Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: rqSCPksY4UjTff/kpLMRInHSVMBf77fALVXCoGkswDM=
Subject key identifier: 9E:D6:D3:F2:72:EA:67:57:2C:9C:C7:29:44:87:63:38:54:38:15:9C
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 0194BC3BF01FEA9F5AD687126F7B36D661B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: +Lh7KOD16dLAIuSyQQbDpEvjbffUL8Ld2rEQGMHMzws=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:1f:ea:9f:5a:d6:87:12:6f:7b:36:d6:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=9ed6d3f272ea67572c9cc729448763385438159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:81:e5:36:fc:fc:ba:4a:20:64:26:0d:7d:
6d:38:b0:78:bf:1f:1c:3e:74:ee:ce:dc:5d:89:38:
42:61:81:c2:86:16:1c:51:3f:56:66:f8:20:05:0b:
cd:0d:c5:2f:72:fd:2b:bc:98:04:23:05:80:6b:94:
4f:c9:8f:cc:5e:fc:46:2c:32:da:00:8d:86:3f:6f:
14:de:fe:63:ef:7a:98:a5:3b:e5:df:42:90:d5:81:
41:08:a3:48:33:d3:8b:57:5b:20:b5:ba:b0:28:8d:
d2:eb:d9:64:92:f2:9f:5f:44:b4:1d:5a:66:eb:bd:
96:e3:79:3e:c0:70:8a:45:e2:f1:93:02:ec:d8:ca:
ca:af:fd:c8:58:5c:a8:42:c2:d6:98:d3:4b:e4:99:
8f:c6:1c:9a:bf:fd:6e:80:43:0d:2a:67:43:a1:a5:
c3:0a:46:de:df:82:e3:98:cc:0b:3f:fb:93:d9:8b:
c6:be:a3:56:f5:1d:89:3c:cb:83:3f:85:d2:6c:3a:
2d:29:a4:ac:d7:a0:aa:15:5d:52:85:45:8f:3d:fc:
8a:81:c0:4f:3a:99:b8:42:7d:93:12:5e:d5:d6:68:
d0:87:09:19:e2:41:9b:5d:8e:53:7e:2d:fc:c4:c6:
21:94:f4:f2:b0:be:86:93:91:bb:26:bc:99:28:b4:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:D3:F2:72:EA:67:57:2C:9C:C7:29:44:87:63:38:54:38:15:9C
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f1:b6:3b:1e:c4:07:74:ff:d9:1b:a7:71:c3:0d:bc:59:8d:
2b:e5:73:49:67:81:b4:39:53:19:1b:bb:cc:c9:a4:2d:b8:a6:
5c:85:9e:28:8b:dc:34:d5:72:b1:e7:10:45:b8:15:a7:27:aa:
25:31:8c:f2:29:2f:5b:35:66:5f:b0:63:1e:65:49:c1:bd:b0:
3c:2d:04:5e:32:2b:70:ac:29:d2:14:8f:56:e0:d8:3d:53:a2:
87:10:04:cc:5d:96:5d:62:75:1a:0e:40:b0:de:59:a2:a9:6b:
e1:94:f5:1f:a9:c2:69:65:bd:e6:c1:a6:eb:dd:9f:8b:61:66:
87:61:fc:21:56:28:e0:90:ad:8d:4e:d4:4e:0a:e3:54:ea:dd:
1f:8c:bc:db:bc:cc:1d:04:a9:4c:4b:2f:1f:9d:d8:8a:89:d0:
25:f3:6e:4a:78:b3:db:de:77:17:0e:a0:0b:46:e1:18:84:93:
e2:fa:af:16:0b:d8:19:c8:87:98:fa:b4:11:39:87:a1:12:0e:
25:6e:41:65:53:41:65:f3:68:b9:42:22:7c:b5:52:3e:f8:45:
48:60:8b:2b:0c:f1:7f:d2:91:74:ea:a6:f7:1b:b4:54:07:3b:
00:8a:5f:06:4e:87:7a:f8:5c:11:d4:f4:de:1e:46:a5:b2:35:
c2:52:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:05 2025 by rpki-client on console-fra.rpki-client.org