Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: f5Ovx8dVa0A51iiKBydd9+MA37BZm4IpAX7NIMCM+z4=
Subject key identifier: B1:AE:1B:F7:70:F6:A1:CB:DB:2F:FD:58:49:1B:BF:7A:02:68:58:BD
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0194BABB4A7035A1DC9564303AA642ACE023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0248
Signing time: Fri 31 Jan 2025 05:00:23 +0000
Manifest this update: Fri 31 Jan 2025 05:00:23 +0000
Manifest next update: Sat 01 Feb 2025 05:00:23 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: oxpDodT/dkC8Bqp8wu3CwShPwupWIaSMYGWGJkQVtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4a:70:35:a1:dc:95:64:30:3a:a6:42:ac:e0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jan 31 05:00:23 2025 GMT
Not After : Feb 1 05:00:23 2025 GMT
Subject: CN=b1ae1bf770f6a1cbdb2ffd58491bbf7a026858bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:82:8c:58:13:d6:e5:54:84:f6:18:a7:7c:
8f:8b:68:69:ce:16:60:cf:2e:64:f4:8a:85:6c:98:
d5:93:0c:67:19:08:65:7f:38:b7:01:6b:30:4c:56:
4c:99:12:71:32:ca:38:6e:49:c5:f7:31:3d:24:dd:
fe:b4:40:82:3c:81:58:6b:af:e1:e0:d0:aa:e0:90:
26:5a:23:a5:f0:b1:39:ff:4b:60:10:10:60:be:af:
1a:04:97:a2:cc:33:62:c4:1d:b7:d8:25:84:fe:c3:
9d:7d:eb:15:26:41:31:d5:38:50:3d:28:f1:6e:b6:
54:b4:02:a8:ff:bc:4a:a6:24:11:16:be:66:11:e2:
2b:31:3a:be:fc:bb:5e:bc:32:49:c6:1c:a5:ea:87:
99:bf:ad:3d:90:d0:00:1a:dc:a2:7c:57:b4:3d:65:
fd:c0:ef:f3:dd:7f:55:8c:7f:35:5e:6c:ac:15:9e:
75:25:a8:4f:d0:a3:62:9d:2e:af:37:0a:c3:82:9c:
25:f0:9e:33:e3:a3:fd:ce:3c:6c:c9:a1:6a:51:4c:
be:4d:8f:7d:68:8d:f3:1d:e7:ed:ec:a6:91:77:62:
51:d6:b1:57:b5:fb:e1:d7:a9:5f:de:b0:99:d9:43:
2d:1d:a5:fb:5a:cd:05:b5:ec:77:c3:ae:15:ea:66:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:1B:F7:70:F6:A1:CB:DB:2F:FD:58:49:1B:BF:7A:02:68:58:BD
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:99:ca:c0:0f:c5:85:33:36:3e:fa:84:f6:71:d2:80:24:
10:72:5f:5b:2f:26:4a:44:2e:bd:d9:57:eb:7e:ea:25:f1:6b:
bd:68:09:f7:e0:03:a0:cf:f2:27:b3:c7:43:b8:9e:a9:28:00:
72:70:90:e5:12:bd:90:7e:dd:57:50:a7:83:4a:00:7f:77:6d:
65:ce:ed:0d:b5:63:78:55:5f:ca:61:fc:41:bb:aa:ba:29:69:
82:7e:a6:4a:84:27:d7:8b:71:ea:96:8a:7f:ba:b0:22:27:22:
c5:2f:42:b1:4b:48:e3:c0:b8:72:9b:cb:8d:15:cc:fa:5e:00:
e6:3a:68:34:cf:20:d1:81:61:8e:55:07:2a:22:03:3f:68:18:
f2:4a:36:26:2e:4d:e4:be:1d:fa:f0:ef:18:59:0b:85:15:9c:
c0:b3:b6:fa:c4:e4:0f:7c:05:c7:62:35:ae:07:89:36:36:61:
0b:51:ce:0e:e9:20:0e:8f:d3:60:0f:b4:88:80:bd:b1:21:a1:
91:6b:a7:43:d8:0b:c1:97:bf:cf:12:c0:38:ba:7e:a1:36:70:
08:66:e1:1e:a6:3b:5d:97:37:35:9d:fe:80:75:32:97:02:8b:
66:0b:d8:b4:ef:88:5e:2f:19:4a:eb:c4:4b:88:38:6c:92:5e:
ea:29:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:18 2025 by rpki-client on console-fra.rpki-client.org