Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: 7UA7FVu6rs0KqvTpSquJ3Gztu/DcytMeAeWdQl9rETk=
Subject key identifier: 5C:18:CE:99:0B:3D:7C:86:20:9C:CB:78:51:7A:F7:39:F9:69:96:6B
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0194C388614039D86DFFC5F1E5D8DF14A8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 0DE1
Signing time: Sat 01 Feb 2025 22:01:22 +0000
Manifest this update: Sat 01 Feb 2025 22:01:22 +0000
Manifest next update: Sun 02 Feb 2025 22:01:22 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: 4XgOxMOSgB2Qj+WtsEHGJCqnQsUqZAu2A6O4NCgpAnE=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:61:40:39:d8:6d:ff:c5:f1:e5:d8:df:14:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Feb 1 22:01:22 2025 GMT
Not After : Feb 2 22:01:22 2025 GMT
Subject: CN=5c18ce990b3d7c86209ccb78517af739f969966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:ee:ca:a9:60:7a:1f:86:86:f4:62:3b:2b:
0d:0b:b0:0a:30:43:f8:af:55:03:25:9a:2c:7d:fa:
dc:17:a5:fa:a9:be:00:22:1b:3f:80:22:2f:b1:cc:
8c:47:3d:aa:11:f3:f3:03:d9:98:ba:ec:e0:30:56:
c7:c9:ac:b2:75:e7:98:e6:7e:c9:25:96:9e:21:eb:
41:20:6f:2f:da:4c:6f:08:7e:b5:d3:85:4c:df:a8:
28:a8:52:30:06:72:22:2b:a3:34:d8:72:a6:45:c0:
f0:c5:07:fe:ec:85:ff:18:86:ab:02:96:1c:fe:aa:
98:2f:00:08:27:49:50:bb:73:7b:1e:0a:59:3b:e0:
a5:c2:f0:21:8e:cf:ce:8d:3d:c7:a5:3a:28:c9:ac:
69:a6:ac:0a:97:b0:3a:30:a1:83:cb:f0:f0:0f:7e:
8a:b1:86:4c:2e:5b:90:e2:1c:93:55:86:99:b3:19:
96:94:a4:87:12:30:c0:bc:a3:74:44:8a:f2:fa:84:
45:ea:1f:00:1f:ac:90:86:a9:4b:fd:4a:09:66:dd:
d9:a5:0b:e9:3a:1e:3a:33:51:8c:81:80:12:1d:35:
95:9a:e3:02:ee:77:fe:d2:2b:08:68:d9:c8:67:ee:
d9:a2:e7:27:4a:e3:bc:1d:37:30:96:49:a1:15:93:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:CE:99:0B:3D:7C:86:20:9C:CB:78:51:7A:F7:39:F9:69:96:6B
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:fb:e8:b3:5b:c1:c7:5a:02:6d:79:95:b4:fb:49:20:c4:
9d:eb:b7:6c:24:4b:92:3f:ae:82:cd:72:e5:6e:f2:90:de:56:
fa:fc:f1:7f:e9:8b:51:b6:4f:22:c4:5b:4e:53:9d:6f:1c:9a:
e3:15:51:e3:0d:39:af:d0:c8:43:5d:ff:11:e0:1f:64:e2:16:
03:c1:be:ef:5d:60:35:b9:66:30:1f:4b:02:7f:08:82:da:6c:
44:1c:66:03:1e:b5:a0:d8:ed:d5:cc:54:55:51:82:55:7e:6d:
c6:e8:00:1e:90:03:1f:50:a2:08:75:05:88:47:13:62:2e:af:
4a:59:7f:18:c4:ae:32:d3:ab:d4:a8:7a:76:39:d4:d8:5c:87:
2d:a7:d5:c3:28:fc:ce:cf:a3:31:b3:aa:72:73:64:18:93:65:
7b:a6:8b:cd:10:37:ae:17:c6:3d:6d:14:09:94:17:5e:a2:0f:
be:84:29:23:3e:67:fe:b5:23:94:8f:1b:95:0b:c2:56:34:07:
d8:79:97:a6:74:6c:d6:fb:dd:c7:0c:95:f2:29:4c:2f:97:8d:
09:39:b2:56:b0:1f:7b:b2:a7:30:ed:55:20:df:89:2b:c6:d7:
5a:a0:eb:40:57:4e:d9:66:e6:48:09:26:54:8d:b6:36:07:63:
33:a7:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:26 2025 by rpki-client