Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
File: a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft (raw, json)
Hash identifier: omq9+h+bnwKnfdLk/kplUj3/J0QkJBInre22WD5R0EU=
Subject key identifier: E2:C6:5E:A9:F8:F8:19:6C:72:51:E6:80:C2:57:E9:D4:F4:36:AD:90
Authority key identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
Certificate issuer: /CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Certificate serial: 0194BA848B86C740768774C25F1D4CECD996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
Manifest number: 010D
Signing time: Fri 31 Jan 2025 04:00:35 +0000
Manifest this update: Fri 31 Jan 2025 04:00:35 +0000
Manifest next update: Sat 01 Feb 2025 04:00:35 +0000
Files and hashes: 1: 6ArSrzmkWIZDmYIRBoxk-EjJq_k.roa (hash: S1AZ4YBXbed4CMbdXMK5lgtU/yrbUTPwd2+O2M1CSZk=)
2: a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl (hash: i/JNaW+elOtVTSsE88mS5ofnUDvG3z/ujL4xwZwTS+g=)
3: kPZ8ETM6lNG0lavwYwIQDcxYl1g.roa (hash: SlFNEFoyK1DX28n0FPr3kQ7LoACCcNAT7qXaupdbmVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8b:86:c7:40:76:87:74:c2:5f:1d:4c:ec:d9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Validity
Not Before: Jan 31 04:00:35 2025 GMT
Not After : Feb 1 04:00:35 2025 GMT
Subject: CN=e2c65ea9f8f8196c7251e680c257e9d4f436ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:7e:ee:69:0d:8b:bd:55:5e:84:73:19:95:
11:db:81:c7:3a:2e:bd:59:9c:12:10:0e:b0:64:9d:
d6:0a:df:1e:1a:4f:f3:a0:ce:e8:c4:25:37:05:86:
1d:f8:fd:d9:c5:2c:fa:6b:1c:24:9a:f6:68:2c:e7:
a3:7c:5a:46:f1:14:45:9f:62:2d:4a:31:9d:fa:9e:
2b:62:f9:98:7c:0c:54:b5:eb:96:7b:45:9c:52:e8:
74:7c:21:3a:d0:1b:c8:da:cf:da:e2:4d:74:55:bc:
c4:af:a1:57:37:72:10:bd:8c:9b:90:02:36:be:7c:
f5:c8:96:88:2a:61:59:94:3a:08:63:cf:04:5b:22:
a8:38:0c:06:62:33:36:49:7b:d4:d1:c7:cf:13:b4:
db:1f:41:d2:21:c0:90:57:52:90:8e:26:9a:7e:a0:
00:65:e7:0b:89:68:4c:33:ca:e8:43:09:0a:65:7c:
6c:49:e1:f6:a2:dd:f4:ff:18:76:c8:24:0a:89:0c:
96:7e:f9:cc:ad:b2:b6:12:16:7d:ca:fa:c1:92:f6:
2e:ae:5e:f5:8e:fb:a5:5f:23:7e:be:4a:f9:bc:76:
40:71:d5:82:5c:42:7a:06:22:77:8c:79:dd:6d:07:
27:24:9f:3e:8d:f7:4c:d9:70:32:07:16:81:4a:a3:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:5E:A9:F8:F8:19:6C:72:51:E6:80:C2:57:E9:D4:F4:36:AD:90
X509v3 Authority Key Identifier:
keyid:6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:7a:77:00:62:ac:3d:3e:38:1e:c1:ea:2b:4c:0f:6e:94:
9d:67:a5:5e:29:f9:3d:25:8e:b2:bf:12:f3:d5:bc:c4:e6:63:
85:02:da:a2:80:5a:58:53:61:44:20:04:1a:e1:b1:d0:78:67:
be:b0:d5:d4:49:cc:81:1d:6a:40:35:30:04:02:57:e3:a1:3a:
3f:f5:22:e2:0f:8d:0d:ab:55:36:08:54:bd:97:16:63:6e:14:
ee:bf:dd:81:c8:83:57:a9:22:5d:6d:aa:08:d4:f7:a5:72:4d:
9c:da:3f:86:92:15:76:67:9e:5c:98:a9:57:77:39:32:0f:48:
de:2b:51:90:46:02:8b:87:e9:e2:50:d5:32:f9:87:ce:8e:25:
c1:ac:e8:86:38:f7:53:e6:d8:8a:0d:fd:3c:4c:4d:82:74:80:
ab:7f:15:72:30:3f:6e:2c:ca:31:7d:2f:1c:fb:76:48:f1:7c:
36:46:e4:90:31:52:1d:85:7b:ef:1b:40:ea:0d:f8:df:e9:a1:
5a:c7:d0:4e:1f:9b:e8:a2:89:22:db:dd:6d:c8:93:9c:10:fd:
6f:5e:89:37:1d:da:8e:9d:a3:1b:dc:60:41:56:db:4c:43:c9:
02:33:05:6d:d5:a2:b9:e9:07:15:61:d9:8b:fa:3a:f3:5c:70:
2c:be:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:19 2025 by rpki-client on console-fra.rpki-client.org