Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier: pVz7Ytjk7hVK209872oLACBNmm8OANZh5YLLd9iovS4=
Subject key identifier: 95:BD:41:46:F0:43:81:ED:23:CD:78:3E:43:F4:E2:E3:54:BC:F4:C5
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial: 0194BABB51724F81A9D969B2EFE168B39578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number: 10AF
Signing time: Fri 31 Jan 2025 05:00:25 +0000
Manifest this update: Fri 31 Jan 2025 05:00:25 +0000
Manifest next update: Sat 01 Feb 2025 05:00:25 +0000
Files and hashes: 1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: Tjfrt9Ze2UbRKonoWdrzMKIRfCupBZ6Y/ODr1o1pVlM=)
2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:51:72:4f:81:a9:d9:69:b2:ef:e1:68:b3:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Validity
Not Before: Jan 31 05:00:25 2025 GMT
Not After : Feb 1 05:00:25 2025 GMT
Subject: CN=95bd4146f04381ed23cd783e43f4e2e354bcf4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:4f:fa:ab:b5:67:e2:5c:57:b4:4d:2a:f4:
31:d9:f5:31:5a:1d:01:0f:5b:87:f8:81:da:15:c0:
be:b1:33:54:8b:0b:cb:96:dc:7f:44:af:58:5f:ef:
2f:dc:60:56:4b:ef:ae:8b:4b:34:8f:e5:01:07:66:
d7:87:6b:c9:01:70:7f:6c:ed:00:3f:d1:4a:47:44:
95:be:1e:97:d7:2b:ed:fb:de:d3:0c:1d:08:29:30:
9e:38:db:f2:b1:d4:19:49:08:31:79:72:73:ae:27:
88:3f:47:80:61:5b:a2:6b:63:c5:ea:21:20:4c:11:
b4:ba:71:be:de:49:07:8d:a9:ab:f3:ff:13:a0:14:
04:9f:10:01:c7:93:27:65:29:c8:0a:f8:a1:85:4f:
4b:df:93:1c:cd:93:9c:24:27:cd:ee:45:dd:d2:c5:
f3:b4:30:2f:6c:2e:da:c0:2c:b6:96:1a:63:cf:20:
c6:f3:f3:43:f8:34:40:72:c4:3c:9b:8a:94:65:30:
ca:53:b8:37:f0:95:42:ae:8e:8c:63:50:a5:98:ac:
18:35:d5:fd:82:a1:48:f0:e7:dc:d5:e2:8c:34:a9:
72:5b:e2:d3:75:ef:89:f4:ba:9e:8b:99:eb:f2:2f:
9c:78:99:ad:9e:c6:2b:a0:ba:f8:c4:e6:78:ee:85:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BD:41:46:F0:43:81:ED:23:CD:78:3E:43:F4:E2:E3:54:BC:F4:C5
X509v3 Authority Key Identifier:
keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f0:c9:d2:ea:b4:c5:28:9a:31:5c:1a:5e:e4:ae:01:9a:f4:
24:94:4a:40:6c:d6:c7:be:71:f2:90:c3:c0:e6:84:0d:3c:d6:
1e:2b:4e:66:ce:30:44:aa:31:5a:91:f1:82:8a:c7:df:0e:4e:
b2:5f:36:0c:50:38:2b:e5:99:89:90:a8:b7:10:82:22:52:ad:
39:31:6b:0a:26:86:90:67:13:ad:30:a1:13:a5:fd:d7:b5:34:
12:87:4b:b3:50:38:16:77:32:62:ba:91:5d:ed:e5:d2:ae:23:
ad:fb:aa:fa:4a:02:54:20:e7:aa:40:90:8e:6f:97:79:3e:bf:
ee:ac:c1:ef:f3:4b:82:53:ba:fc:0b:20:f5:e6:cb:ff:2d:05:
b5:07:d7:3a:03:30:54:e6:2f:04:5b:63:00:98:a8:6d:09:95:
e8:06:9b:0a:9c:e3:c9:91:4e:df:37:f2:b9:19:75:82:ce:70:
75:3d:7d:e3:d1:2e:e3:61:db:42:b3:93:ae:76:3c:aa:75:34:
ec:87:38:17:0f:c9:75:87:4c:a7:48:da:57:dc:f7:99:24:ef:
01:73:c1:84:1b:7e:4e:0b:72:76:08:4f:9a:17:3a:9c:a5:71:
e4:7a:9b:4e:9e:35:11:24:d3:ab:55:e9:99:e4:56:0f:1c:ba:
2b:93:e7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1FyT4Gp2Wmy7+Fos5V4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjUwMTMxMDUwMDI1WhcNMjUwMjAxMDUwMDI1WjAzMTEwLwYDVQQD
Eyg5NWJkNDE0NmYwNDM4MWVkMjNjZDc4M2U0M2Y0ZTJlMzU0YmNmNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mVP+qu1Z+JcV7RNKvQx2fUxWh0B
D1uH+IHaFcC+sTNUiwvLltx/RK9YX+8v3GBWS++ui0s0j+UBB2bXh2vJAXB/bO0A
P9FKR0SVvh6X1yvt+97TDB0IKTCeONvysdQZSQgxeXJzrieIP0eAYVuia2PF6iEg
TBG0unG+3kkHjamr8/8ToBQEnxABx5MnZSnICvihhU9L35MczZOcJCfN7kXd0sXz
tDAvbC7awCy2lhpjzyDG8/ND+DRAcsQ8m4qUZTDKU7g38JVCro6MY1ClmKwYNdX9
gqFI8Ofc1eKMNKlyW+LTde+J9Lqei5nr8i+ceJmtnsYroLr4xOZ47oV7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW9QUbwQ4HtI814PkP04uNUvPTFMB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/DJ0uq0
xSiaMVwaXuSuAZr0JJRKQGzWx75x8pDDwOaEDTzWHitOZs4wRKoxWpHxgorH3w5O
sl82DFA4K+WZiZCotxCCIlKtOTFrCiaGkGcTrTChE6X917U0EodLs1A4FncyYrqR
Xe3l0q4jrfuq+koCVCDnqkCQjm+XeT6/7qzB7/NLglO6/Asg9ebL/y0FtQfXOgMw
VOYvBFtjAJiobQmV6AabCpzjyZFO3zfyuRl1gs5wdT1949Eu42HbQrOTrnY8qnU0
7Ic4Fw/JdYdMp0jaV9z3mSTvAXPBhBt+TgtydghPmhc6nKVx5HqbTp41ESTTq1Xp
meRWDxy6K5PnjQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:25 2025 by rpki-client on console-fra.rpki-client.org