Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: mwfbIcSZe2rjQdvCMiSlL/6lOjweSDRZ/vBbrIhHPhM=
Subject key identifier: 23:03:1D:DD:6A:7C:65:BE:FE:C0:B0:F5:D9:11:20:EF:19:D4:3D:EB
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 0194BA84329E82EB94C52D735155AF8C2CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1298
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: oO/0E7RHkQIyKTyyI+UowXZNxSEkNERwvNRjFgAsexQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:32:9e:82:eb:94:c5:2d:73:51:55:af:8c:2c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=23031ddd6a7c65befec0b0f5d91120ef19d43deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:4e:e8:88:25:3f:ab:b4:bf:f9:aa:17:fe:
72:19:80:ef:0d:aa:8e:50:5f:de:52:73:73:4e:9a:
84:a0:d9:a8:ab:8e:da:b3:52:63:db:02:2c:ee:5e:
cf:2b:62:05:6f:91:9f:8f:30:19:e9:11:f1:c0:11:
44:60:97:55:d5:cd:b6:85:ba:9a:0c:25:cc:9c:33:
0b:27:db:8c:97:23:cc:56:ad:7c:53:4f:be:df:20:
67:6e:94:82:eb:24:ee:40:cc:05:17:e0:fb:b1:3d:
da:91:41:7e:eb:8a:72:59:1e:a0:9b:8e:ec:ec:a7:
53:c5:b3:10:57:86:e3:13:8c:69:97:18:af:58:59:
13:78:c1:fa:a7:f3:04:a6:02:14:71:6f:0a:8d:4f:
f8:e9:3c:de:0f:b3:93:f3:73:eb:1f:f6:57:51:77:
90:23:08:e6:1a:98:a0:03:89:39:3c:52:ae:34:36:
15:6a:4f:10:d0:f4:87:ff:b9:46:84:95:dd:54:95:
c2:b5:37:3a:f3:1f:b2:22:ee:46:f4:24:f8:e9:0b:
c0:c2:7f:66:84:9a:a4:f0:cc:62:a9:05:47:92:35:
5d:78:98:34:e0:dd:51:66:54:cf:a3:7c:bc:3c:ea:
0a:d1:2e:61:fd:55:53:91:33:f4:25:66:bb:7b:05:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:03:1D:DD:6A:7C:65:BE:FE:C0:B0:F5:D9:11:20:EF:19:D4:3D:EB
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:3d:8d:37:ad:74:8e:14:3a:b1:7c:9f:fc:2f:fd:41:db:
da:37:c9:85:61:ea:14:c6:44:db:e3:43:34:fa:82:56:1d:25:
fd:19:9a:95:77:ea:95:7f:af:5d:c2:f1:96:9c:85:64:9a:9a:
48:d4:1c:0a:cc:03:f7:68:8e:d6:df:9a:26:7c:30:d6:14:4a:
66:f2:ab:39:a6:33:eb:a1:5e:05:24:28:e3:d2:30:fb:a2:fc:
f6:04:64:9c:3c:27:ab:fe:82:77:e8:42:61:1a:a3:51:76:e4:
50:85:0b:9e:68:68:0c:8d:f3:51:70:5b:81:c4:5b:d0:44:ee:
bd:38:36:46:97:d8:f3:f3:9c:01:0a:1c:3b:68:15:3d:84:3a:
30:92:18:82:e6:e3:bb:91:f5:26:f2:6f:fa:99:90:4b:fa:8d:
2b:2f:ee:32:63:19:93:d8:af:d5:87:70:aa:63:1c:4f:6b:52:
ac:97:82:8e:64:dc:3e:94:10:70:8f:cd:eb:a9:cd:68:93:74:
01:21:bf:26:6d:89:46:49:2b:8e:05:ab:7c:da:36:22:67:e4:
66:28:42:df:32:6d:0e:78:d2:11:b6:9f:68:4a:cd:ba:29:cf:
04:76:06:32:10:a1:a3:b8:da:af:0d:49:ca:b9:60:16:a7:c1:
f0:ab:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:26 2025 by rpki-client on console-fra.rpki-client.org