Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File: 8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier: wooX4fzB19Z3G3iwYpl8UyQYxA4bA/9QiwRha3nqD+c=
Subject key identifier: 39:5C:3D:D3:A2:B7:A2:A4:E6:4A:FF:86:5A:BE:80:3E:14:BB:10:97
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 0194BB5FEF9FB30105A955EA95AF6CA868EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number: 0A89
Signing time: Fri 31 Jan 2025 08:00:14 +0000
Manifest this update: Fri 31 Jan 2025 08:00:14 +0000
Manifest next update: Sat 01 Feb 2025 08:00:14 +0000
Files and hashes: 1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: hr/vl5t+9VOPEbbIYjA8GbCxxPiKBXf5pZW4fCH/sLk=)
2: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (hash: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ef:9f:b3:01:05:a9:55:ea:95:af:6c:a8:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jan 31 08:00:14 2025 GMT
Not After : Feb 1 08:00:14 2025 GMT
Subject: CN=395c3dd3a2b7a2a4e64aff865abe803e14bb1097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:02:1b:0e:c4:35:d9:8a:0f:44:56:a3:81:
a3:5f:26:ac:4c:ad:99:f0:08:70:6d:d3:98:19:f3:
c1:2f:5e:91:da:aa:1f:12:f3:8c:d9:26:bd:5b:80:
48:5c:66:00:0c:bb:1a:ef:29:9f:4e:ba:f5:77:e5:
35:3c:09:fd:d4:8c:74:41:b0:0d:64:ac:9a:c4:47:
37:90:45:89:10:de:86:be:be:9b:17:82:90:bb:7d:
2e:76:0d:e0:d8:21:d5:71:63:92:b5:3d:88:e9:07:
43:58:27:fd:9f:5a:eb:eb:5e:db:ad:7d:95:b4:b0:
3c:1d:0a:6e:47:f3:c8:92:bb:42:ba:3b:8f:d8:ba:
ba:40:2d:c1:ba:00:a3:a7:f9:30:c0:80:56:b4:c6:
7f:c4:37:0d:83:e8:ac:fd:3c:ec:eb:9b:30:ab:9c:
c9:32:24:11:cb:95:fc:5b:73:21:8a:bc:eb:32:10:
00:f9:fc:e4:ef:30:73:d9:28:f8:61:a0:d5:90:8c:
fd:52:c9:35:f5:8f:fe:7b:3a:ae:84:22:59:eb:20:
11:ff:1a:25:b7:3b:41:44:36:ab:99:69:b3:d9:26:
5f:aa:ad:87:f0:aa:68:54:ac:8e:13:40:dd:33:fd:
8b:3e:0f:0a:11:97:7e:0c:32:78:77:77:73:25:01:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:3D:D3:A2:B7:A2:A4:E6:4A:FF:86:5A:BE:80:3E:14:BB:10:97
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:36:f8:ea:76:6d:0d:d7:3f:c7:b0:b1:85:df:fd:ad:27:
89:00:76:a5:91:bf:02:b0:33:68:a6:49:f4:68:d9:2d:e6:76:
ba:e5:d6:c4:99:af:14:62:55:64:94:33:48:8b:e1:b0:6c:6e:
ce:63:26:11:3b:d4:77:aa:b5:6f:f7:ff:85:47:26:b2:7e:92:
91:c8:fc:c6:5e:e5:47:65:4b:97:73:12:0b:3c:93:d2:6b:5a:
28:b1:98:99:76:a2:f1:45:9e:0b:07:2b:47:2b:a4:c0:ea:0b:
f4:07:af:00:b9:c3:71:97:8c:40:e1:59:9a:11:e5:94:74:e0:
50:5a:be:02:66:59:e7:6f:a5:d2:2d:a0:5b:8d:d9:92:4b:66:
00:a4:98:21:3a:f3:34:b1:f4:f2:6c:fa:c0:d1:4e:3a:3e:8c:
2b:c4:0d:91:fc:64:be:9e:79:1f:56:75:d9:bc:f0:d7:0c:56:
7d:0e:3b:ca:a8:89:30:36:c5:10:f4:b3:14:9b:a2:3d:b9:11:
1d:6d:17:20:e2:a3:c5:8c:36:c9:d4:f1:ee:6d:83:a8:dc:35:
81:ac:28:c5:3f:af:26:8f:ec:64:2c:00:00:bd:e5:37:d0:7c:
31:84:9c:ca:97:62:5e:c2:10:d4:ae:8a:de:34:b2:63:7c:d1:
91:80:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:50 2025 by rpki-client on console-fra.rpki-client.org