Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: 709sUzuBPCVQI5yIWeMC75Pr/rF5nwTBVb9/m8xFtSU=
Subject key identifier: 09:26:6E:F1:57:6B:CF:32:8B:99:A7:66:77:19:DC:AD:D5:73:10:C1
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 0194BA84B1305F8673CD912CCEFDD9574C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 06F5
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:45 +0000
Manifest next update: Sat 01 Feb 2025 04:00:45 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: RExpiTSjyABLiP2GA8wtRwXPcl7BCsYI+Kak63/JsQ8=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b1:30:5f:86:73:cd:91:2c:ce:fd:d9:57:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Jan 31 04:00:45 2025 GMT
Not After : Feb 1 04:00:45 2025 GMT
Subject: CN=09266ef1576bcf328b99a7667719dcadd57310c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:48:75:d6:f9:3b:16:2c:a8:39:34:a5:99:
bd:e5:6c:7c:d6:d9:d7:07:e4:a2:30:42:09:e5:4f:
2b:3c:2e:72:93:19:e1:b1:a1:27:0c:6a:ad:69:7f:
80:fa:0d:00:14:51:2f:67:49:6d:cc:b5:a3:0f:96:
48:01:09:ee:38:c6:81:c7:e1:9f:3b:0f:24:7d:83:
51:ae:60:ab:10:21:19:f8:41:09:ad:0e:e0:25:fa:
b1:56:e7:c7:b9:2d:f8:47:3f:5f:77:ba:fc:ae:06:
e9:35:2c:9c:d4:37:9d:ca:1f:ba:1d:71:16:f4:58:
7d:cc:a0:b3:e2:1c:bf:95:38:ba:db:de:c6:73:83:
5c:70:86:bd:3b:0d:0d:0b:56:67:da:ad:11:10:13:
f6:06:d3:7b:1c:de:83:f6:0e:b4:23:28:54:6b:be:
35:32:dc:9a:e5:43:86:a9:55:e4:b4:87:75:bb:09:
70:4e:12:b8:eb:72:3b:98:91:19:d5:5e:f1:61:cd:
6b:99:64:22:82:00:3b:13:ff:97:7a:c5:81:0b:34:
24:29:df:ef:09:bb:f8:35:4c:bc:a7:fb:c3:05:98:
36:bf:8d:da:50:06:c4:ff:44:9e:b1:ad:aa:7d:04:
4a:0c:a7:81:12:fe:07:ee:b1:98:bf:c0:9c:03:86:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:26:6E:F1:57:6B:CF:32:8B:99:A7:66:77:19:DC:AD:D5:73:10:C1
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b5:10:5d:6d:cd:43:96:6d:3f:6e:76:e8:d7:e4:5e:35:0f:
25:33:bb:82:d4:2a:35:a0:7e:3c:e4:a5:d8:88:22:fe:90:31:
62:a3:2f:d4:46:71:5c:21:a8:f9:2f:51:a4:43:39:6d:32:6d:
75:ea:50:3b:b4:0d:fe:22:ea:71:77:22:58:17:ec:36:dc:dd:
c1:8b:00:07:b4:e1:83:20:37:73:f4:8b:36:c1:ad:95:0b:6f:
76:41:b1:b0:02:d9:fb:2d:a6:88:09:7d:0c:33:9b:19:3c:6c:
c3:60:46:53:45:33:59:e8:80:d7:57:b1:3c:93:cb:d4:f4:0e:
ec:ac:71:c9:f3:94:03:92:8c:2b:42:2b:89:12:52:2b:fa:5d:
d3:3c:1d:d2:f6:bb:02:d2:5e:d4:3c:1f:c7:6f:5f:a8:2c:e2:
84:63:a7:f3:1b:a3:3a:d1:d3:18:7e:91:dc:3a:45:81:7a:fc:
69:6a:c2:e3:f8:44:29:4e:a5:9d:13:28:af:ce:c2:88:25:e3:
9a:93:4b:24:5a:bb:c1:bc:af:06:f4:94:dc:43:c0:a1:0b:6a:
e9:c8:d6:48:ff:6d:c5:5b:38:6c:28:02:fe:90:ab:8c:16:54:
e8:64:81:79:5a:08:ad:0a:31:ba:39:a9:3f:bb:ec:54:d4:ff:
12:1c:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:18 2025 by rpki-client on console-fra.rpki-client.org