Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: oDub8TOpw05DQK/FT6SLU1bXFLm0hCP1aRASCHwscLU=
Subject key identifier: BD:52:BC:06:AB:3E:9D:2B:FB:20:0C:DA:B2:C4:E8:32:7E:75:A6:DC
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0194BB96F1FF6F29C502700D5605AC71DA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:19 +0000
Manifest this update: Fri 31 Jan 2025 09:00:19 +0000
Manifest next update: Sat 01 Feb 2025 09:00:19 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: X5azte/f+4POBPr8rG9pOoBX8XVoaQ/MA3WJvZgM6lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f1:ff:6f:29:c5:02:70:0d:56:05:ac:71:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Jan 31 09:00:19 2025 GMT
Not After : Feb 1 09:00:19 2025 GMT
Subject: CN=bd52bc06ab3e9d2bfb200cdab2c4e8327e75a6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:1c:09:f2:ff:3e:a8:4d:92:b2:b8:e2:c4:
52:8d:e3:86:38:78:9e:d1:20:d6:1d:e3:c8:ed:7c:
86:8b:95:7c:c7:95:2f:fc:c8:84:35:51:24:bc:8b:
c7:ff:af:53:b4:a4:9c:6a:59:3c:34:1b:62:59:2e:
22:f6:9b:5b:d4:4a:1d:e2:a4:81:fb:87:18:90:bd:
20:53:d0:2c:bb:86:b0:e7:f5:ca:0d:04:e9:e4:db:
cb:dd:c8:b6:25:96:49:a9:e9:3c:9c:b2:a6:b5:18:
2e:57:64:fa:f5:9a:73:d8:15:9b:da:2e:bb:9d:60:
08:77:70:5a:1d:d2:be:21:a2:99:79:0b:06:12:97:
9f:f2:e7:1f:0b:ed:b8:25:45:3d:98:24:22:3e:29:
16:7d:d9:a2:97:5f:1d:92:e8:8f:c6:c7:dc:b1:0e:
33:01:2c:e2:ea:09:e7:0f:84:cb:d6:d6:a2:1e:43:
b7:0d:89:ed:c5:02:7e:e8:b6:53:09:92:04:08:b9:
95:d1:01:69:97:85:89:f3:64:18:b9:8e:84:be:cf:
07:8c:ee:d6:56:5b:2c:b1:9d:8f:d4:1b:0f:c6:88:
1e:fa:be:27:f0:df:61:c0:3f:0a:0a:56:fe:2c:7d:
26:7c:ce:48:db:37:68:84:f7:48:53:40:63:dd:b6:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:BC:06:AB:3E:9D:2B:FB:20:0C:DA:B2:C4:E8:32:7E:75:A6:DC
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:d9:15:ea:a9:bd:34:85:7c:eb:8c:25:6d:ff:8f:84:1e:
c9:7e:9d:e4:03:57:59:bf:4a:15:c8:81:71:ca:19:ae:c6:6a:
c2:cf:b0:db:c7:da:9d:df:02:a2:5b:91:e9:a0:9d:af:b9:f9:
5b:be:50:77:e6:15:43:b9:2c:53:e2:36:c3:9d:c2:44:a7:70:
1d:ea:dd:7c:16:74:29:a7:3c:4e:b5:0d:a2:53:61:c9:88:33:
69:af:81:31:6a:29:fd:60:9a:f2:3f:3c:61:2a:84:04:c2:5b:
6c:27:10:1b:5a:89:28:76:45:f8:87:60:9f:61:b1:57:d0:80:
23:81:3a:fc:2b:c5:42:f9:0d:53:7c:3a:e9:e4:a0:8e:52:5d:
6b:07:10:e9:c6:37:c7:dd:c3:eb:ea:53:6e:5c:88:ec:11:44:
f9:08:15:d7:82:bc:93:73:4a:cf:a5:e4:02:68:79:b6:91:a9:
e1:20:90:a3:8a:ac:50:19:7a:ce:d6:7f:2d:f1:2d:8a:dd:38:
0b:2e:ab:52:65:d3:fa:92:1b:17:96:77:90:23:26:15:8a:80:
12:06:15:04:93:0d:4d:59:92:11:92:4c:da:f6:f7:5c:dc:fb:
ac:91:0f:2a:05:4a:7b:cd:39:54:29:ef:dc:9e:57:e3:f8:b4:
e4:37:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:33 2025 by rpki-client on console-fra.rpki-client.org