Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: Ko/yIu7aT9+4Nh/D4bhHC25L/VHiP8/lEeoGVp/d8qE=
Subject key identifier: 53:24:77:C9:66:11:C8:56:BD:15:7B:D1:6D:C4:FE:EE:6D:5D:87:8A
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 0194BB970A8EA4F31A0B17E7C6B99C3D3DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 09:00:25 +0000
Manifest this update: Fri 31 Jan 2025 09:00:25 +0000
Manifest next update: Sat 01 Feb 2025 09:00:25 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: z4YJtNUIbkd30yOU91bZVVq2KI4EA85s3wNF33DqjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0a:8e:a4:f3:1a:0b:17:e7:c6:b9:9c:3d:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Jan 31 09:00:25 2025 GMT
Not After : Feb 1 09:00:25 2025 GMT
Subject: CN=532477c96611c856bd157bd16dc4feee6d5d878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:b2:cb:b1:1e:06:d4:83:46:6a:09:83:01:
a7:11:97:d4:5e:ec:d6:97:d8:36:ce:29:02:af:7f:
48:fd:e9:d8:83:25:f8:ce:0b:d7:55:7d:68:c7:f7:
51:43:01:95:59:d0:93:cc:34:4c:a4:c0:45:d5:f3:
b0:89:a1:1f:37:24:d0:c8:d4:fe:c8:f1:55:87:b8:
1c:f6:02:3c:f2:6b:96:65:2d:4c:30:ff:98:25:30:
6b:83:ae:82:a2:5e:a8:09:3d:db:8b:b7:00:64:c8:
44:7a:f1:4e:9c:a2:6f:b9:c7:75:f3:02:80:26:c5:
18:fd:f1:9e:21:72:1d:5e:90:09:24:d2:ba:da:37:
34:91:39:00:8d:d9:12:78:e7:59:ba:74:6c:a7:ff:
74:fc:d6:ef:62:e1:f5:9f:b0:c8:fd:b8:ea:78:6b:
5e:f7:b9:04:99:18:73:76:df:c6:72:46:63:1b:3e:
95:4b:9a:ae:7f:5c:39:16:85:38:ab:75:3b:82:43:
5a:57:8d:a0:a9:17:94:b1:78:6f:7a:dc:a5:54:10:
22:fc:87:d9:26:a6:d9:e3:dc:39:e9:42:d3:83:af:
1c:05:ae:86:eb:de:3d:2a:2f:14:69:87:05:a7:8e:
78:a4:ef:11:87:34:7c:21:bc:40:f0:67:df:83:1b:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:77:C9:66:11:C8:56:BD:15:7B:D1:6D:C4:FE:EE:6D:5D:87:8A
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:5e:e7:e7:f4:d8:b5:cd:87:f4:15:f5:d8:97:ab:d7:f3:
ed:47:81:3b:9f:a3:58:28:ea:a9:ae:a4:f0:f4:f6:38:25:b9:
72:72:7a:84:18:dc:58:77:d3:47:88:2f:64:52:bd:65:f4:c2:
ee:80:96:5c:2d:46:ce:72:4a:f1:e5:28:20:06:49:93:42:9e:
48:25:e6:ae:df:67:1d:6a:11:c7:0d:f9:44:7f:a0:a5:3e:9f:
05:b0:c7:9f:79:4a:7f:3a:76:b2:b3:a2:5a:88:33:ae:3d:45:
81:fa:1b:ac:e2:85:d1:6d:72:fb:48:d6:dd:ca:23:58:40:4e:
b1:84:f3:dd:30:bd:10:a1:3f:25:36:77:8f:20:b6:67:9e:ca:
7d:db:8e:af:d6:ed:b9:b3:12:e3:a2:a3:10:9d:30:d6:83:65:
6e:78:a9:c3:e0:00:22:07:6e:e8:f1:4a:6d:20:63:8a:c9:78:
77:53:1e:da:b5:26:af:19:0d:80:f4:af:97:c1:5e:a4:19:a0:
48:1f:a9:ad:db:8f:64:e6:a3:7a:0f:21:17:bc:4b:33:7b:9e:
84:de:39:76:98:d0:86:d0:75:3e:0d:53:0b:a5:cb:59:f4:21:
cb:ed:7f:49:c4:99:e1:ed:e4:61:81:b2:3b:6a:91:69:61:6e:
e6:3d:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:23 2025 by rpki-client on console-fra.rpki-client.org