Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: KqsXAUQxC0yeP9qR7IVuqgbX74YrCFGFNXAMVP8Md4w=
Subject key identifier: 3B:7F:A5:53:06:E4:B3:58:95:BD:FB:7B:C6:51:96:1B:EC:69:E1:94
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0194BAF282277322240EBE5131B41E36E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 06:00:42 +0000
Manifest this update: Fri 31 Jan 2025 06:00:42 +0000
Manifest next update: Sat 01 Feb 2025 06:00:42 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: JBkSGLux09XfVR7+l2GFKVE+QUQyIBkGd7dHiuzLEi8=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:82:27:73:22:24:0e:be:51:31:b4:1e:36:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jan 31 06:00:42 2025 GMT
Not After : Feb 1 06:00:42 2025 GMT
Subject: CN=3b7fa55306e4b35895bdfb7bc651961bec69e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:78:39:c7:cd:56:ba:e2:57:42:0d:2c:c5:
23:ae:bf:13:83:56:a2:28:67:4a:4b:06:0c:b4:68:
30:b6:6e:88:c9:1c:f4:f8:15:3e:d2:be:dc:d9:e6:
f9:c8:1b:ec:d1:f1:88:35:75:b2:e5:a7:d4:2a:0a:
10:85:af:2e:3e:fc:6f:cf:6f:89:a4:8d:9d:2c:63:
22:bb:2d:2c:a4:c3:55:3a:1d:2a:81:b5:5f:ec:7c:
21:1b:d4:c4:67:ce:e2:ff:b2:08:f4:8b:47:0b:1d:
df:eb:ff:3a:c3:30:9b:c4:79:6a:7c:d2:d0:1f:55:
48:2c:d7:71:c2:7d:b5:d0:ea:59:5a:29:0f:e2:93:
da:ba:02:55:91:17:04:6a:52:e2:61:07:4d:7e:8a:
17:f0:a6:a9:53:78:6b:fd:1c:7b:cf:a4:1e:91:00:
3f:5b:38:f0:1a:c6:6a:dd:ee:c6:4a:6c:3c:9b:83:
5e:8a:69:52:98:37:b0:f9:01:a0:c9:e7:e9:32:9a:
8a:eb:a5:27:2a:fb:a2:10:c7:87:f4:93:26:4b:3a:
3d:b2:69:98:a3:f1:d9:2c:cb:e3:77:63:0c:52:d5:
4e:77:9c:73:0c:00:cd:3a:09:65:19:35:14:ca:ac:
5f:54:dd:4e:22:15:4b:cd:5e:d8:aa:75:c0:36:50:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:A5:53:06:E4:B3:58:95:BD:FB:7B:C6:51:96:1B:EC:69:E1:94
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:bf:9d:b3:d7:df:7c:2e:6b:f2:08:63:91:2c:76:ab:27:
e1:55:d1:e0:13:80:6a:8b:4d:44:30:ea:20:df:7f:61:07:b4:
59:41:27:9e:d5:ec:bc:90:ab:13:36:3c:f2:99:f7:47:23:85:
2f:86:49:b3:9c:3c:a3:10:2e:c1:03:4e:d8:d7:f8:73:04:34:
3e:04:7b:0b:bd:2f:e5:4b:5b:c4:53:e7:32:62:dd:b5:ce:79:
02:99:12:5f:6b:a1:05:11:6a:30:d0:75:dd:f0:bf:9c:1f:fa:
a4:f0:e6:09:47:80:f8:6d:12:56:f3:82:af:95:91:40:ba:64:
1e:fc:b8:4a:32:98:02:ed:94:d9:3b:6d:b7:b5:41:fd:d5:38:
b5:30:2b:13:eb:1c:b2:f9:f6:f5:4f:61:b5:11:e2:06:da:0f:
45:5a:96:40:13:1b:5c:a4:76:32:55:df:3d:76:a0:3d:8f:9e:
f9:f5:35:1e:20:06:7a:42:97:87:8f:63:2d:da:7e:8c:18:52:
87:af:3a:e3:5b:d0:23:da:97:f7:98:f9:3d:ba:87:a5:fc:b7:
56:31:f0:48:50:80:7f:dc:7a:8a:5c:1e:91:c4:2f:f8:74:db:
ac:27:13:fa:b0:29:f8:b7:12:46:78:f0:76:b9:09:c7:88:c0:
3c:8d:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:36 2025 by rpki-client on console-fra.rpki-client.org