Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: LmM8CftClq3tlNAXrwOsZmmi57qEd6vNl4PDaq8E8EM=
Subject key identifier: 34:68:34:A2:4E:A9:70:0D:94:99:32:FD:FA:A9:11:90:C5:4B:14:B7
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 0194BB5FFEB6AC38D331DA5AF0EDD6CCE7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: 03
Signing time: Fri 31 Jan 2025 08:00:17 +0000
Manifest this update: Fri 31 Jan 2025 08:00:17 +0000
Manifest next update: Sat 01 Feb 2025 08:00:17 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: UwDLOUXKZrAieNtn3kWZWhi20RIfm9Imri386yhD4sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fe:b6:ac:38:d3:31:da:5a:f0:ed:d6:cc:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Jan 31 08:00:17 2025 GMT
Not After : Feb 1 08:00:17 2025 GMT
Subject: CN=346834a24ea9700d949932fdfaa91190c54b14b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:54:04:6a:32:c1:98:c6:eb:bf:44:bb:78:
0d:58:ae:cc:89:1c:7e:2f:4b:74:26:f7:76:95:3a:
8e:9f:c2:c7:a1:39:c7:7b:53:13:8d:86:4e:a1:8e:
e8:dc:f8:b1:60:ac:09:7f:94:e7:59:4d:62:6d:dd:
60:a5:63:8a:5e:2f:94:a6:b8:20:98:e2:e8:b3:af:
9e:a1:9a:6c:a4:c5:68:e2:9d:fa:7b:e9:25:08:b0:
39:b1:4b:14:b4:e6:87:29:93:2f:3e:12:16:b4:57:
e1:a4:8b:c9:c7:30:c9:5d:bb:cf:ef:58:08:b0:76:
73:bf:7d:33:f1:03:4f:8f:d0:c1:55:53:d9:28:34:
0b:ac:78:55:e4:53:4d:2d:b3:38:35:c2:af:bb:5c:
23:39:b5:e4:7a:a4:a3:6e:e4:c0:d4:20:0f:4c:a4:
34:7b:f6:5c:2e:52:4b:33:13:cb:bf:3b:d0:f4:17:
0e:a4:a9:0d:cc:3c:ad:fe:0a:2d:4f:23:83:bd:16:
46:46:8b:dc:e2:c7:2a:7f:b5:db:d3:09:c7:15:6b:
a8:5b:47:f6:6b:ac:c3:78:36:ff:19:a6:2c:b4:0e:
86:1d:70:6d:6b:c1:58:9c:14:4c:04:aa:d5:b2:07:
e0:5a:dd:5c:5b:7b:0d:5d:7d:3f:73:80:14:19:b6:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:34:A2:4E:A9:70:0D:94:99:32:FD:FA:A9:11:90:C5:4B:14:B7
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8a:95:f4:4f:45:cf:ac:77:17:a6:48:9f:8b:9c:46:1a:10:
e6:33:57:17:e6:ec:73:be:bd:8d:33:20:fc:15:d7:f9:dd:2e:
49:bc:54:db:b7:d3:1c:d3:74:ee:82:b7:e5:19:b2:90:f3:df:
f7:76:65:82:16:d9:f0:08:55:07:12:bb:79:75:a2:2c:26:a1:
e1:9c:c7:70:75:ae:66:36:66:7b:bf:fd:ba:c8:8d:66:dc:2c:
ff:c4:f4:ad:1a:66:57:31:31:79:a2:c7:89:aa:e4:2a:45:f2:
01:ab:c2:44:fc:e0:34:fc:86:83:12:c9:98:f2:11:90:f5:41:
af:0b:13:ed:d8:c9:ae:d3:cc:98:0a:7a:43:8e:93:94:4e:b3:
d1:f2:52:78:60:73:5e:0e:be:1c:a1:cd:13:3c:ec:d6:84:f8:
19:c4:e9:db:54:d4:cd:46:de:52:11:ea:d2:2e:1d:88:36:74:
82:19:0d:c5:ed:16:35:fa:64:35:3d:3f:1e:e9:33:0e:f4:a3:
db:c8:eb:38:cd:95:31:71:ad:84:6a:e5:2d:00:e3:bb:e2:d8:
b9:4a:04:fb:94:bd:31:cc:98:bf:9d:eb:33:85:16:36:f5:d3:
aa:f0:ec:58:ce:20:bc:26:08:df:4b:ae:93:9f:db:90:e4:bd:
c5:f1:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:24 2025 by rpki-client on console-fra.rpki-client.org