Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: 09ciEjsgQnjCvGZgCvBVszCW0tlAJ1YbZCXzlVJ+1Jc=
Subject key identifier: BD:DA:F4:A1:51:6D:36:D8:BD:55:9C:A3:3D:FA:66:D5:1D:B0:05:17
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 0194BB97375016E6BA52B3F0F563173D01C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 11BB
Signing time: Fri 31 Jan 2025 09:00:36 +0000
Manifest this update: Fri 31 Jan 2025 09:00:36 +0000
Manifest next update: Sat 01 Feb 2025 09:00:36 +0000
Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: ogr+pVpIiJtaDniCwP1sAKsdvJ2l4yOBU5wxi1qR+Rc=)
2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:37:50:16:e6:ba:52:b3:f0:f5:63:17:3d:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jan 31 09:00:36 2025 GMT
Not After : Feb 1 09:00:36 2025 GMT
Subject: CN=bddaf4a1516d36d8bd559ca33dfa66d51db00517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:72:ea:c6:f0:95:06:74:cf:48:c3:db:2f:
8f:64:74:fe:7d:69:32:3d:cb:aa:8d:02:21:ed:0e:
b7:e3:4f:61:69:e0:1a:32:51:77:3a:70:b1:42:bb:
64:78:28:3d:d9:ae:99:21:97:ec:07:72:85:54:b2:
1b:14:aa:61:15:27:fd:f1:c1:3c:43:03:fe:01:b5:
ef:03:44:f1:88:4e:ab:d9:ae:28:81:e0:05:be:2c:
fc:9f:65:44:94:26:0e:97:99:e6:07:59:65:83:f9:
03:81:34:c6:a9:8c:77:7a:be:49:16:34:e9:01:a8:
7f:27:e7:93:c8:f0:01:d0:8d:4e:30:23:57:0b:74:
e9:f0:17:07:a0:ab:94:3d:17:d0:93:2a:16:58:d5:
dd:9d:02:01:d7:48:fe:e4:5c:1f:e4:6f:10:3d:ec:
bb:ea:35:d7:bd:58:8d:0d:c6:f6:d1:14:46:db:3f:
ca:ba:20:dd:f9:82:b4:e2:e7:f7:48:26:be:57:5e:
6f:7b:60:49:e4:5c:80:9c:bd:cc:3d:de:30:93:e9:
b6:11:97:db:07:df:93:ee:fb:0b:c7:6d:57:9e:bd:
de:2c:b6:cc:56:69:18:f7:44:dd:3f:d6:e1:bc:df:
75:d4:8a:a8:ac:1a:27:c2:44:32:1e:83:f7:c1:54:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:F4:A1:51:6D:36:D8:BD:55:9C:A3:3D:FA:66:D5:1D:B0:05:17
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:cc:43:52:72:2d:dd:ca:e9:16:5c:c0:21:67:8c:dc:bc:
22:ec:44:c9:d5:29:1a:aa:7f:00:fc:58:f3:0a:02:06:50:7a:
41:c8:fe:d1:9c:8e:be:c5:51:36:6e:14:b6:c5:b5:60:70:6d:
41:a4:12:44:10:71:70:af:50:d0:ec:65:be:ad:9f:74:25:50:
bc:e9:52:49:e7:4f:61:5a:8b:ae:8f:e9:f6:0f:20:f3:50:de:
b5:f7:38:6e:68:bc:16:78:0a:12:b4:9f:53:e3:fd:ee:90:cd:
93:84:61:02:71:88:4e:69:1e:e2:f1:4d:53:6f:73:28:2f:d1:
92:b3:72:6d:4f:ef:b3:3f:f0:36:22:99:c7:5b:ce:1c:dc:09:
82:79:59:f1:a1:e7:9d:35:97:df:50:7c:86:48:84:65:cf:18:
eb:8f:4d:77:51:d9:ef:c1:9f:80:6b:c2:ca:0c:32:d3:c2:66:
fc:5a:24:94:e3:bb:35:ea:f9:53:08:f2:76:82:75:c8:73:fb:
5c:6c:32:6e:eb:e6:bb:f1:1b:ba:e3:aa:73:8b:90:9a:d8:c6:
1d:40:1d:fc:8d:2c:02:6e:9d:ff:c9:f3:50:10:b0:1d:c1:34:
0b:71:c0:41:bc:36:ce:d7:0e:49:d9:7a:14:37:2c:87:c8:ce:
eb:16:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:54 2025 by rpki-client on console-fra.rpki-client.org