Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: u7copULHxltyUDEzBFQYB410uLkt9bdumEgDoed985I=
Subject key identifier: BE:E3:21:64:1E:D1:E8:14:62:5C:29:00:FA:37:3E:D5:C6:D5:2C:4B
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 0194BAF2571D3CEACAB9DE68844B54343C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:31 +0000
Manifest this update: Fri 31 Jan 2025 06:00:31 +0000
Manifest next update: Sat 01 Feb 2025 06:00:31 +0000
Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: zVfh9VBTFri+JBORb6zJLEYrR7U+PESsHMz/kwoUyPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:57:1d:3c:ea:ca:b9:de:68:84:4b:54:34:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Jan 31 06:00:31 2025 GMT
Not After : Feb 1 06:00:31 2025 GMT
Subject: CN=bee321641ed1e814625c2900fa373ed5c6d52c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:9a:78:26:16:99:bb:9b:83:98:7a:58:93:
6a:89:b5:de:9d:f7:d5:78:67:f9:11:8e:7d:09:d6:
d9:a9:95:27:57:2f:7a:d1:81:03:40:ae:47:07:ff:
29:aa:50:2f:72:94:97:32:fd:6e:59:a4:5e:21:c3:
a2:29:14:09:38:5c:06:69:e9:ee:cf:23:22:c6:c8:
b7:85:ca:6c:bf:fc:55:69:4d:8f:04:61:1a:ab:e1:
ba:05:28:c2:80:df:0b:b1:c0:6e:ca:56:94:b7:a1:
b8:6d:a7:64:4c:5e:dc:81:f7:4e:d1:61:88:ca:63:
c9:11:ee:7b:0b:3c:08:7e:35:de:45:ec:01:ab:bc:
6c:39:a0:fc:3e:99:a5:a7:0f:5a:8b:74:2b:10:69:
f9:a9:22:72:ad:ae:50:bb:18:92:23:ea:cb:28:eb:
3a:ab:f1:7e:f4:05:26:8f:93:c0:e6:e7:9d:dc:21:
2c:b9:21:14:e7:ef:16:81:6a:54:95:62:c6:32:2c:
31:99:dd:12:b4:59:98:93:12:65:95:87:f7:54:76:
53:85:e0:f5:11:61:87:3b:fc:98:b5:38:0e:e5:6c:
97:43:63:7a:01:9b:20:01:4e:97:9e:fb:21:50:b4:
54:f7:4a:8b:ef:ab:a8:97:70:cf:82:34:c8:62:71:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:21:64:1E:D1:E8:14:62:5C:29:00:FA:37:3E:D5:C6:D5:2C:4B
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:63:1c:22:cb:d6:f5:e7:9e:54:0e:cf:da:83:17:fa:86:
99:a2:05:5e:1e:e7:87:5f:f8:5c:fa:30:5b:46:20:cc:38:33:
d1:29:43:8d:27:ab:c6:97:79:9c:4b:ab:51:93:b8:fb:a0:2b:
06:b9:b0:a2:41:69:75:c8:64:83:d8:1f:23:7a:72:12:0c:83:
a6:2c:22:6d:ef:71:b2:9b:06:da:55:57:79:27:2e:76:c6:f5:
a9:41:cf:b7:93:55:e2:e2:42:79:80:5c:45:d0:ff:9e:71:4c:
e8:b3:13:02:7b:d9:01:90:7f:6d:f1:59:9f:33:b7:0d:ed:db:
c4:b2:78:3f:f3:15:e5:94:0a:7b:71:2f:d4:f3:0a:1c:fa:1a:
ab:4c:d1:a0:37:f3:c3:8f:83:e3:c7:5b:fd:df:30:d4:74:4b:
c9:10:bd:a1:8a:c0:b5:a1:43:b1:dc:df:0b:e9:9d:9f:91:a7:
98:d3:ad:6c:e9:21:5c:fc:a4:49:5f:20:90:7e:a4:38:f8:36:
83:cf:a7:ee:47:a9:16:c5:23:43:27:69:75:9b:62:3a:14:93:
d3:c4:57:95:5a:c4:b8:96:c7:d3:1f:fe:dc:f5:bc:05:d1:c0:
a1:64:81:84:c2:4f:ea:96:a1:8b:1c:00:bc:d7:0b:f8:79:dd:
93:9f:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:39 2025 by rpki-client on console-fra.rpki-client.org