Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: LwCagFokkb1EqxVu3lDE8bSM+7BHqhJqToh26Pg/I/s=
Subject key identifier: 77:F2:C2:B3:3C:FA:C9:F6:D5:56:B1:F5:DB:D2:74:E2:CB:AF:83:75
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 0194BB96EDE7FF23CA884E459E8D03720C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 01EC
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: JXvH2r3JMupTz1kE91dtNlQB+4gG+KPHvDA9nCgm2w8=)
2: MnAFAkCtgzLcYcNFwN10QWcGsK8.roa (hash: 6b6kNF5nIgi+BcUotmCWsx7IX4qtT26omA/Wf9SJHJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ed:e7:ff:23:ca:88:4e:45:9e:8d:03:72:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=77f2c2b33cfac9f6d556b1f5dbd274e2cbaf8375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:49:8b:c7:89:70:c4:3d:f1:99:c7:a8:8b:
0c:f6:3e:78:65:14:47:a9:59:16:f7:7d:64:58:a8:
c5:ae:46:bf:0f:0c:ff:b8:93:f5:c8:5c:18:fc:59:
48:1a:bf:88:55:59:25:41:5c:2d:a2:a9:6d:90:9a:
5f:22:a5:5b:3a:f0:2d:06:10:66:75:37:cd:43:06:
ef:cc:35:e8:d4:8a:a8:d4:f3:cb:e7:5e:60:d3:7e:
37:5c:84:8a:21:ea:45:b6:3a:04:30:1d:19:09:de:
58:cb:64:bd:e3:c4:6c:91:de:7e:ae:6e:07:dd:1d:
fc:31:a7:17:97:74:62:9a:3f:32:80:83:f3:6e:6d:
4e:cd:0a:2a:6f:ca:10:71:0c:12:51:d7:fa:c0:f2:
c6:8d:e6:7f:51:99:b8:97:81:3c:fd:82:80:3e:cd:
69:4c:0a:2c:b1:0d:20:df:95:bb:5e:d8:30:a3:99:
36:fd:04:32:7c:3e:d5:d2:dd:00:c8:bf:c6:14:4b:
b9:ec:81:8c:44:e6:0d:07:2e:c1:d1:5b:b5:4d:3d:
9a:50:fa:63:10:80:5f:14:1c:51:0a:dc:28:51:d6:
78:59:1d:fd:af:50:44:e2:db:c1:d1:56:69:f7:c6:
22:80:2d:ad:49:54:5b:61:9b:46:75:a6:41:e0:f3:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:C2:B3:3C:FA:C9:F6:D5:56:B1:F5:DB:D2:74:E2:CB:AF:83:75
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bd:59:24:b6:4a:18:22:45:b2:f2:40:d8:7e:88:0d:45:9d:
6a:e7:88:1a:2c:b4:92:a6:5f:e6:fa:97:c4:1e:97:f6:fb:07:
43:bd:1f:af:ba:18:57:7e:e9:da:0e:8c:a0:04:7f:d1:af:2a:
95:83:94:62:a9:a6:79:64:45:1d:89:f0:3b:9b:63:62:df:f8:
8c:93:72:fa:26:66:24:a5:19:57:8e:89:8f:11:4f:7b:67:6d:
b9:a4:48:03:e0:8d:8d:7f:eb:4c:ac:8d:83:a9:2e:a4:6c:dc:
5c:1c:9e:83:75:9d:bf:17:7b:06:ec:c1:ad:ab:b2:90:43:24:
c0:e7:c5:d8:a7:97:0b:34:3c:12:88:ee:05:d5:a7:cd:92:a0:
37:e2:77:8f:18:bf:44:0e:b4:4d:35:c6:02:72:ef:d7:0e:9a:
bc:f1:0e:45:04:83:bb:76:7f:71:1b:2c:67:99:40:e5:3e:0d:
86:e6:ef:28:85:1a:7f:b0:62:6d:d2:0c:1b:fe:ce:3e:3e:df:
4e:1d:7a:ea:d9:42:e7:78:d1:9d:37:70:ba:84:ad:92:e9:76:
45:f4:b5:f7:6b:75:da:5b:2d:87:df:8d:63:8e:3e:f2:6a:49:
97:60:1e:44:31:e1:c1:87:b0:8a:06:b5:ff:26:a2:5e:58:6d:
26:da:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:39 2025 by rpki-client on console-fra.rpki-client.org