Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: HmZLde7XT0511GAA2V/orqXa/Vm4wuPiwtcMaFEdFqE=
Subject key identifier: 38:C9:46:D6:B6:1B:61:0A:D8:C5:15:D3:14:DB:D2:5F:D3:D2:50:F6
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0194BA8439438123006F96D75CD4E42A7FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:15 +0000
Manifest this update: Fri 31 Jan 2025 04:00:15 +0000
Manifest next update: Sat 01 Feb 2025 04:00:15 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: vrSRBbK7ywE+5Wx+sKh0ZYNFzXn+kYGHE6f52q0hvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:39:43:81:23:00:6f:96:d7:5c:d4:e4:2a:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jan 31 04:00:15 2025 GMT
Not After : Feb 1 04:00:15 2025 GMT
Subject: CN=38c946d6b61b610ad8c515d314dbd25fd3d250f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:0b:08:55:c8:f8:15:20:f8:55:e6:22:cb:
fd:db:de:3c:ac:b8:dd:5e:60:66:a2:64:1a:2b:04:
86:22:de:aa:17:5f:4c:18:d9:04:86:42:c1:af:2c:
3d:1e:8e:bc:e5:6f:4d:0a:13:21:08:f4:0e:d0:c5:
13:d8:b9:5c:6a:ea:11:14:36:46:c8:07:61:d3:61:
3f:b7:cd:5d:42:66:57:5c:45:65:94:00:13:b8:6c:
0b:79:1a:ea:cd:e3:a5:7b:55:79:f8:47:94:36:ec:
51:39:52:51:71:79:12:94:c4:ad:cb:1c:7e:cd:92:
f1:2b:f8:48:96:7a:98:3b:99:35:29:18:1d:7a:22:
7d:c1:12:f0:a1:05:ea:e4:e8:18:4a:40:a1:d7:9a:
69:38:12:ff:aa:42:03:e3:43:63:22:d6:51:81:6b:
72:1f:2e:08:f8:b5:f6:08:f5:7e:9a:04:bb:d5:5f:
ab:da:05:01:a4:e7:2a:f7:cc:28:16:83:b3:68:c7:
12:3a:e8:4f:6a:02:0b:92:fc:93:48:01:e1:16:d4:
0b:6a:78:b4:83:61:17:a5:8a:e3:e8:4d:c8:32:db:
3f:a6:64:f0:73:96:54:d1:39:d2:a1:c3:64:7c:ac:
fa:d7:6d:a2:60:bb:57:39:9a:c3:45:f0:2a:d5:46:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:46:D6:B6:1B:61:0A:D8:C5:15:D3:14:DB:D2:5F:D3:D2:50:F6
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:73:17:97:e2:7a:76:d2:01:a0:78:07:4b:78:85:31:c1:
51:d5:2b:d0:15:7d:89:7a:7a:6e:c3:91:2f:06:b2:f8:e5:a4:
a3:2c:f9:f2:06:3f:2f:de:1b:0f:25:95:5c:f2:e0:26:8c:f2:
25:fc:9c:c4:1c:fe:38:fd:ff:1b:73:8d:11:aa:f0:1f:bd:4e:
00:8c:8d:b8:38:be:a6:bf:f2:3a:3f:7c:8a:bf:14:be:6f:3e:
db:d1:7d:60:f3:c2:5f:7a:49:d4:75:55:02:19:1d:80:60:97:
3a:60:80:b6:ed:66:f2:51:3b:f9:b0:94:d4:d6:8a:59:d1:8e:
c6:14:e5:ad:23:0e:4a:a4:6b:8a:52:7b:05:e9:57:4e:4c:ca:
42:e9:d3:d7:9d:96:d1:c2:3b:26:82:39:23:f3:61:7b:91:b8:
40:f7:63:cf:1c:fd:ce:87:9b:c6:84:8b:c6:ff:11:cb:c0:f7:
86:2c:55:c9:5c:87:74:f1:9c:8d:2f:7e:03:08:df:83:6f:44:
4a:71:eb:88:96:e2:c7:65:e0:9a:38:f0:da:a4:66:b9:f7:86:
dd:f9:6b:a3:08:38:17:e9:ac:06:bf:86:c7:0f:2f:0d:6d:a5:
af:3b:d2:5f:3e:0c:a3:17:04:c1:4f:38:92:81:3c:1c:ff:4e:
40:a8:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:28 2025 by rpki-client on console-fra.rpki-client.org