Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: f1K4DGJ6Y7t/33Ra4LKvFQ3dq0GxTa424Byv09z5VJA=
Subject key identifier: 72:59:D4:4F:CB:EA:EE:45:B9:4D:3E:2D:9E:B3:BD:A3:B7:9F:68:C2
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0194BB28F8A9CD99ED79E3E11CC7FCD80331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 121E
Signing time: Fri 31 Jan 2025 07:00:11 +0000
Manifest this update: Fri 31 Jan 2025 07:00:11 +0000
Manifest next update: Sat 01 Feb 2025 07:00:11 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: 0PdoviJ8fXylcp/x+fhFPEa+xvEIOuPO8HvXwMbdCyQ=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f8:a9:cd:99:ed:79:e3:e1:1c:c7:fc:d8:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 31 07:00:11 2025 GMT
Not After : Feb 1 07:00:11 2025 GMT
Subject: CN=7259d44fcbeaee45b94d3e2d9eb3bda3b79f68c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:a9:6e:dc:1a:e3:5f:77:1b:ea:f8:ba:a0:
34:20:2a:5c:06:09:ed:af:a9:02:b5:32:25:47:46:
44:1f:92:64:ed:29:d4:09:a7:26:e8:08:19:5d:20:
83:1f:36:75:29:a8:38:bc:fc:f6:14:2f:bd:54:2f:
89:c2:25:b1:fb:64:b6:79:6c:92:91:93:12:29:d9:
41:f3:8a:b0:00:2c:e8:fc:4c:59:fd:b1:8c:a5:a6:
be:2f:f1:ff:8c:16:f5:03:ed:75:a0:b1:63:5b:a1:
79:28:2d:cf:88:1a:fc:4f:c7:68:85:f8:c0:96:13:
13:e6:20:9e:29:ea:5d:1b:de:4f:54:70:32:40:1c:
03:51:0d:6f:0f:70:48:b5:87:0f:39:6e:51:31:be:
e1:5f:ef:de:da:11:11:a5:b3:ca:82:b9:9e:ac:63:
dd:7f:eb:29:e6:d4:64:a7:43:9a:77:0e:35:74:31:
5f:49:7b:01:4f:e0:85:b6:af:99:81:8a:7e:15:51:
7f:a0:2d:a5:03:46:41:cb:bb:80:66:4a:a9:b6:eb:
5b:15:b5:7c:5a:3f:df:2c:3f:6c:8f:6d:53:1c:67:
19:54:48:ac:5f:88:ec:8d:08:41:74:4a:06:e3:16:
25:56:82:5d:9b:5c:d1:53:9d:92:22:d7:a3:1d:7a:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:D4:4F:CB:EA:EE:45:B9:4D:3E:2D:9E:B3:BD:A3:B7:9F:68:C2
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:67:72:b2:fa:78:88:f6:6f:51:dd:64:51:e5:98:13:04:
f7:32:2d:78:c8:96:3a:84:bb:cb:44:0f:17:c7:8a:72:1c:26:
05:1a:4c:ca:1b:b7:6e:fd:50:f5:90:a5:1a:54:d4:e8:f3:18:
cf:52:8c:21:51:81:15:1d:21:32:98:7e:19:35:f5:37:ba:5b:
2c:91:73:68:b9:32:fe:44:e5:bd:57:18:92:b9:3d:4d:70:47:
15:3b:01:52:e0:66:47:55:e9:d6:e6:ea:91:40:99:11:d2:2d:
87:cb:ed:55:8b:e0:20:ad:d7:2f:28:65:0e:70:8e:46:16:11:
43:aa:f8:84:c8:75:07:f9:04:0c:10:70:9e:15:be:a0:80:18:
77:49:43:a1:dd:22:e7:cb:4f:ea:65:37:5e:49:7b:14:2e:53:
38:53:d7:c9:22:f1:f5:41:3d:dc:eb:cb:08:b1:f2:88:48:db:
b5:d3:85:16:8e:bd:74:e1:84:21:c5:16:5b:8d:d6:fe:22:01:
0b:bd:e8:f6:49:ad:f1:01:8e:b5:08:5d:ee:78:6f:1c:75:5c:
82:06:f8:d5:ab:0b:a5:b2:52:06:08:76:b9:3a:d9:64:ff:a5:
e2:b9:18:b9:dd:c0:63:65:8b:f2:b5:a0:9c:c9:8d:bd:5d:37:
fe:05:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:35 2025 by rpki-client on console-fra.rpki-client.org