Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: SqX86Rov+ytdVKNSZE9AIF61NTJZhI8rLvf5H3JET2U=
Subject key identifier: 6C:9D:A8:D0:F9:E3:E0:B0:37:88:D4:2F:57:53:5A:2C:D1:B9:EE:47
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 0194BB974F4CA6437EB61CF13D8677D3FC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: CQ3AtR/tMOwZr9j5YECGvYrvZ0anCumd6vqghsefukI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4f:4c:a6:43:7e:b6:1c:f1:3d:86:77:d3:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=6c9da8d0f9e3e0b03788d42f57535a2cd1b9ee47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:41:81:54:11:96:35:fe:f9:72:0a:44:28:
fa:85:e3:f1:7b:6f:27:e5:c5:52:ea:3b:88:ea:dd:
d1:d5:a6:e2:b6:0a:79:d6:75:75:96:9a:e5:cd:1e:
fd:e5:8d:16:ef:c6:4f:4a:ba:b0:d7:75:3a:f9:d1:
96:a9:02:11:0e:d9:2c:1e:3a:05:c5:0d:e3:75:7f:
0a:03:07:a3:1e:7c:c6:49:94:89:f4:bf:db:7c:90:
ac:d9:f1:28:87:c0:7a:07:cd:c5:e0:b3:bb:0b:22:
20:55:63:82:35:3e:59:1e:7b:74:98:dc:5a:5c:e1:
25:29:56:10:37:ae:59:3c:fb:f0:71:22:b0:23:6c:
34:05:02:13:6e:3c:6b:0d:cf:ef:22:09:00:2b:56:
15:22:4a:9f:9c:12:34:d0:ed:38:e9:c9:cc:0c:d9:
48:95:6c:f6:5b:96:92:58:fe:3e:f6:66:e7:74:16:
76:ba:81:05:d0:e4:19:2f:be:7d:54:3d:d6:30:18:
e7:a1:16:7b:ff:7e:20:b7:11:dd:ee:c4:87:c4:0c:
4c:55:56:dd:8c:4e:39:65:f7:3c:08:9c:4b:29:97:
56:72:aa:0b:14:8d:5b:7c:e0:9d:df:4b:0c:89:7c:
0b:ab:3c:ff:24:c2:5a:f5:8f:7d:7a:72:2c:b3:7c:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:A8:D0:F9:E3:E0:B0:37:88:D4:2F:57:53:5A:2C:D1:B9:EE:47
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:78:32:b0:6a:40:23:e3:a3:14:05:18:d1:2b:79:6e:67:
34:8c:a8:0f:28:25:f3:52:47:c1:fb:d4:27:f2:3e:6d:3d:9c:
0a:26:05:fd:0c:cf:95:63:31:99:3e:19:97:22:df:7e:84:7d:
52:50:60:d8:5e:82:ec:e0:f1:c2:69:df:4a:39:5a:b4:41:64:
7f:df:92:d3:b2:e2:c6:68:f1:a4:d9:12:d5:18:bf:3b:3c:af:
0d:6b:bd:71:73:9d:6e:13:92:c6:cd:52:ac:3a:58:80:1d:a0:
a6:dc:4d:61:f2:de:41:69:08:b8:cd:8e:87:bc:a7:6a:28:ca:
c4:b5:4d:26:ce:87:e2:08:cf:f4:8c:38:0e:65:6d:cb:da:19:
a2:f4:c5:fc:77:33:08:4c:d3:58:08:17:02:33:21:be:10:97:
42:06:74:f5:16:cd:41:da:c9:ef:8d:d8:f2:dd:6b:a9:40:ed:
2b:ab:75:38:57:e4:10:61:28:ae:07:58:d8:5e:78:59:91:a1:
0f:7e:7b:9f:ea:57:f9:16:15:43:d3:10:cd:f4:68:55:cc:e2:
1e:e1:9e:ab:0c:8e:b3:05:e2:8c:f8:07:67:83:24:dd:cc:dd:
99:98:cd:89:e3:f1:45:19:70:25:0a:db:04:da:58:8e:f9:51:
0c:24:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:02 2025 by rpki-client on console-fra.rpki-client.org