Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: WKesvG/WGKbYCSKAmDr1qWgGIdgFvtef6Pj5zwnEjNI=
Subject key identifier: C0:78:E4:80:98:88:34:49:40:0E:92:53:48:64:E5:A2:5F:49:83:7B
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0194BB974AE0214DC0F7267AB460E2FEB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 09D7
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: vu71BIfYHCOvY4VIHB8+alKAp3tCyqZ56z81H2GbSng=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4a:e0:21:4d:c0:f7:26:7a:b4:60:e2:fe:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=c078e48098883449400e92534864e5a25f49837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:73:f4:92:6c:b9:b9:25:c8:19:1b:77:4b:
07:e0:0d:0c:4a:1a:81:de:79:70:aa:c2:13:f9:46:
e1:17:d3:39:bf:c3:7e:3a:65:4f:31:aa:eb:6f:a5:
f9:e1:69:fe:4b:a5:46:83:c4:ba:1a:0b:21:93:b6:
c9:48:12:0b:97:83:b2:d5:8f:f4:62:9c:6e:50:16:
60:4e:8e:e3:df:c4:9f:e6:85:e3:eb:17:4f:fd:0f:
ae:5c:6d:3c:ed:be:ae:6b:4f:03:6b:f4:56:53:35:
dd:f2:4c:a3:37:4e:ef:21:d2:55:6a:e5:cc:8a:05:
75:50:bd:e8:8c:fd:0e:89:be:c6:9e:76:66:4c:83:
ca:5a:8b:b1:d8:2e:b5:a7:43:fa:3a:64:87:16:5a:
29:78:0b:ee:8b:a1:20:4d:e3:aa:ad:bc:97:ec:84:
21:0b:54:7f:c8:4c:85:3b:8c:44:69:87:5f:5b:02:
c1:ea:90:50:cf:56:31:b8:cb:e2:57:10:5a:87:d2:
e8:a7:56:d4:af:df:78:16:5a:87:e6:8d:ab:1e:dc:
15:0d:a8:72:f4:61:7d:ac:69:5e:cc:7e:12:72:f9:
bb:44:6c:92:2b:ab:d1:91:76:3b:38:9d:90:08:43:
35:d6:de:23:fe:b3:0c:25:70:45:c4:54:21:18:12:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:E4:80:98:88:34:49:40:0E:92:53:48:64:E5:A2:5F:49:83:7B
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ba:b5:0c:65:51:1e:b2:42:2a:00:53:84:2f:38:01:f3:9e:
ad:96:78:64:a7:e3:57:9f:17:8a:67:3f:a6:fc:fc:fe:87:44:
da:f0:a2:5d:ba:7a:06:26:75:ab:ef:59:9a:7d:b0:9c:07:65:
96:dd:b0:1f:59:44:bb:4c:f2:41:a8:8a:71:44:b9:ba:f0:20:
22:d7:e4:3e:ca:9b:46:47:d8:47:d6:59:ab:2e:3b:04:a4:eb:
09:1b:2b:90:15:9f:c4:97:fa:46:4d:93:e8:b4:72:9b:e3:0a:
66:e8:69:e3:f7:c7:63:a7:ca:5f:6c:9d:27:6b:96:c1:5d:8c:
2b:a3:2c:05:a0:12:5f:2f:16:f8:bb:e3:85:f1:bb:ee:28:0e:
b4:35:24:74:d8:42:45:b5:70:27:b1:fd:82:4c:18:3b:75:4c:
0c:22:6a:99:88:78:87:73:bd:49:43:b7:2b:a6:78:0a:d9:50:
b3:af:64:bd:a1:97:40:2e:d3:74:3f:47:15:69:9a:2a:cf:28:
7d:58:72:47:1f:d7:29:fc:b5:62:93:8e:ed:9e:ad:4e:14:4a:
d1:87:04:72:66:2c:51:e0:73:05:d7:27:29:5b:26:53:b3:14:
e8:cc:c5:3b:d5:ef:ec:a5:8c:52:68:8e:b6:18:41:6f:8c:3f:
1f:54:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:16 2025 by rpki-client on console-fra.rpki-client.org