Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: fy1U6NNsF+5bXIirSOV94/Yy/Hc+NF0zVJBemhZ32jg=
Subject key identifier: 4D:0B:03:BB:98:06:B8:8F:27:DD:73:68:DA:44:4D:3A:F2:50:A1:00
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 0194BB5EE83CB9E35111345757EBCD168F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0D51
Signing time: Fri 31 Jan 2025 07:59:06 +0000
Manifest this update: Fri 31 Jan 2025 07:59:06 +0000
Manifest next update: Sat 01 Feb 2025 07:59:06 +0000
Files and hashes: 1: EBviMFYi8rZcphn8RJGlAKBgxTk.roa (hash: 8nvV1InE36Gf9l6K4C4ZM0vFwJYFzsCUlHvr3Ohnwio=)
2: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
3: UVX7i73xTf8HXSe4y9KHKB797Lc.roa (hash: aDk/GLVDvACcwLd9kMCdjb1R7e1Nu8NwyRgL4qjO1BE=)
4: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: 2WFpk0ALmSEuwfPu2bNc5hd0qz+CPp0cS9rMx7gcUO8=)
5: VjMPHeJDKYGawcvbQkGRY-IGbRw.roa (hash: U2Wh3/ktayWnH5Ju+3oCrYV1vRV7bDQpKkdbX5Ys83Y=)
6: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
7: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
8: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5e:e8:3c:b9:e3:51:11:34:57:57:eb:cd:16:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jan 31 07:59:06 2025 GMT
Not After : Feb 1 07:59:06 2025 GMT
Subject: CN=4d0b03bb9806b88f27dd7368da444d3af250a100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:05:b6:41:8c:a6:89:87:dc:e6:56:0a:4b:
30:cc:70:1a:a5:31:44:be:9e:fb:6b:e5:a8:9d:02:
d4:de:9e:f2:64:9d:17:6c:8c:cc:6a:c8:33:4f:4b:
1c:fd:93:50:0b:ba:62:bf:1e:6d:da:1c:c4:5c:9d:
af:49:4d:bd:fd:c7:3c:dc:9e:6c:37:59:c2:6d:61:
4f:74:cd:84:55:e5:c7:41:83:be:9b:fa:9e:c5:80:
71:05:e0:92:dd:92:99:52:b1:1f:40:6c:50:8e:c6:
32:25:d1:5d:6c:c3:a9:55:c9:04:39:8f:71:c5:3c:
c0:12:df:80:a3:c4:63:a9:73:e6:40:b7:fb:b4:73:
85:53:e9:69:90:25:a0:77:ad:2c:3a:28:81:60:14:
24:8a:e9:72:61:14:09:53:80:c5:ef:13:e7:65:89:
e6:9c:79:98:79:e7:91:f6:e1:20:37:3b:f8:f9:30:
4e:ed:bb:2b:4b:b1:44:bd:4a:4b:23:12:06:7a:90:
44:9e:8b:cb:98:14:91:b5:7c:79:b3:02:a4:3f:c6:
68:e6:90:98:5e:01:9b:6b:14:7e:60:b6:7a:38:e6:
6c:23:96:f5:c6:53:45:28:8c:25:22:10:7a:44:36:
fd:bf:d1:91:04:21:42:d3:f5:ad:f4:19:41:b9:6c:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0B:03:BB:98:06:B8:8F:27:DD:73:68:DA:44:4D:3A:F2:50:A1:00
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:df:91:95:f6:20:dd:e7:4d:d9:a0:17:c7:0b:90:60:b0:5a:
0a:da:08:50:d9:a7:1b:b9:98:00:17:51:fa:0f:8e:1e:6c:3c:
26:11:1b:92:01:2b:30:4f:f0:46:3c:da:69:de:99:be:84:14:
d1:64:33:23:c5:d8:2b:cb:90:a3:5b:fa:28:f6:dd:7e:ed:02:
13:f2:f5:70:46:f7:62:1e:7e:4d:2c:49:55:d5:b5:37:69:8c:
47:88:c6:5c:f5:a6:bb:ba:2f:9e:51:6f:6d:0e:3a:64:9f:73:
9f:80:55:7d:d6:77:90:d0:01:91:0f:0b:9d:ab:b6:eb:e7:dc:
83:5b:62:00:48:cc:aa:51:e3:c9:77:49:fd:a3:b9:38:dc:b6:
1e:5f:73:b1:bb:50:66:4d:ba:8c:95:40:91:15:00:ae:e3:73:
fb:a7:9b:f0:cc:15:b9:f5:e0:35:bb:17:0d:56:2c:10:0d:e4:
a8:ad:d6:59:a0:21:38:b9:fd:8c:08:57:a5:e1:9a:69:69:b9:
12:2c:6f:72:c8:3d:38:a2:d1:55:bc:cd:80:f1:89:99:15:9b:
38:aa:ba:eb:a7:26:6a:19:76:85:15:1f:4b:96:ff:6a:5c:71:
ee:7a:87:c2:53:3d:11:89:2c:05:a5:c2:0b:99:de:fe:0d:9f:
8d:78:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:44 2025 by rpki-client on console-fra.rpki-client.org