Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: lMkOP88IJqtEoVEXH34hOO3j0gy1RhBB8/H5uLazSVw=
Subject key identifier: 44:61:79:28:39:C8:16:DD:39:22:3A:26:42:36:A7:E0:DE:61:B4:75
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0194BB975340FC92DE95056F08DB52BA8296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 09:00:44 +0000
Manifest this update: Fri 31 Jan 2025 09:00:44 +0000
Manifest next update: Sat 01 Feb 2025 09:00:44 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: yn8uoahyt/v1qjTMjkek+pSrm66wE8J0QD2HEHPDCvI=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:53:40:fc:92:de:95:05:6f:08:db:52:ba:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jan 31 09:00:44 2025 GMT
Not After : Feb 1 09:00:44 2025 GMT
Subject: CN=4461792839c816dd39223a264236a7e0de61b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:3d:a4:39:47:f1:5f:23:39:21:09:c0:49:
c4:5f:e5:0e:34:c1:77:4a:da:86:9f:da:08:ec:69:
3a:fc:00:5b:51:b6:a2:d0:fb:85:f4:40:2d:3d:db:
38:b0:45:2a:79:9e:25:20:23:58:60:03:38:cf:44:
44:b4:58:e5:ba:71:75:8a:a6:79:e3:16:1f:c3:6a:
6e:2c:3b:ab:31:9e:12:e3:6a:e4:6a:e6:4a:b5:b0:
be:be:48:54:82:86:eb:45:ac:58:a5:2b:e1:b7:27:
ad:1d:d7:b1:c2:c7:a9:c6:02:42:91:fd:73:96:a7:
19:88:3c:01:f6:21:7f:46:d1:30:7a:ee:0c:61:cb:
ef:8f:e4:41:02:cf:9a:c2:87:98:70:b3:30:67:aa:
f0:c8:92:2a:c4:d2:11:f6:c7:09:0b:d1:9a:83:84:
c8:fc:24:90:aa:87:fd:fb:88:83:82:27:1b:3a:78:
07:87:21:11:56:e4:b2:0e:8a:f3:64:eb:8b:e8:72:
b0:a1:60:75:20:61:59:53:17:0e:23:aa:bf:21:1f:
d7:12:ec:8e:c5:2c:69:60:f2:59:b5:43:97:da:04:
b9:87:56:26:5e:8b:b1:b0:b1:22:e7:9b:c1:b0:c1:
6d:26:9d:53:76:98:12:76:54:84:86:85:50:31:9f:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:79:28:39:C8:16:DD:39:22:3A:26:42:36:A7:E0:DE:61:B4:75
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a7:8f:b0:dc:f9:04:38:6a:bb:e9:e7:92:fd:2e:c1:d0:7c:
b3:d0:18:6e:46:cb:d1:09:02:2a:01:b9:cf:26:04:c5:97:62:
bb:1a:99:a2:66:f7:ca:50:18:53:e2:bd:4d:f4:7c:6e:a7:1a:
bd:cc:fc:a7:9e:56:aa:a1:4d:27:7e:94:03:23:e8:48:4c:66:
3c:bb:45:27:a4:45:3b:2b:23:8c:32:f0:a0:5f:56:93:56:d9:
67:c5:92:3b:ec:34:03:e0:b7:f8:d4:a0:1c:01:28:d2:dc:11:
f2:52:d5:f6:62:e9:e7:2b:fa:c4:d8:83:42:c1:70:82:26:0e:
c5:c4:2d:7d:db:67:ca:96:41:9f:37:c2:6c:dc:48:b3:ae:00:
81:25:c4:db:f1:23:20:c6:a4:9e:82:e4:20:f3:cd:48:47:a0:
e1:32:7f:2b:82:a6:e7:b1:6c:65:8e:87:2b:b0:a7:61:95:fb:
3f:3d:bf:1f:63:a1:1a:60:7c:8a:91:64:74:7c:8d:7a:49:0a:
f8:d7:e7:90:59:00:2b:9f:46:1b:0a:80:0a:82:6d:ec:dc:18:
8c:5a:4b:3c:e9:f0:68:38:8c:c2:a7:74:b4:b8:7e:14:67:04:
b3:c2:6a:2c:b8:e2:67:5a:0c:e9:65:d7:13:df:de:87:e9:36:
fb:78:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:05 2025 by rpki-client on console-fra.rpki-client.org