Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: boE6nbbJk85xgjR78j6tF4JmjDxQYIEjFC1Rtx+t5XQ=
Subject key identifier: FD:CB:9A:E2:B8:C8:93:4B:95:AF:B2:BE:14:48:DD:A9:6A:7C:16:F4
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 0194BB2949971CE56036B8D3A3DECB868D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 07:00:32 +0000
Manifest this update: Fri 31 Jan 2025 07:00:32 +0000
Manifest next update: Sat 01 Feb 2025 07:00:32 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: wKpQAQO8hj4bvQWKkHp6O7wcfQm3ZKEJGJVoJ8PJmwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:49:97:1c:e5:60:36:b8:d3:a3:de:cb:86:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Jan 31 07:00:32 2025 GMT
Not After : Feb 1 07:00:32 2025 GMT
Subject: CN=fdcb9ae2b8c8934b95afb2be1448dda96a7c16f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:a2:86:b7:cc:4a:3c:19:9b:36:8a:54:3f:
ee:16:79:2b:f6:28:98:3f:29:cc:fb:ef:a9:91:9f:
e1:fb:85:a6:5e:61:71:05:89:38:7e:b0:a0:ca:b4:
b2:37:fd:f9:a9:ab:df:62:bc:29:49:d5:1e:17:ac:
14:2d:20:b4:11:6b:10:cb:7a:2d:b0:b8:a1:8a:05:
7f:eb:65:b7:90:ad:8e:34:26:1e:c1:af:ee:ca:9b:
77:66:9f:f7:e7:2d:08:3e:ae:49:1d:b3:95:5d:68:
54:7f:4b:f8:ff:ca:13:c5:80:3a:f0:8f:3d:e2:28:
cf:fa:89:a9:6b:fa:a2:17:01:96:5e:09:16:da:20:
c2:70:1e:af:6a:23:80:8e:3e:00:a4:68:88:06:15:
4c:44:d0:12:10:a7:2b:f8:6c:b8:75:12:ee:e2:b8:
fa:de:2a:66:c6:14:e0:0b:30:38:dd:ea:d8:2e:a2:
9a:0d:0f:bc:d7:08:54:ee:ba:70:85:06:58:a7:23:
b6:90:e2:d9:8a:8a:66:92:2b:ed:ea:29:ab:63:4e:
90:2c:a7:7d:1f:8c:6b:a9:a2:47:f5:81:5b:9f:6f:
19:70:9e:76:0b:13:6a:a5:ac:e8:16:a4:bf:8c:64:
7a:3e:c6:79:1e:1c:0f:a6:56:2f:f0:d7:36:52:94:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CB:9A:E2:B8:C8:93:4B:95:AF:B2:BE:14:48:DD:A9:6A:7C:16:F4
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:73:f5:97:8e:f2:b5:a8:bf:35:c2:ae:8e:43:22:7f:67:58:
46:91:e8:c3:0a:a6:bc:c2:67:03:a5:70:2f:2b:71:39:1e:bd:
8f:cc:aa:e3:3c:1d:0d:62:c8:81:da:81:84:a2:59:56:2c:88:
b3:28:e4:01:14:8b:16:3a:c6:d8:7f:62:80:ce:65:c8:f9:6c:
2b:07:af:51:fd:55:0f:ea:13:ed:c1:32:02:9e:8f:7f:76:db:
5c:f9:f1:25:75:68:0b:a1:5e:4b:54:b3:48:76:52:16:ef:fb:
ca:26:5c:29:2a:7a:74:7a:51:f5:bc:a7:4b:f8:58:fe:d0:8a:
7a:c1:44:95:9a:3c:0f:a5:5e:33:fb:cd:be:4c:85:e8:1b:17:
b3:1e:40:86:5c:b2:96:76:f8:ea:6e:79:80:af:29:27:4a:14:
14:9e:09:1c:44:4d:0e:76:60:62:c9:5a:a2:c9:f6:be:34:17:
19:70:93:ec:02:64:6b:f3:69:e1:0f:97:6d:5d:ab:e6:b8:0d:
ab:7d:9c:e2:b5:aa:9f:de:58:3f:32:67:48:68:3c:7d:cc:75:
45:0c:8b:65:ea:af:15:31:1f:12:df:04:e4:2d:1f:36:f8:fc:
0d:69:41:d9:ed:82:18:6b:a3:26:b9:c7:87:2b:72:c5:4b:59:
14:0e:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:21 2025 by rpki-client on console-fra.rpki-client.org