Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier: kRooLa8Nr/kOQ0tyzNXKkIqcR8GLUC2qh8BxsyFQiLg=
Subject key identifier: 66:8C:69:C7:D6:97:B5:2E:B8:6D:E7:A6:E0:20:8A:15:2A:AA:91:98
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 0194BA842FAA958C5F65CEFF4FDDC74D33BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number: 1356
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: POv7eOyw7ujxOQtB0UyTRRap3i83LjDdWDZaBG1RqsE=)
3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2f:aa:95:8c:5f:65:ce:ff:4f:dd:c7:4d:33:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=668c69c7d697b52eb86de7a6e0208a152aaa9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:d8:2b:90:72:68:d9:09:a1:d4:ae:79:4a:
bd:b3:68:7d:dc:fe:b9:d7:f7:50:ee:f2:9e:5c:f0:
a1:68:f2:78:52:47:ea:f6:44:13:7e:b2:3b:01:a0:
29:37:78:70:a4:7e:02:0f:26:d3:03:3e:96:de:4c:
99:a8:87:e4:c3:5f:65:ad:0c:79:56:07:26:50:35:
fc:f6:d2:00:54:e1:15:32:e5:76:d8:ef:e6:e1:16:
82:55:25:00:92:70:58:94:b6:15:90:56:90:95:35:
37:a8:d4:75:b6:8f:8c:d8:e7:fd:24:8d:bc:ed:c6:
0d:b5:bf:4d:de:0f:6d:11:17:78:67:d3:9e:21:f8:
60:cc:47:bd:91:c8:55:09:2c:5b:b0:06:38:52:8a:
4d:64:d5:1b:a7:04:d8:b9:3b:82:7f:61:44:18:42:
1e:7c:69:13:af:16:2d:fa:5c:d3:f7:78:8f:46:c3:
e4:71:8e:8e:e1:cb:df:e0:ac:5c:a5:26:c9:06:65:
86:a4:b7:70:9c:cd:92:1d:8f:e9:57:83:13:ca:e6:
09:c3:7b:ad:6b:6e:ef:81:15:52:ce:0c:6d:30:93:
c1:7e:b0:d9:2a:55:1a:78:6a:d5:3d:5c:19:a4:79:
e5:87:67:2f:2e:72:0b:92:83:f3:17:1c:7c:71:c2:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:69:C7:D6:97:B5:2E:B8:6D:E7:A6:E0:20:8A:15:2A:AA:91:98
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:b2:48:d3:43:cf:f1:dd:7d:f4:eb:4d:18:c5:93:34:e9:
ed:7e:56:d4:73:51:b5:a9:4a:5f:16:71:4d:6c:8b:99:d9:1b:
32:ad:36:b6:5c:eb:34:24:85:cc:6f:b7:3d:da:a5:1c:30:be:
43:ec:f4:7a:f2:7b:fa:7b:a9:72:ae:74:ca:56:f0:9d:a5:e0:
e0:19:8b:7d:c0:6e:ab:da:3f:b9:9f:4c:fb:90:52:85:71:8b:
fe:7e:c7:5a:b0:c2:d9:ac:10:6b:dc:73:b1:db:6f:4a:00:c5:
39:3f:d2:cc:0f:93:14:f3:60:2e:61:3e:df:ab:e6:89:c0:b0:
6f:74:5e:a5:7d:3e:6a:e6:2e:56:02:3d:c5:73:0c:8e:a7:1d:
33:e6:91:47:f9:3a:75:05:84:e0:6f:9f:e4:6e:df:1e:9e:f0:
45:09:58:b6:18:c7:a9:7b:10:9d:70:f7:99:60:98:96:0a:98:
dd:cc:d1:6d:f0:bb:b4:b1:8c:d4:73:7b:7f:79:5b:bc:04:53:
be:e6:2b:9c:b1:63:94:56:72:0d:92:42:dc:1b:d5:84:4a:8e:
b1:3d:45:27:0a:0c:22:8b:2a:d5:05:5c:8e:8a:1a:4b:a8:6c:
f5:8b:3f:73:23:e4:de:02:e6:c5:3a:3a:1a:ec:aa:46:46:e9:
6c:22:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:30 2025 by rpki-client on console-fra.rpki-client.org