Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: J+KuDSIlazVl8EsxegvtNrcbwcIUppp+2cyynrGqMmE=
Subject key identifier: 7F:EB:C9:D1:6E:13:A8:6A:9A:3D:96:54:4C:44:49:F0:8B:5C:FD:C4
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 0194BB6070E6C5AFFF9703D072B49C42A1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 044A
Signing time: Fri 31 Jan 2025 08:00:47 +0000
Manifest this update: Fri 31 Jan 2025 08:00:47 +0000
Manifest next update: Sat 01 Feb 2025 08:00:47 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: EIzF2hXxIz6xuHknv4iFcBPN0hvFbMonGzw5dzNrd6k=)
2: ipF9E24heTTHKXSVvskKJfklFf0.roa (hash: 7F5wbYoOgCCkCtg8OSspdrjSA0Y3Il9u90JdksRzii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:70:e6:c5:af:ff:97:03:d0:72:b4:9c:42:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Jan 31 08:00:47 2025 GMT
Not After : Feb 1 08:00:47 2025 GMT
Subject: CN=7febc9d16e13a86a9a3d96544c4449f08b5cfdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:47:0c:9c:64:17:fc:2c:64:d6:7e:e3:13:
cd:7f:2b:30:7e:bd:4b:20:4d:73:30:9d:ce:ed:2a:
40:b1:b1:2a:52:0a:0c:80:32:b0:a9:bf:b8:0b:a7:
1c:ce:03:a6:5c:04:5a:6c:6f:fb:96:28:f7:d5:52:
bc:6c:a9:2d:d2:81:19:3a:80:2e:5d:5b:ef:ab:58:
04:81:93:ae:32:38:60:46:11:ab:41:cc:cc:4a:b2:
ae:0c:e2:3a:56:3e:d1:53:11:a0:26:76:41:d7:97:
cc:ac:43:dc:ac:0b:06:0a:d7:b6:c8:3e:43:b2:8f:
16:ce:97:92:73:37:4d:fc:df:bc:70:e3:31:82:ce:
21:60:40:83:04:79:00:3b:91:18:0c:01:53:83:4d:
2c:bc:20:d8:96:d3:08:0e:02:e4:0e:aa:b4:fc:fb:
5a:46:8b:7d:d8:07:f4:a1:03:8c:bb:b8:b1:20:6f:
59:56:04:ff:06:59:d5:12:dc:b1:a0:be:91:e7:7b:
8f:a2:62:c2:20:e3:a1:b1:3d:a6:1d:d0:ab:2a:ae:
67:69:5c:3b:04:ce:4e:2e:3a:16:72:bb:2d:ad:7c:
d7:46:b7:a8:2a:79:38:55:dd:16:31:72:b3:c6:c4:
8b:13:ad:72:40:ca:11:5d:85:ae:c8:7a:13:83:a6:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:C9:D1:6E:13:A8:6A:9A:3D:96:54:4C:44:49:F0:8B:5C:FD:C4
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:e5:2a:4e:04:ac:24:bf:f0:bb:52:b5:1d:f9:99:25:f6:
9e:70:0a:67:47:1f:36:eb:b2:4b:86:e3:b9:cc:dd:e0:c0:6a:
6b:1e:c6:4d:32:90:8a:7b:60:06:9c:ac:33:b2:65:c7:4e:25:
93:c6:e9:fb:c4:5b:87:c1:b0:a1:99:cc:0d:e8:61:7a:a7:b9:
b8:61:10:81:33:cc:e4:2f:de:c6:0a:21:6e:9c:72:08:16:36:
0d:c0:01:1a:ed:99:65:da:59:e9:de:33:78:4b:ea:66:d4:b8:
e8:55:bb:2e:04:bc:6e:19:dd:14:16:ea:a2:2b:0f:78:81:7c:
27:98:a6:15:77:58:d9:1c:f8:1c:7c:58:bc:ff:92:45:76:8b:
ea:f1:7a:58:8d:4f:42:b7:fc:4b:00:1c:e2:37:6f:2a:e7:9d:
e1:27:a4:45:d6:ae:dc:3d:75:b0:ee:79:20:ce:1f:a4:70:5f:
1e:de:c0:d4:18:77:61:dd:7a:22:76:85:ff:1a:a4:d7:27:de:
ec:0b:10:77:cb:57:c2:59:0e:1d:ed:8a:eb:a2:a8:e0:2d:56:
0c:ca:be:8a:b4:e3:26:f3:e3:05:60:d3:ea:6a:3e:24:d4:e9:
5d:94:84:4e:56:80:1d:38:8a:fc:99:6b:e1:d6:5e:bd:2c:2d:
ef:77:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:50 2025 by rpki-client on console-fra.rpki-client.org