Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File: eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier: 6UkP24ZnQEH++kX/v6/V9sBBCatq7+6iKnYZK/+j01c=
Subject key identifier: D9:AD:FA:48:DC:67:55:3C:AD:BB:19:D1:A1:70:26:CA:16:DF:F4:92
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer: /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial: 0194BABB59C311A72433E66E9AD4E86089C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number: 12AE
Signing time: Fri 31 Jan 2025 05:00:27 +0000
Manifest this update: Fri 31 Jan 2025 05:00:27 +0000
Manifest next update: Sat 01 Feb 2025 05:00:27 +0000
Files and hashes: 1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: DMrVup1ZlA27pjGZEbtZozvaoSpYOlpNjEJBeP2JbTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:59:c3:11:a7:24:33:e6:6e:9a:d4:e8:60:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Validity
Not Before: Jan 31 05:00:27 2025 GMT
Not After : Feb 1 05:00:27 2025 GMT
Subject: CN=d9adfa48dc67553cadbb19d1a17026ca16dff492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:9c:6c:3d:1d:99:05:5e:7b:5b:60:98:39:
08:1e:79:19:aa:f9:50:f0:71:5d:c9:5e:6a:ee:e5:
61:44:97:84:fb:9a:45:77:ca:65:9d:ce:d4:03:78:
4b:fa:c1:f2:f2:a9:fb:33:95:8d:6b:a9:6e:2b:0e:
87:9c:7f:6a:05:28:14:07:ec:7a:fb:68:95:28:10:
95:fd:d9:14:1a:8c:5e:80:79:da:cc:08:c7:26:3f:
e4:20:32:19:f8:51:d4:56:b5:10:2b:14:f1:71:8e:
9f:7c:dd:d3:14:c1:c9:54:00:82:85:90:ac:3f:24:
22:d1:2b:70:00:89:e2:c7:f7:1a:a6:3e:79:4e:02:
5c:14:6c:84:29:01:ba:1a:bd:b5:2c:f8:d1:34:db:
e6:3b:e7:ff:d7:77:29:66:65:a7:2f:b7:81:d6:9c:
6b:89:7d:43:4a:95:90:93:c3:3d:dd:27:46:72:10:
2d:6b:c7:a1:f6:c8:f7:a7:1b:11:61:9d:20:89:61:
ea:16:e9:c0:ee:3b:a5:85:c0:e1:e0:ec:3f:0a:e5:
fd:13:06:2a:8e:fc:4c:62:40:27:bc:72:95:3b:e5:
02:7d:36:b3:34:bc:01:8e:b6:1e:26:9a:9d:16:81:
b5:81:0e:7f:78:c5:06:17:a3:4f:fa:ce:54:c1:ab:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:FA:48:DC:67:55:3C:AD:BB:19:D1:A1:70:26:CA:16:DF:F4:92
X509v3 Authority Key Identifier:
keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:f5:72:4e:39:e3:cb:f2:7b:ce:e5:98:c9:9f:11:52:3c:
a6:fa:f0:47:be:ea:c0:25:56:56:d8:92:83:18:bb:f6:a8:e7:
2d:fa:9a:e8:c1:5f:b9:35:74:98:24:59:d4:34:42:a0:33:01:
66:c4:3b:3e:29:14:bf:6e:92:64:bb:98:33:bb:00:6e:d6:61:
e9:b7:cc:7f:ad:5f:0a:cf:1f:a7:d9:eb:3c:d4:13:e9:0c:ec:
b8:32:e9:62:d2:96:1e:46:2f:b0:14:ba:1c:af:e1:5e:56:91:
29:8e:09:d7:e6:c3:71:79:b8:e7:be:79:38:8e:c2:70:5e:27:
d5:86:8b:01:56:67:cd:e3:b0:f9:3d:29:c2:c6:90:0a:24:fa:
a9:18:0b:f7:eb:f3:f6:c7:6c:7e:db:d5:25:5e:b3:b2:ea:ff:
67:b5:24:eb:a2:bb:f6:74:1e:06:24:94:16:c8:81:d8:01:28:
eb:d7:d4:c7:e3:30:47:83:3d:22:98:31:f8:14:c4:76:ad:12:
cb:48:2e:3e:f0:29:2e:05:a2:e6:a7:86:04:5e:d0:c0:25:5c:
fc:d2:08:8a:8f:74:84:1b:de:99:b7:d4:4a:7f:27:e9:e4:2e:
d9:4d:5a:a4:fc:82:a5:9f:54:9b:12:2a:d3:85:24:8f:36:16:
5f:9d:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:34 2025 by rpki-client on console-fra.rpki-client.org