Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: i2hfp4nc26wKrMAL93xFOkcABq2smXbVwueVg7bkXX0=
Subject key identifier: 0B:B3:0D:7B:48:4F:51:7D:E4:57:1F:B5:B4:86:60:9B:0E:61:BE:26
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 0194BB603372A8086A9894E3332526048CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 1A
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: QXbb6nwkOYZa0XvoFyxQL3nh4jasLnMJGwdKGAdxvzA=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:33:72:a8:08:6a:98:94:e3:33:25:26:04:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=0bb30d7b484f517de4571fb5b486609b0e61be26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:1e:6d:84:c7:d5:c9:3e:9f:bc:4b:f9:99:
5d:e9:68:8a:c3:ea:32:6f:87:00:f2:d6:e8:25:11:
67:e0:6f:1d:8d:cb:8f:ca:e0:21:b8:79:b5:8b:fd:
40:de:24:17:6f:d5:3a:77:c0:48:64:32:de:41:2b:
52:96:af:54:6e:b0:5b:81:ba:a5:51:7e:c9:4d:59:
1e:31:53:9d:8b:6b:bd:b5:2c:48:96:bb:9c:1c:6d:
ec:41:60:ea:61:c9:00:b9:dc:8d:7b:5e:f4:20:8f:
76:43:a3:b2:ec:6d:2e:37:2b:0f:e6:d6:1f:a8:a5:
7b:e1:d1:34:90:b2:99:ac:d0:62:64:3b:49:8e:7a:
4e:b5:4b:38:c8:d6:60:67:25:13:e9:2b:ce:68:08:
58:ac:b2:77:29:ad:7d:e5:c9:f4:8c:48:b0:3c:01:
a6:e4:1b:ad:da:dc:b5:d9:95:90:48:7b:73:4a:9f:
64:02:8b:b5:b8:44:7d:7b:d0:03:c4:81:99:30:dd:
c8:a4:ec:7b:c7:cd:ed:67:34:80:45:ed:f9:a3:25:
7c:67:45:5b:43:fe:8e:a3:f3:f1:5b:15:55:19:98:
71:dc:a7:59:2a:58:c6:ce:df:14:1b:df:99:85:ca:
87:e6:b2:77:3d:ff:43:7d:e2:11:5e:32:3d:e4:83:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:0D:7B:48:4F:51:7D:E4:57:1F:B5:B4:86:60:9B:0E:61:BE:26
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:2d:cc:cd:94:4a:30:03:e8:88:33:02:2c:aa:fa:0d:de:
27:2e:db:d1:19:4d:07:88:85:f0:ba:b4:61:9a:18:3d:a2:02:
dc:cc:71:2b:e6:2d:77:26:eb:9b:1f:cd:0a:50:d3:72:41:05:
d2:a4:0e:25:2c:e0:40:3e:3f:a2:fa:e5:c9:68:e2:22:3b:3f:
4e:e1:a1:63:92:48:a3:d4:2e:59:c0:56:38:df:19:75:9b:0b:
03:85:2c:c6:f3:41:bf:fd:c1:1b:7f:e4:66:96:58:1c:f4:94:
71:e3:8b:b2:2a:e8:41:b8:65:1e:02:70:ef:e5:14:8d:a5:08:
49:9a:ba:e8:c9:e7:e5:aa:3d:4e:c2:97:19:1a:96:e2:15:a4:
66:51:99:23:16:33:1b:4b:4a:21:56:b2:19:ef:ce:e3:38:ec:
3a:1e:5e:89:89:ac:3b:cc:1b:a1:c7:db:57:4d:ec:02:4a:8a:
9b:1c:c2:75:1c:79:4b:01:45:60:46:43:78:a1:7c:f6:32:98:
00:3e:ad:99:11:7c:f7:db:b0:0e:a3:21:05:92:5d:c9:f3:78:
a1:03:6e:59:77:62:2a:9e:c7:06:4b:11:4e:ed:28:25:72:c3:
e1:8f:0c:b2:40:b4:d9:e7:fd:94:a5:81:49:57:a2:8c:a5:6f:
16:4a:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:22 2025 by rpki-client on console-fra.rpki-client.org