Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: HmjFAVdtFdx8HyJlIP64glJ1HXqji3BrCRnfpATc9ks=
Subject key identifier: E2:0D:9E:4C:BE:C8:17:12:56:D5:C9:B3:8C:4E:54:40:54:B7:C6:3C
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 0194BABB91AF7009603B640C7789E765E369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 023C
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: /NEzpCpTqdgPDIvomZsub2BU4Fv25GatJVxIewT0Vr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:91:af:70:09:60:3b:64:0c:77:89:e7:65:e3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=e20d9e4cbec8171256d5c9b38c4e544054b7c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:38:4b:97:56:e3:66:d2:33:3f:0b:0f:9a:
8e:3f:0d:49:3c:1b:dd:8d:3e:81:0d:eb:cc:86:0a:
a5:af:f9:37:e4:4d:0c:b7:04:18:ba:a6:64:ec:fd:
af:e3:d9:7c:3b:64:08:23:5c:c6:4e:e2:c2:35:c9:
10:73:39:6a:9d:3a:f1:92:5c:32:4c:4e:cf:12:77:
96:42:b9:cf:57:45:26:56:66:2c:ca:14:ba:12:cd:
1f:cc:e5:4b:70:46:bf:cc:ff:47:fc:3c:fd:5a:49:
96:d0:63:1e:c3:b3:b2:1f:eb:46:cf:56:4c:19:03:
cf:eb:77:37:37:61:1b:42:ba:d4:d7:9f:4d:05:f9:
4c:ad:62:a5:19:fb:e1:91:d1:7e:1e:f1:0b:e0:91:
bf:63:07:86:1a:76:8c:20:26:00:ea:6f:b7:ad:66:
79:4f:2a:6a:1d:7d:70:7e:81:71:31:bc:75:21:79:
f0:89:2b:00:4d:30:76:19:1d:98:40:c7:ea:25:fb:
53:a5:14:ad:66:2f:4a:37:6f:77:65:04:de:d7:88:
c1:9e:e1:da:04:1b:d5:39:ef:27:04:eb:7b:27:3b:
4c:7b:14:f0:08:fa:a5:3d:9d:71:6b:be:4e:b1:2d:
cb:16:f4:eb:8a:76:68:1e:52:a1:f5:f5:b5:82:85:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:9E:4C:BE:C8:17:12:56:D5:C9:B3:8C:4E:54:40:54:B7:C6:3C
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:a7:8a:d2:d2:1e:2c:20:1c:75:4f:17:5f:05:38:28:d7:
66:45:a1:be:96:b5:b7:34:4f:1a:f2:64:f1:1c:b6:ee:81:7b:
a5:69:c6:26:6e:f3:57:21:12:b7:12:96:70:99:1e:92:20:f5:
6b:2b:85:e0:65:57:d8:14:59:3a:f9:dd:05:ba:b3:88:5c:35:
a0:77:be:a0:77:70:e4:e9:a1:bd:22:7e:b2:4c:f0:db:a2:ee:
85:34:d3:10:58:37:c5:13:67:1a:18:f4:e6:0e:07:bf:a8:fd:
e4:85:26:8d:0b:12:f1:da:11:39:d0:ea:19:bb:2b:6d:cc:8c:
d5:59:a2:01:7d:5a:f9:52:1e:15:2d:0b:52:6b:3c:1a:22:7b:
9f:be:42:cb:4a:38:02:08:0b:0b:9e:51:87:fa:67:af:8b:4e:
53:eb:b1:aa:30:3f:6d:c1:31:da:44:9a:ca:b5:ae:7b:b3:ae:
58:61:78:c4:54:d6:78:c6:48:eb:0c:7e:63:1d:fb:1a:af:83:
1e:c3:32:cc:4f:60:93:0c:ce:b2:b3:e8:3e:53:10:58:42:49:
fb:44:b5:ce:63:b8:4e:a9:9d:4f:7b:2e:b7:a7:6c:12:47:f4:
89:be:ed:f1:42:4f:80:af:fc:dc:db:5e:e0:00:6f:93:a3:8f:
12:12:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:39 2025 by rpki-client on console-fra.rpki-client.org