Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: Jf+oFX3P0yr33q5rEmXhNem/QHkl6mKG/CAtcaTybRY=
Subject key identifier: 06:83:AF:29:5A:94:6C:46:18:66:9E:40:80:B1:E5:DD:A6:E2:78:A8
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0194BB291B5D3C717A65CB7787FAD3B7212A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0886
Signing time: Fri 31 Jan 2025 07:00:20 +0000
Manifest this update: Fri 31 Jan 2025 07:00:20 +0000
Manifest next update: Sat 01 Feb 2025 07:00:20 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: qe6uhMIn1iI9riIAovd58Tm4fXCIm05ixvYRrIH/BZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:1b:5d:3c:71:7a:65:cb:77:87:fa:d3:b7:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Jan 31 07:00:20 2025 GMT
Not After : Feb 1 07:00:20 2025 GMT
Subject: CN=0683af295a946c4618669e4080b1e5dda6e278a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:1c:31:89:0e:c4:d2:c8:29:22:68:ad:55:
38:e1:9e:bd:17:76:e2:6e:02:2b:86:bc:5f:d3:0d:
4c:75:a9:a8:5f:da:10:22:4c:07:79:2a:34:81:4b:
8a:e9:a2:af:f5:60:81:2b:38:f3:43:2c:f0:68:98:
b9:8b:78:a2:a3:94:97:a5:73:13:14:f1:7c:82:d0:
da:17:4c:86:84:74:ef:c7:f8:51:3a:5f:38:94:fd:
d2:09:4e:0b:78:ac:e7:44:93:4b:e0:a0:a5:e6:9d:
17:fb:1f:7d:b9:6d:ba:6e:fd:30:ca:d0:07:f2:01:
c2:25:62:5c:45:0f:71:59:89:bc:25:62:d2:95:a5:
37:c1:29:13:02:bb:20:f3:33:e9:9c:77:1e:e2:c7:
e5:d1:a2:64:fd:6d:25:ba:02:78:75:5a:b9:f0:54:
ad:0d:98:56:fc:6f:9e:ba:b1:b2:dd:d8:91:49:b4:
88:0c:b1:35:49:81:bc:0b:35:5e:13:c0:c2:52:24:
b0:aa:c4:34:c0:89:1e:32:98:2f:39:0e:a6:68:d1:
0a:4c:5c:45:c1:99:37:07:2e:dc:58:e5:c0:76:09:
56:99:b0:90:c7:d1:d8:a6:d4:ae:76:43:54:ad:32:
ed:66:2a:3b:ff:d4:f9:07:2b:35:ed:8f:8a:41:3b:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:AF:29:5A:94:6C:46:18:66:9E:40:80:B1:E5:DD:A6:E2:78:A8
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:14:96:f4:af:fd:81:df:b4:46:bb:73:44:d9:09:b1:b5:38:
b2:fd:04:bf:de:a1:08:f8:ac:04:a4:e6:72:07:94:48:70:c9:
a8:58:41:6b:40:ca:06:b8:c8:ad:53:12:62:ce:9c:e9:26:3f:
58:9b:1d:a6:b2:9b:50:69:05:50:89:66:6f:00:d7:16:12:ed:
54:ce:3a:f6:76:d1:ac:e1:c0:5d:01:fd:58:ae:ec:92:63:e2:
e6:68:37:9f:06:96:79:a5:26:79:44:32:16:04:a0:fe:2e:6c:
9f:06:e5:d6:a5:a0:72:9d:ce:a3:f3:b9:1e:8f:4e:9e:e8:42:
89:af:7d:ea:a7:39:31:d6:1a:59:15:64:df:47:cb:81:5c:9c:
24:8d:8e:a1:4b:84:ba:8f:26:2c:e8:98:e9:e2:75:f5:7c:6c:
af:8e:0c:86:f8:d1:b8:5e:21:ca:1b:a9:a5:e7:15:22:49:99:
64:90:c6:e9:02:0e:78:76:99:94:e1:af:36:80:51:d5:ff:56:
ed:24:0d:c6:60:ca:af:31:36:aa:e7:e2:39:d9:54:55:91:75:
e0:04:66:36:6e:cc:4e:8e:95:a7:55:4a:80:43:64:fc:44:44:
e5:30:90:59:0f:0f:29:fb:67:b3:76:15:0b:ed:b1:93:f6:11:
85:a2:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:13 2025 by rpki-client on console-fra.rpki-client.org