Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: uBn0f/O01UoJKnAbzgJzy+lkNNOeTm5G+JS5n2sbAKI=
Subject key identifier: 96:2D:CE:E4:87:08:A4:67:3E:B9:7C:BD:AB:11:C5:B7:5C:14:4B:8D
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 0194BB6025361232AA67D1C8B0521B76EBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 08:00:27 +0000
Manifest this update: Fri 31 Jan 2025 08:00:27 +0000
Manifest next update: Sat 01 Feb 2025 08:00:27 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: 0rFirAoAZA48BXapkeZO452D8IYh/pnL2FcBGt11xpY=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:25:36:12:32:aa:67:d1:c8:b0:52:1b:76:eb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jan 31 08:00:27 2025 GMT
Not After : Feb 1 08:00:27 2025 GMT
Subject: CN=962dcee48708a4673eb97cbdab11c5b75c144b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:0c:ab:72:8c:3a:90:ed:de:63:72:3f:7f:
d1:20:ae:91:f0:6c:15:25:39:52:02:2a:0a:a2:91:
6f:4d:92:f1:9d:24:24:a7:fa:58:76:5b:b1:c6:8d:
78:da:09:55:53:ff:e5:8a:dc:90:6c:d7:c2:63:ae:
a3:cf:7e:27:2b:1c:8b:43:a9:2d:40:34:d5:05:8f:
39:97:7a:f7:e4:d8:ee:22:c9:77:8a:19:c1:ea:cd:
7e:e3:7e:a5:2d:4c:31:2e:e6:e4:c8:26:25:d6:c6:
f8:83:73:3e:c4:d7:19:e8:46:51:97:23:e7:c5:b3:
9f:a5:0e:07:63:84:e7:26:c9:01:ca:18:1c:e8:6a:
cc:c3:0c:9a:f4:29:0b:51:ff:02:b8:a4:07:94:69:
65:49:83:20:b6:ad:ae:b5:2f:58:08:d2:ac:05:5a:
1a:70:30:1c:55:7b:18:bd:0f:48:de:5f:05:a4:92:
9a:f4:36:ea:3c:f0:bb:ae:06:8f:fa:96:ec:f4:42:
ae:81:a9:e1:15:21:a4:69:f5:f3:eb:37:8d:d8:99:
4f:c6:e6:35:a9:1c:4b:0f:79:8a:a6:14:61:ef:f2:
c9:38:d5:c3:fe:51:7a:41:29:b0:e9:27:c7:05:81:
ab:92:27:9b:1d:4c:88:f1:12:86:ba:91:d6:fe:a1:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:CE:E4:87:08:A4:67:3E:B9:7C:BD:AB:11:C5:B7:5C:14:4B:8D
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7d:30:3b:25:25:4f:75:03:bc:67:39:f2:65:42:59:b9:c5:
e9:53:30:9b:f0:31:2f:ed:ed:8a:e1:01:30:31:5d:d6:fc:52:
d0:3c:58:f6:6b:ad:73:66:79:bf:e2:bc:3f:e2:5a:6e:52:a3:
16:f0:e5:2b:51:a5:ce:da:b9:11:fd:6c:c6:f5:78:d1:9a:6c:
a8:10:24:f7:8a:54:dd:6e:9c:3b:a3:33:65:4b:f1:cb:68:14:
2f:9c:e1:0e:38:3c:86:f9:99:ea:57:02:e8:c3:72:e4:4c:77:
f5:33:2f:f6:99:3c:3c:2e:fc:ed:2b:b2:93:55:79:a5:35:02:
d4:9a:ab:e9:86:71:8a:6d:43:55:77:55:b8:80:b1:32:ca:4f:
e8:88:4f:53:41:73:f6:65:60:f3:d0:a4:78:62:72:78:54:05:
21:50:d5:a9:09:bb:4e:3c:8c:6e:b2:07:4e:ce:59:a4:4f:23:
da:2e:d2:3e:1a:93:d4:6a:1d:fe:01:c0:f8:7c:a8:36:b3:03:
8c:b6:4c:de:b5:8d:2a:0b:5d:01:6a:2e:12:6b:1e:94:36:c1:
af:93:f9:39:c3:24:a9:46:3f:f2:92:7b:48:54:dd:27:90:8f:
8c:18:58:5c:0e:61:e8:74:e9:7f:4d:c2:db:ae:43:59:17:9a:
5d:fd:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:52 2025 by rpki-client on console-fra.rpki-client.org