Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: dNaQEhpSxLP/0UmY5cFUuxHlt4ERisWL983s+4pnkRA=
Subject key identifier: 03:05:0A:9E:61:CD:B3:CE:09:79:FB:38:AB:20:B1:80:33:C9:F4:CC
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 0194BB9741101EE9362EFCFD2AB6FE2DFE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0B46
Signing time: Fri 31 Jan 2025 09:00:39 +0000
Manifest this update: Fri 31 Jan 2025 09:00:39 +0000
Manifest next update: Sat 01 Feb 2025 09:00:39 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: BBOSTSgaO5MmhueoyRd2PGkiPZRK1OfNK5vDIbiUOF4=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:41:10:1e:e9:36:2e:fc:fd:2a:b6:fe:2d:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jan 31 09:00:39 2025 GMT
Not After : Feb 1 09:00:39 2025 GMT
Subject: CN=03050a9e61cdb3ce0979fb38ab20b18033c9f4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:d7:96:67:f4:cc:9e:38:a0:6b:91:6f:32:
cd:04:78:ca:e0:95:ed:04:43:de:ae:94:6a:c5:51:
aa:42:98:dc:c4:e0:99:d3:97:00:66:e8:fd:d1:1e:
3e:d8:9b:94:6f:03:af:e8:a4:3e:84:4f:fd:94:15:
1e:95:75:37:0e:dc:4f:98:54:4b:87:88:b3:0f:fc:
d2:6d:47:f3:8f:4e:64:95:dc:32:31:5f:62:95:bc:
b0:ab:b4:26:df:40:9f:3e:27:7f:ec:b6:5f:6f:2f:
a2:ae:57:31:d3:6e:e5:d1:53:72:5e:33:55:5d:6f:
52:ab:13:eb:57:dd:04:92:19:91:fe:74:35:89:f7:
58:e9:91:b6:b6:0f:8c:3a:94:98:a2:53:86:13:f5:
07:e8:52:94:25:a5:53:12:6d:77:43:cc:0c:10:d8:
1b:8e:47:25:14:53:9d:75:8b:70:f4:36:1b:cd:e1:
6d:0b:48:0c:fb:d0:4d:a0:c0:d2:07:20:cf:11:a1:
ea:72:c3:cd:19:a5:ca:c0:fb:5f:ae:a7:44:7e:e4:
21:72:21:72:71:59:b9:21:ee:66:79:61:67:ed:c4:
0e:40:b9:36:36:ed:c4:e7:66:11:b1:08:66:2e:5f:
5f:59:e7:50:c1:e7:ff:e2:bc:1d:d4:49:96:15:22:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:0A:9E:61:CD:B3:CE:09:79:FB:38:AB:20:B1:80:33:C9:F4:CC
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:cb:8c:40:a0:b5:e1:18:89:61:f9:c7:8a:cd:cb:20:f0:
5b:86:d5:39:e6:37:b9:c2:d0:c3:04:d7:89:18:94:4a:4f:3c:
36:ac:52:7c:3f:0b:cf:50:81:44:52:08:28:15:45:61:09:77:
5f:20:36:de:8e:5b:7f:66:e8:fb:39:b2:86:fc:ec:7e:7a:6b:
3c:75:88:0a:2a:2e:ed:51:dc:5f:06:44:d0:46:77:ba:6c:a0:
df:c1:7c:d1:a7:59:9d:fe:dc:f4:5f:95:c7:4d:7e:36:72:99:
03:41:ef:c6:46:7f:71:03:c9:31:7d:69:66:70:bb:18:dd:2b:
e6:1d:ae:63:9d:ad:e9:e6:d9:25:b6:37:56:eb:55:27:1e:4c:
67:21:08:da:13:8e:96:c8:c4:d9:79:d2:8f:88:50:eb:0c:a9:
b3:64:f7:2a:b7:27:98:50:18:bb:0d:26:37:58:df:8b:7d:ba:
58:b4:58:b3:7a:6a:5d:2f:c2:03:20:89:dd:b3:5a:34:6b:d3:
aa:d0:7e:dc:a8:bd:d3:f0:67:d3:b9:9e:cf:89:a1:a7:2a:3c:
8c:66:eb:57:5c:b8:22:bd:5a:c7:bd:e6:b9:01:0d:8e:e2:47:
4a:38:50:ba:f1:a8:42:73:d2:47:c0:c7:9e:ca:62:3d:42:38:
ce:0a:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:54 2025 by rpki-client on console-fra.rpki-client.org