09:5c:86:f5:16:5e:71:
13:32:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:09 2025 by rpki-client on console-fra.rpki-client.org