Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: kUwwl/0gU1gAJ9WUMimNazwz+jQR50ZaPca/fDx3B5o=
Subject key identifier: C5:DB:16:F0:08:3E:0B:C0:1F:76:76:15:DD:65:61:59:02:DF:56:CB
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 0194BB96F4030EE95A92CDBAA08FBD6C6F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 042C
Signing time: Fri 31 Jan 2025 09:00:19 +0000
Manifest this update: Fri 31 Jan 2025 09:00:19 +0000
Manifest next update: Sat 01 Feb 2025 09:00:19 +0000
Files and hashes: 1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: i1/W/hgZvoterKyC9HBZkd1kOktpKjO6t2Q2Xjjh1vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f4:03:0e:e9:5a:92:cd:ba:a0:8f:bd:6c:6f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Jan 31 09:00:19 2025 GMT
Not After : Feb 1 09:00:19 2025 GMT
Subject: CN=c5db16f0083e0bc01f767615dd65615902df56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:ce:b4:fd:4e:ba:42:c3:2c:c7:25:2d:88:
65:23:ee:35:35:7b:65:83:36:1a:95:c8:9f:51:0d:
5b:27:52:a4:c2:e9:f8:86:c5:53:6c:94:99:a2:30:
88:cc:b2:be:ac:22:a1:d5:17:40:cd:72:94:3a:94:
a2:4a:ca:43:45:9b:10:0d:b9:39:c8:57:8f:26:c0:
08:7b:2b:35:81:2c:ff:ec:b7:c0:c2:56:44:f1:0b:
e3:17:fb:93:08:e8:61:14:ca:46:60:db:ff:6d:e5:
7c:cd:45:a8:00:5a:9a:6e:a8:08:d3:fe:d5:21:da:
b0:ec:8d:7f:02:ab:0b:8c:27:03:ac:e7:87:72:ac:
fa:eb:ad:0d:00:f1:dc:b6:96:7f:cf:b2:e5:4a:9d:
82:59:3e:7a:6b:a4:06:92:33:e5:92:4d:52:d2:9a:
5a:78:fd:22:f6:59:79:b4:5b:7d:9c:a6:91:46:4d:
5c:86:e2:06:01:0f:2c:ef:50:9e:5f:91:74:64:49:
88:3a:bd:9c:c9:64:ce:8c:bd:1d:ca:9a:4e:1f:4b:
78:5b:62:3d:4c:a9:6e:fd:29:66:fa:0d:90:ea:f6:
65:7d:c2:85:e6:23:62:74:23:4d:5d:be:ba:54:3b:
e5:77:49:c3:5a:48:62:39:10:7a:ad:91:2c:16:bc:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:16:F0:08:3E:0B:C0:1F:76:76:15:DD:65:61:59:02:DF:56:CB
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:96:c2:ef:cb:29:a2:30:2a:71:7d:c1:1b:68:8b:81:ce:
2a:e6:de:42:27:67:96:94:51:27:08:7a:27:96:da:60:6a:03:
0f:75:20:02:03:10:0c:f5:93:4c:7e:8d:73:de:49:c7:5e:26:
b3:a0:0e:74:7e:77:64:7e:f2:05:5f:31:39:25:90:19:8c:6a:
2b:b1:77:92:53:e1:f2:42:1a:e8:45:dd:2f:94:61:1c:1a:14:
51:19:e2:42:99:a1:54:18:c8:75:c8:3f:ff:35:08:51:c1:b3:
b2:b4:da:fe:db:82:0c:65:39:57:84:65:19:fb:a5:1d:19:73:
8f:4a:22:5e:a4:e0:c1:04:20:5c:aa:58:1d:ad:1b:7a:c1:b1:
e9:df:73:2e:fa:48:66:82:a7:b4:13:c7:7f:94:5c:e6:7c:d2:
dc:87:69:18:4b:03:3d:6e:90:93:b0:9f:68:34:56:fc:10:83:
66:45:f5:40:2c:cc:db:d8:17:25:bd:d4:4a:65:b9:28:a3:85:
19:df:9b:7f:44:21:56:eb:69:cc:05:1d:3c:54:57:69:9e:15:
92:1e:26:d8:81:12:4b:11:91:b5:55:76:7e:83:b1:27:81:e2:
89:f4:72:99:88:84:82:1d:69:37:3b:6a:d0:90:98:6b:8a:92:
c9:61:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:56 2025 by rpki-client on console-fra.rpki-client.org