Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: Hl2UGklAi0sAG4P6GDV62SX48rlUb+MCX4hsu1LbysU=
Subject key identifier: E0:B9:72:E5:07:C2:30:DA:94:7B:09:76:91:23:FE:54:4E:9C:F7:66
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 0194BB971CD85669C800F3DF05C6BAC9A888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 0C36
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: 3DbGa3H6JSp3RE04IHqR9XvXhhuTi+6bwCzvmLd5GeY=)
2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1c:d8:56:69:c8:00:f3:df:05:c6:ba:c9:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=e0b972e507c230da947b09769123fe544e9cf766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:4d:3a:91:1b:0b:d9:71:fb:c9:a2:24:7e:
37:95:99:50:19:02:93:49:04:3e:6d:b8:3f:a3:8b:
1b:cb:63:69:b6:2e:58:d2:70:01:4c:ae:94:66:e9:
25:c5:75:74:a3:f9:74:3c:1d:2e:15:eb:32:f6:3b:
71:67:87:00:da:f7:57:2c:6d:3b:35:d2:91:ac:c2:
e1:7e:8b:65:a0:1f:05:58:8b:0c:cb:c5:df:74:8a:
8f:1f:62:5c:74:30:a0:b7:b8:08:33:31:ad:21:76:
60:dd:7d:0e:26:b5:99:7a:03:87:5f:38:5f:e5:5c:
fc:2c:09:8c:95:c2:97:fc:ba:56:3a:bb:84:23:37:
0a:76:2f:2c:52:db:b5:9b:95:8f:f0:cd:58:e7:cf:
d7:de:6f:7d:4d:e9:0a:72:5d:bb:40:23:6c:ee:60:
26:e2:8d:58:ff:e5:86:ce:6b:89:01:09:9a:c8:35:
fe:d8:47:4d:bf:4f:85:b0:85:95:ed:38:7e:48:93:
21:2e:72:21:1a:cb:a3:22:18:14:23:fe:66:87:69:
75:f2:48:95:36:9f:2b:cb:7f:42:9a:71:91:db:31:
ab:bb:90:38:73:bc:03:47:1e:f9:04:dd:8e:48:ae:
0a:4a:6f:8f:9a:a6:98:90:e5:08:28:08:c5:74:5d:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:72:E5:07:C2:30:DA:94:7B:09:76:91:23:FE:54:4E:9C:F7:66
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:ab:d7:fc:17:ab:15:98:fa:49:3b:6b:ca:1b:b7:1d:b7:
20:d4:d6:0a:5d:63:de:95:d2:df:ba:10:2e:0e:8e:99:ce:29:
de:e8:97:14:d1:f7:5a:7d:d8:fa:40:24:fe:a5:62:dd:67:8e:
2f:5b:c0:3b:40:55:61:4f:bb:1b:e8:ff:56:e3:80:24:cd:8d:
fb:4e:ef:df:67:92:62:f8:f9:ea:35:78:91:64:72:69:19:98:
fd:cc:29:75:9a:48:28:8f:63:65:a2:4f:58:49:82:5a:b0:8c:
d7:f7:3c:6a:43:f4:83:48:fe:e1:e0:bd:45:db:64:e0:0a:51:
5d:0c:ac:e8:de:6b:3f:09:1a:6e:f4:1a:be:a5:55:6e:ff:24:
6f:94:d8:00:2b:03:ed:72:88:cf:98:9b:28:f3:f0:98:b4:89:
85:43:fa:ba:9d:ca:fc:aa:62:5e:37:8a:50:b0:5c:14:65:69:
18:a9:da:ce:04:70:ba:0a:8a:da:1e:b9:a8:b0:22:e5:97:3d:
75:57:37:41:f9:e0:26:fc:56:af:74:f6:49:1b:64:05:89:c5:
a9:1f:30:73:9d:a0:62:0e:7e:5e:a5:a7:e1:dc:6f:3e:14:7d:
49:b1:34:42:d8:70:10:a9:7f:8b:2e:d8:c6:7b:ae:a4:83:45:
1d:26:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:19 2025 by rpki-client on console-fra.rpki-client.org