Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: QEFL0NEMIee0oNnRfumaXdvAw46X+pfIARh/+cFzKmw=
Subject key identifier: 3D:DF:41:A6:0A:1E:51:EF:A8:24:2B:F0:EE:5F:AA:F6:43:CE:39:4C
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 0194BB605D2A48B66E330B8116887A44CF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 08:00:42 +0000
Manifest this update: Fri 31 Jan 2025 08:00:42 +0000
Manifest next update: Sat 01 Feb 2025 08:00:42 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: 899md0sZThWp8xo4ZTMbL2woZfKIVwl80947C8jCIvk=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:5d:2a:48:b6:6e:33:0b:81:16:88:7a:44:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jan 31 08:00:42 2025 GMT
Not After : Feb 1 08:00:42 2025 GMT
Subject: CN=3ddf41a60a1e51efa8242bf0ee5faaf643ce394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:e8:f3:e4:fa:0c:84:93:19:4c:99:4e:11:
f0:e6:c2:7d:17:9a:97:ca:c0:ca:a9:4d:a0:1d:7c:
23:18:a9:70:5a:c7:33:7f:ea:ef:ba:4d:f0:ca:0e:
e1:8e:04:02:d0:e0:26:ba:1f:6b:6c:ad:9e:f9:c5:
4c:38:85:8b:06:ae:2c:47:b7:27:0b:85:a2:b2:6b:
b2:4e:f3:bc:53:1e:cf:26:cf:8b:c4:cf:9c:a5:5a:
87:fd:4d:ac:8f:20:70:24:57:1a:58:2c:46:c4:a5:
e8:12:01:fe:01:75:54:6a:ac:a4:de:f9:9b:67:21:
69:33:cb:88:39:06:cb:7f:b2:4a:e1:cf:24:42:df:
9d:7f:17:86:91:0d:f5:a6:e3:94:e3:19:df:ec:2c:
59:6c:26:4d:58:e8:de:7e:31:84:85:20:36:36:a0:
00:fd:64:59:67:7b:2e:99:f6:fd:3c:62:2e:49:49:
ec:d6:4b:b4:52:72:1a:59:c3:d4:bf:7f:b3:35:e1:
db:f9:a3:d6:14:07:d7:3f:44:d2:ea:ea:48:30:69:
7f:cf:d2:48:e2:60:fa:07:d7:f9:4a:23:aa:0d:fb:
2b:03:3a:4e:94:59:a8:05:d8:28:76:09:1b:9b:52:
2c:6c:b0:88:a9:e9:dd:13:9d:e5:6e:fd:ca:ed:18:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:41:A6:0A:1E:51:EF:A8:24:2B:F0:EE:5F:AA:F6:43:CE:39:4C
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:78:bb:55:d3:d6:f4:30:48:c9:e7:40:8c:47:1a:0e:e7:ae:
aa:c5:f7:0d:28:5e:20:a1:f5:d0:f2:5d:31:c3:9a:39:5f:e4:
bf:a7:b8:1a:ae:fd:41:58:62:d4:62:fb:87:55:ad:85:24:32:
75:3b:83:34:96:53:e9:de:a8:2d:f4:39:01:77:99:1b:37:2d:
1e:d8:3b:25:65:33:3b:1d:1c:57:ba:10:8f:ce:d4:79:e1:00:
25:77:1f:e4:8f:27:f7:a0:85:e6:f5:33:77:bc:b8:a9:87:dd:
53:10:0a:c6:64:4f:aa:59:56:64:c9:24:13:e1:0b:fc:81:dc:
1c:69:7a:79:7d:58:2d:83:36:80:5a:02:98:1e:90:46:b7:7e:
77:a2:2c:4e:d3:7f:14:6c:22:b4:39:12:1b:a4:3b:fc:90:7b:
8c:c2:20:f6:bc:96:9d:16:fd:c8:cb:21:0e:a2:a6:be:a8:4e:
4a:18:4b:f3:fe:df:64:23:d7:02:a2:f8:d5:d7:13:0e:de:2d:
3b:36:ff:af:60:09:d4:e4:ea:11:25:e8:7a:45:ae:a1:1b:b1:
61:4c:05:7e:55:98:2a:a8:3c:fd:7b:ec:c8:a4:7c:f8:21:03:
b4:75:a3:10:87:07:13:c7:f9:a2:28:73:16:9a:74:45:2b:5f:
46:3e:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:48 2025 by rpki-client on console-fra.rpki-client.org