Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: Wtrqb4xHLaMCzdoCPJ4ktsbE5JALfspscVbs+05br2A=
Subject key identifier: B5:0A:29:9C:62:E8:01:35:C2:C7:4A:1B:9D:AC:69:A6:54:E9:C5:E6
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 0194BABB40CA8845FD6C05D1FCD19D321374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 088A
Signing time: Fri 31 Jan 2025 05:00:21 +0000
Manifest this update: Fri 31 Jan 2025 05:00:21 +0000
Manifest next update: Sat 01 Feb 2025 05:00:21 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: iogfzKupZ9vxZ0W4oCOyVb574e/v/0myGbFcZNC1Q7Q=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:40:ca:88:45:fd:6c:05:d1:fc:d1:9d:32:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jan 31 05:00:21 2025 GMT
Not After : Feb 1 05:00:21 2025 GMT
Subject: CN=b50a299c62e80135c2c74a1b9dac69a654e9c5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:65:fa:49:fe:55:e8:4f:94:5c:00:71:cb:
01:27:da:0e:03:f8:02:9f:8f:41:f5:2b:ec:52:b4:
59:10:61:cd:74:a2:c9:a1:fc:9c:dd:5e:b6:60:08:
d8:72:a3:db:fc:6d:07:e1:98:10:3d:77:31:52:6c:
a0:3b:27:1f:d2:7e:14:45:31:91:28:a9:57:9e:f6:
06:57:dc:29:a8:c0:ee:b8:52:76:71:48:70:a1:13:
a6:6f:43:80:d8:ff:72:75:ae:05:03:11:fa:ac:fc:
4f:80:8c:df:c8:1d:3b:b6:91:3a:77:cf:c8:a9:d3:
af:ed:82:3b:62:a9:e9:d9:74:23:9c:c3:68:20:8a:
a0:d5:85:01:6a:dc:4d:2e:00:af:0a:f3:18:2f:91:
db:ff:3e:84:a7:c3:43:6c:de:47:a3:bc:87:c2:0f:
c9:ad:d9:3d:fc:4a:f2:d8:0a:e8:f8:bd:00:4c:e1:
8c:4a:f1:c7:a3:2a:1c:dd:df:b0:92:3b:cf:c9:b6:
72:56:bd:3a:64:e6:a9:63:62:96:81:61:54:5a:b6:
ef:e1:89:c8:3c:c2:73:69:15:8a:f0:35:2c:af:e2:
a8:22:70:29:af:3c:ff:0b:a7:be:fc:e7:f5:13:f1:
73:49:cc:b8:bf:83:90:df:27:c8:69:c7:99:a4:83:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0A:29:9C:62:E8:01:35:C2:C7:4A:1B:9D:AC:69:A6:54:E9:C5:E6
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:d7:0b:7c:9c:da:09:4b:3c:a2:3d:75:04:b6:8d:c2:94:
4f:96:ed:b0:85:8b:f8:57:9f:24:ef:d4:58:d2:79:2d:06:df:
df:72:1a:48:ff:ca:8d:9a:21:48:79:80:40:ad:5a:64:da:69:
c5:47:3e:b5:53:8e:9f:24:e5:fb:9e:dc:99:c6:b2:6a:55:3f:
eb:dd:cd:22:db:0c:13:23:48:7e:86:c5:7d:55:64:99:73:46:
26:ca:3c:d9:9d:e2:a0:c5:6a:c4:72:e8:ad:7f:ce:75:d0:9d:
de:fc:b5:f9:cd:a2:5c:b9:e5:8f:dc:03:b1:f5:51:71:04:7e:
0a:a0:e6:f2:10:2d:6c:ee:cc:36:08:da:18:c0:2a:68:f4:dd:
c2:3b:83:ae:55:f3:0b:55:c2:cc:8d:93:2b:d3:bb:1b:7e:a2:
ca:5e:5c:11:25:b3:00:ad:a5:4b:d8:54:eb:ca:a4:0d:07:c3:
63:b5:82:b6:22:a7:24:af:1c:26:6b:10:b1:1e:a5:97:4c:fc:
6a:b5:28:bb:fa:3a:62:d8:cf:27:1d:eb:38:d1:f4:26:8d:c4:
8f:6d:e5:21:f0:e8:03:40:94:f2:a9:7d:3a:75:41:13:87:99:
d6:d4:5a:08:75:dd:ee:4c:6c:27:97:7b:26:eb:a5:23:9a:e6:
d9:cf:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:19 2025 by rpki-client on console-fra.rpki-client.org