Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: uyFpeR6iZjT2yT5cmTN6QtkqeY5YAicG2fAVBywgM2M=
Subject key identifier: 26:9B:51:D3:4C:1E:F0:BA:BF:54:9D:AE:E2:C3:DF:9D:41:3C:43:54
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 0194BC04BE95E5AF4E41A51F615A8DC2A443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: PDkI417cWn_abbXt0o9HD-0vD6g.roa (hash: mxVaLWpnhSe1agkXL4xYhLyldi4/weSHgH61n+a6Rqk=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: uTo4RX0/haVvuIXMFElaRxR3/X7JBn9X64o60zIFApU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:95:e5:af:4e:41:a5:1f:61:5a:8d:c2:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=269b51d34c1ef0babf549daee2c3df9d413c4354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:a2:45:6b:8f:62:f4:a2:1e:53:a2:bc:fb:
21:de:ef:70:28:f8:54:bc:b8:0f:6d:d1:de:64:bb:
ce:77:7c:4d:d8:3a:02:63:9b:e3:1e:d9:77:5a:0b:
24:1e:a8:1d:e9:29:a4:00:e8:2b:41:f4:07:d3:2a:
d8:7b:8a:85:cc:ac:f4:2b:81:a3:e3:44:e1:26:03:
29:82:c2:1e:51:01:9b:15:ae:08:7f:00:58:3a:da:
e6:9d:44:51:0b:84:46:56:9d:18:67:7a:41:4b:53:
8e:a2:83:6f:a1:ba:9c:ee:b1:cb:67:32:de:36:65:
71:5d:fe:42:4a:b8:ab:76:0a:73:56:e9:42:71:4f:
82:84:6c:fb:e2:76:ef:80:79:9b:54:bb:8f:a7:ee:
d7:73:0b:23:3d:fb:59:18:24:62:3d:54:3a:f8:b3:
9c:0e:32:2a:ae:07:3f:bf:58:72:d7:43:9e:e3:67:
ba:91:d9:57:a9:4a:67:9f:5a:34:b5:ae:3a:79:96:
8b:58:c5:7b:2e:c9:4b:c7:d6:6f:c3:b7:df:a3:52:
89:ca:ff:5a:00:02:fd:90:e4:54:32:36:ff:18:a0:
88:6d:c3:5a:09:48:b1:c8:0f:2e:33:57:10:6e:b8:
86:dd:0d:9b:84:82:56:7b:fa:95:cf:42:74:d9:7b:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:51:D3:4C:1E:F0:BA:BF:54:9D:AE:E2:C3:DF:9D:41:3C:43:54
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:e6:fe:a3:e6:2e:2a:bb:ed:21:e2:79:53:d1:74:2e:f6:
9e:f2:ff:f2:a0:60:f1:60:98:ea:8e:c5:44:29:37:29:65:23:
1d:21:b7:75:73:a3:fe:1d:cb:9a:b8:fc:61:92:3f:31:5d:99:
b7:11:df:95:3f:66:b2:d0:6e:19:64:a9:31:84:8c:20:5c:f0:
b9:10:36:3a:22:8e:76:d2:ee:f1:24:dd:d9:66:81:34:ad:ec:
85:b0:4e:79:65:c1:f2:c8:d9:75:42:4f:2e:e0:00:5c:ef:05:
a5:a3:bc:51:f8:42:11:61:e1:31:93:2d:86:12:70:43:d3:c4:
91:77:0e:b3:35:b0:5e:a0:01:53:3d:61:0c:42:d3:1f:54:27:
dc:2b:cc:66:0c:bd:22:ad:cd:b7:72:b9:a5:8c:4d:fa:25:34:
36:ab:b2:1e:1a:c6:d4:f3:29:4c:5d:6d:54:ea:85:8d:b5:df:
07:08:39:53:71:bb:90:f3:55:85:41:30:c2:94:b2:9c:23:3c:
da:53:2e:b5:6c:a5:d5:10:56:e8:c3:94:19:ed:5c:11:a9:82:
5f:36:7f:4e:80:a2:e1:9d:42:1d:99:d0:ef:6a:a3:24:b7:fb:
86:21:da:7e:71:40:e7:7f:94:71:43:a1:5c:ae:02:53:cc:01:
de:a6:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:29 2025 by rpki-client on console-fra.rpki-client.org