Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File: x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier: yPkKFrk1hy2BmL2F/eU6kHloyp82N+AqC9mCHLx+L9E=
Subject key identifier: DC:EB:FE:B4:F4:E8:93:84:EE:3D:EB:54:53:20:A7:9F:8F:83:F9:10
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 0194BAF23CC4BE5E1D24CF591DA6DC3B6EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number: 0CF3
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: 649lyIDC2UwkmHul2wRd4b1rCNs.roa (hash: p4ozwtIxeW7bNZvhNBKCuX30f4bEfNwl4a1UC3r5A8E=)
2: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=)
3: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: XkQ2wmLKAZobWVYtwjuQqePazPL5xburoVCiKNnWSko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3c:c4:be:5e:1d:24:cf:59:1d:a6:dc:3b:6e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=dcebfeb4f4e89384ee3deb545320a79f8f83f910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:4c:f5:67:c7:cc:bb:b8:4a:99:5a:89:f5:
ba:22:7c:2c:07:93:86:cb:82:a2:3f:f0:1f:8b:db:
b8:95:11:8e:26:52:f2:6e:65:83:2d:ac:84:5b:81:
5a:32:33:c2:83:1c:3f:87:ac:27:9d:09:0e:05:a1:
42:6d:1d:25:a1:56:b5:60:ae:3e:46:f3:1b:fe:c8:
98:f1:4d:de:16:72:0f:5a:c5:ca:91:8c:c5:a5:c1:
8c:ad:45:90:91:76:b1:66:e2:4f:3a:e2:94:e3:67:
9f:bf:67:ad:6e:7a:c4:59:98:6a:48:e0:c8:70:bb:
8a:54:54:f6:7d:8c:91:ee:f9:bd:01:82:43:0c:12:
95:ac:a9:c6:db:4c:f7:c5:27:e6:47:1e:fb:47:38:
08:ee:01:26:17:81:e5:7c:d1:c6:58:ab:b7:e1:c9:
0d:a1:79:a9:13:6b:85:70:a5:33:8b:a1:3a:f4:74:
5c:e1:d7:6a:6e:b1:42:88:e0:41:1f:69:9a:65:69:
0f:ff:89:73:47:6b:72:2b:6b:f7:29:bb:d2:79:85:
04:08:86:a6:fe:c6:3a:83:ac:e0:a9:ae:21:08:5c:
16:b6:b6:11:88:91:52:5f:25:7d:51:04:ab:11:a7:
81:f9:79:dc:a3:12:d5:af:58:d1:54:a2:96:f1:1e:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:FE:B4:F4:E8:93:84:EE:3D:EB:54:53:20:A7:9F:8F:83:F9:10
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:97:60:b4:50:53:91:42:b6:7f:aa:ca:8b:cf:7e:9e:e3:
85:3c:2c:70:59:d8:c8:3d:e6:25:8a:46:2b:2e:7b:a2:58:f0:
a4:20:b8:89:2e:a6:db:e5:da:55:07:bc:29:97:af:40:1e:fe:
6b:18:e7:5e:97:1d:db:b5:02:bb:09:ea:c9:97:f9:3d:15:ca:
3a:42:9b:00:3c:24:42:c9:28:58:46:14:9d:fe:86:29:ed:92:
4b:1f:4e:51:b9:56:60:64:b9:43:9a:12:e3:3b:0b:64:5c:6e:
db:31:37:e4:76:72:ca:db:0a:2d:5b:88:b7:ca:d8:1b:cc:c8:
9f:d0:14:50:20:84:9f:15:12:87:ad:84:88:83:57:4f:db:c9:
5e:0b:8a:0b:dd:8e:11:a3:cc:fb:7d:68:c5:66:b2:5c:4d:87:
97:c8:7f:9e:3e:81:9e:07:08:8c:5a:54:e9:d2:bb:85:1e:9e:
8e:06:fe:bc:91:e2:79:de:b9:b2:91:2a:54:e9:58:ac:d5:d1:
24:1c:b8:92:36:fb:16:c7:26:ee:15:47:49:6d:b3:f9:ce:f0:
60:a1:5a:f8:52:ab:ca:a7:e8:68:f0:68:2c:c2:81:38:2c:31:
b3:7c:68:b2:98:55:5b:4f:11:3b:42:33:ee:ff:a3:3f:87:ed:
5f:20:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:26 2025 by rpki-client on console-fra.rpki-client.org