Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: pRFmK8r6aQm6n6nOC55ge5QMlssx90b0PbwZnpF7teU=
Subject key identifier: 06:40:93:5B:30:30:26:CB:5E:AA:61:37:B8:9A:3E:16:C2:BE:E8:53
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 0194BABBA0124A7F951122FAADB20ECFA138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0BE1
Signing time: Fri 31 Jan 2025 05:00:45 +0000
Manifest this update: Fri 31 Jan 2025 05:00:45 +0000
Manifest next update: Sat 01 Feb 2025 05:00:45 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: 1hNKiyWWOb3t6o/JDa50t+acAzssW3eXuuP3sdInV8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a0:12:4a:7f:95:11:22:fa:ad:b2:0e:cf:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jan 31 05:00:45 2025 GMT
Not After : Feb 1 05:00:45 2025 GMT
Subject: CN=0640935b303026cb5eaa6137b89a3e16c2bee853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:d0:d5:ed:bc:65:37:3a:81:98:63:f2:ae:
5b:0b:56:81:6b:4b:95:92:7f:f5:9e:dd:9a:51:3e:
c0:be:28:e5:c8:10:24:01:50:7f:75:78:f5:52:6f:
d7:ca:20:ef:6e:54:5c:61:05:09:52:89:4c:3d:51:
5b:12:17:78:8d:9f:6d:e0:35:74:9d:fe:9b:18:72:
2c:30:f5:68:47:48:72:2c:aa:ed:8c:26:f1:ae:e2:
ae:d6:94:5b:dd:7b:a1:ba:fd:5e:16:7e:64:ee:c6:
a7:86:47:0f:6e:a2:f4:12:1c:94:34:f7:2a:cf:4b:
56:93:70:e9:d1:d7:b4:46:35:6a:ed:19:60:4f:a3:
91:26:7e:e2:91:d3:f9:27:c9:04:4a:a8:97:07:ed:
22:34:f2:53:95:44:cf:08:24:69:3d:eb:80:1e:43:
67:87:2c:88:db:48:d9:77:34:ee:5d:ab:3b:f5:a5:
89:fd:73:a7:76:75:98:c3:b7:d8:1b:d1:8f:d8:16:
c1:df:00:c1:30:e3:e9:de:3c:c1:3a:d3:e5:18:69:
de:84:30:95:1a:71:9e:23:ca:66:c2:03:62:e9:23:
4c:20:9a:ec:17:b7:08:f5:19:f9:21:af:43:0c:19:
57:76:34:de:78:4e:ec:e0:45:c8:c3:60:80:90:f6:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:93:5B:30:30:26:CB:5E:AA:61:37:B8:9A:3E:16:C2:BE:E8:53
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:75:f4:e1:49:46:d9:7c:fb:c0:39:5c:2b:a7:c8:ab:e8:
1b:62:1a:dc:5b:19:a2:63:db:f7:7c:a7:1a:e0:92:53:5f:47:
df:69:27:a1:e3:df:0a:9f:78:b2:65:31:bd:61:bb:e9:a4:66:
a4:7b:5f:49:0b:7e:61:22:49:dd:98:c3:1d:7f:61:5e:e2:15:
51:ec:60:f3:3e:60:3e:eb:3f:88:d0:60:7e:0b:2c:0c:89:45:
7c:3d:14:e8:3c:57:e6:5b:e3:ba:f5:96:65:f8:eb:a2:b4:a1:
a2:58:66:db:4f:89:0c:25:7f:2e:91:a8:dc:88:0f:72:38:5e:
67:75:30:4d:6c:65:03:74:b3:1e:20:82:79:65:4d:8f:46:4e:
48:6b:8d:8d:6c:18:17:65:af:4d:3e:42:74:0a:7c:16:61:f9:
2b:04:00:92:03:3a:d3:77:d6:6e:c4:c2:3c:b7:45:e4:77:92:
f1:82:21:ad:f1:ce:f1:aa:03:83:8c:7a:e0:01:87:ae:0b:5c:
79:03:85:27:3e:79:c7:dc:8e:3f:55:a8:0b:e6:64:6e:c8:50:
85:94:63:ab:2e:f5:68:cd:a5:90:42:d9:74:3d:7b:49:2f:e0:
9a:03:9e:9b:b4:19:91:4c:d6:0f:6f:5f:09:b5:bc:83:cc:37:
3b:d7:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:48 2025 by rpki-client on console-fra.rpki-client.org