Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: ueVgred1XKOqoohTfBU75R1mi/KEnXnwDWwnBW87Wnk=
Subject key identifier: 64:3B:F9:A3:EA:ED:F9:E3:D0:C3:B4:48:38:FD:1D:85:D6:0C:40:1F
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0194BB970FE2312C59FA7680E202B61AA9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 111D
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: Adrbs5NlhRUNV2cisyNwo-BCgig.roa (hash: JRCSzf27iDiymKtOrQAggmVQVUm0Qmo2Jy69WSaHvcg=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: /Eetp/qLxo9CpprfiByowoAJzw8P5ogFZc+95xQaB8M=)
3: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0f:e2:31:2c:59:fa:76:80:e2:02:b6:1a:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=643bf9a3eaedf9e3d0c3b44838fd1d85d60c401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:28:1a:69:84:c7:7a:8c:08:25:54:43:aa:
1a:01:05:2c:de:ec:34:e8:ed:d3:85:63:bc:4b:0b:
97:14:88:25:bc:e9:9c:15:db:84:ca:49:22:d6:01:
43:be:ae:77:58:cd:c2:ba:cb:3b:6d:24:43:d0:67:
95:f8:bc:f3:5e:87:d5:30:69:ea:b8:52:98:2a:11:
5c:1b:8c:a3:2f:7e:53:6f:4d:d2:0d:bf:bc:db:f8:
a7:9f:d9:1a:04:7c:c1:51:ab:ae:aa:77:5b:f5:3d:
cd:5f:5b:50:e1:47:6a:98:90:40:fa:74:6e:c9:fe:
c3:6f:41:01:e6:38:1e:d6:eb:d3:ad:c2:b4:e1:1e:
14:24:f3:e4:27:b0:d1:ad:68:4b:5c:f3:52:53:c3:
c9:1a:40:cb:44:c2:5b:d4:17:b1:23:e0:80:50:b5:
b5:59:78:cf:05:5a:8c:4c:20:b3:53:f7:51:b4:9a:
5a:8c:4f:0c:56:a1:91:16:47:cd:8e:9e:3c:4e:77:
b5:2f:eb:4a:17:3e:ca:6e:e0:d1:79:45:db:18:a7:
9a:92:3e:fd:00:a1:17:99:23:35:b3:76:c5:72:17:
ee:f8:14:aa:cb:d7:ba:b6:b5:03:f1:88:86:ac:8d:
01:fa:88:01:83:c8:a4:1f:01:b3:de:76:13:46:8e:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:F9:A3:EA:ED:F9:E3:D0:C3:B4:48:38:FD:1D:85:D6:0C:40:1F
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c3:84:cf:1a:02:90:86:7c:62:5d:73:29:56:76:77:38:df:
27:51:5c:3e:9a:ee:cf:ef:6a:57:36:4f:3d:3f:7c:7f:9a:5c:
aa:5d:7f:a4:d0:99:a7:70:cf:e6:6b:df:c7:17:62:e9:67:6d:
2a:77:79:e4:b5:48:16:7d:d0:65:ed:6c:51:4b:ba:87:8e:1d:
06:c4:66:c9:38:ed:ba:7a:28:33:06:e9:bf:55:b4:92:0e:f8:
2f:0b:bd:34:8b:24:81:13:c5:b6:f5:99:94:13:29:3c:0c:96:
6a:d7:3b:2d:42:aa:eb:ea:76:5f:b5:91:9c:bb:9c:35:fc:f0:
ef:93:13:00:5d:be:4d:34:5e:4d:7a:09:36:83:c0:72:96:a5:
ec:55:29:1b:ba:06:c1:7d:f7:ed:b1:cf:4f:4b:a9:66:c5:48:
7a:4c:08:a3:1c:0d:20:58:ab:66:10:6e:28:b4:f7:bf:6f:1f:
d6:40:2f:4d:06:a2:75:2e:44:51:8e:8a:33:f4:7e:be:ca:7b:
93:3f:c1:bd:d2:64:69:d6:08:52:90:9c:39:61:32:26:35:1c:
60:0c:d9:22:f1:30:2c:d0:46:b9:38:0d:d6:90:62:b8:f0:71:
72:92:b4:99:70:18:99:fa:81:0f:04:b7:cd:9d:82:e3:76:fc:
14:16:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:03 2025 by rpki-client on console-fra.rpki-client.org