Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: G7YTF+39DCM+cUee4lHwHA5hR9shphd0LY96Zwg7dUw=
Subject key identifier: 4A:75:6B:FA:70:75:2C:34:78:66:32:AF:1A:14:90:42:BF:FB:CA:1B
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 0194BA84400E1B1C67959645920000196875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 08BC
Signing time: Fri 31 Jan 2025 04:00:16 +0000
Manifest this update: Fri 31 Jan 2025 04:00:16 +0000
Manifest next update: Sat 01 Feb 2025 04:00:16 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: VWzjH24iopbM9I3l2yWl7C645GicCjA1nsfkycowCtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:40:0e:1b:1c:67:95:96:45:92:00:00:19:68:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jan 31 04:00:16 2025 GMT
Not After : Feb 1 04:00:16 2025 GMT
Subject: CN=4a756bfa70752c34786632af1a149042bffbca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:6f:2f:c4:79:d3:2f:7f:8d:2e:11:45:e7:
49:a6:65:6d:6d:0d:4c:db:6b:77:ef:ab:6c:41:1e:
1b:15:f7:54:6e:98:a1:0b:be:90:6d:d0:cd:e1:b3:
92:b2:2f:ee:14:aa:af:45:45:05:c0:e8:5d:45:9c:
08:5e:24:3c:c7:a6:a3:99:6d:38:a6:9f:bd:f5:2d:
d9:c7:1f:77:e4:55:b4:27:25:51:73:ef:b2:ce:3a:
36:52:19:8a:4b:c3:bf:ac:3f:11:e3:5c:0c:a7:77:
97:2c:81:fc:36:b5:23:74:c3:5e:e1:c1:c9:3b:a4:
0c:f7:9c:35:7d:f7:ad:e0:18:47:e4:85:24:b5:42:
7d:48:d6:8a:36:f7:aa:05:bb:14:17:49:e5:6e:38:
31:30:b8:21:fd:0c:b5:d2:b7:e6:ec:4d:37:1e:aa:
11:37:d9:53:fd:99:24:cf:78:63:9f:d0:70:d2:fd:
da:e1:ff:46:5e:57:4a:db:68:33:70:d8:75:6e:61:
7c:a8:aa:4d:d0:ee:ad:0a:bc:07:14:72:9d:cb:b6:
a4:cd:d1:dd:ce:58:00:00:09:b1:e8:64:67:4b:97:
29:a0:48:f0:d6:3e:58:5f:55:6b:19:b0:e1:3a:bc:
48:4f:2e:d0:ce:71:cc:0f:96:18:45:40:0d:8e:a6:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:6B:FA:70:75:2C:34:78:66:32:AF:1A:14:90:42:BF:FB:CA:1B
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:7d:d6:68:ae:fc:f3:80:73:13:31:5e:4f:3c:f4:da:36:
56:6b:5a:0c:90:a8:6d:08:f0:8e:ec:b8:ec:40:75:cc:6b:fa:
d2:1a:cf:0b:1d:aa:4f:0b:0d:f2:cd:3a:1a:08:ec:e2:57:08:
15:67:8a:2e:74:45:d2:44:74:c1:9c:90:e2:db:7c:cc:cc:39:
ce:a8:8a:36:d2:1b:a0:bc:0d:f1:b1:ef:66:78:54:a6:45:86:
3a:27:92:9b:d4:fd:32:57:07:1b:09:ed:f1:a9:ab:fe:61:1b:
22:f9:e0:c4:d7:87:22:5a:f0:7f:0f:8b:16:f7:d1:b0:46:3d:
e2:ca:c1:aa:66:1b:41:95:bd:d2:a8:e5:5c:31:70:39:51:3d:
d7:72:19:bc:7b:0c:99:66:4d:ca:bd:c2:f2:6f:ac:75:c4:d8:
7d:e1:22:d4:b9:6b:6b:b7:19:fe:37:af:c0:f8:d1:93:23:89:
c6:3d:18:2a:2b:56:cf:d8:cc:ef:7e:f3:45:de:5a:25:1e:2f:
e5:3f:b7:88:1b:2e:e8:cb:5e:ec:90:b8:01:fb:1c:d5:f1:41:
a5:67:79:a2:b1:0a:62:5f:ae:0e:ee:21:1f:52:5a:81:6e:a3:
b8:a3:80:51:3f:a9:04:ef:43:0d:42:fe:5c:bf:0f:1c:3f:98:
e0:2e:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:59 2025 by rpki-client on console-fra.rpki-client.org