Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File: EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier: bCNJ9+JsiM9UwTQDEAFhDacQQ4bNer9AOLH7ZUJEU7o=
Subject key identifier: DF:11:AB:71:8B:F4:D9:99:4F:C5:34:52:35:C7:C2:24:A6:2F:02:90
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer: /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial: 0194BB5FF6BB177708F9693D8CBDCFC8B336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: gQJr2C7/oDVIa7qX99q6sGr03bqM4K7FtZzAWUu0seA=)
2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f6:bb:17:77:08:f9:69:3d:8c:bd:cf:c8:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=df11ab718bf4d9994fc5345235c7c224a62f0290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:9e:25:4c:dd:6d:7f:6b:9f:43:dd:c8:65:
ad:7a:19:aa:70:df:bc:59:44:4c:27:3b:84:7c:0c:
3b:bc:14:ff:bc:ba:0b:83:a3:6f:a6:99:43:c7:c9:
fd:0c:d2:b1:99:ac:12:d1:e3:d5:b4:b4:0d:b0:6d:
f5:29:3a:47:d9:51:55:3f:38:32:76:5a:c3:64:81:
15:39:11:b3:c9:9e:82:bc:d8:13:2f:9e:2d:5b:c7:
89:7e:5b:ec:94:ec:e1:a3:59:2a:9b:5f:4d:51:4d:
42:36:2d:8e:0b:1c:ff:2d:5b:61:74:92:0f:4f:4f:
bb:61:45:a5:ed:b2:92:de:30:7e:d3:f4:84:5d:a9:
6b:38:60:45:55:ea:32:63:8e:71:7c:19:b5:c6:e7:
1b:71:4c:fc:a7:ff:15:15:f8:b3:aa:04:0a:b4:26:
c2:8a:c5:ef:88:9e:e8:f9:c3:99:b5:13:39:32:13:
7a:30:e1:8e:13:f3:b0:98:2b:5e:7a:d9:ec:d9:cb:
d7:1f:2f:4b:d8:9e:8b:e1:40:a0:54:85:18:dc:e8:
8c:65:b2:7a:9e:8d:17:d6:4a:32:ac:9d:f3:3a:02:
a7:61:3b:f5:d3:f3:d4:74:26:0a:88:7b:eb:c0:15:
b2:67:20:4f:b3:a4:2f:18:ab:f2:0c:95:24:57:8a:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:AB:71:8B:F4:D9:99:4F:C5:34:52:35:C7:C2:24:A6:2F:02:90
X509v3 Authority Key Identifier:
keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:eb:92:ed:2b:6c:81:e2:ab:92:5f:0c:99:18:a3:6d:81:76:
54:ce:cb:0a:8d:a7:19:10:26:4e:ee:13:a0:17:b3:a2:ca:b6:
f2:a7:e4:40:8a:3c:91:ec:42:3c:80:c2:21:d8:d6:6f:61:72:
af:8d:cc:87:5b:7c:51:33:da:3f:71:c0:66:f9:6d:93:44:fb:
d4:b4:5b:37:4e:6e:5c:6a:d4:de:58:ac:a0:bb:2f:a9:1a:34:
2f:54:66:ec:d8:ca:c7:17:1b:00:e5:17:da:97:85:ca:66:13:
b9:8a:d6:4e:83:fb:7f:f9:de:85:27:1b:6f:b9:66:d0:fc:23:
44:f8:8e:76:06:0f:48:d7:ee:b7:fa:9c:b6:61:f5:ce:72:e0:
80:80:5b:d9:99:e7:26:f7:b6:2c:b4:52:7d:6c:2b:9e:02:15:
de:d3:5c:c5:09:2e:d4:96:39:6a:fe:8c:2d:93:ef:7a:58:4c:
a4:00:ff:30:1a:29:d7:a8:36:d3:59:61:89:18:fa:03:02:bb:
af:13:94:52:64:7a:6a:fb:6f:b5:94:96:45:c6:04:a5:6b:86:
fb:df:c7:07:93:c2:71:96:14:b9:be:39:92:fb:03:f7:57:eb:
99:b2:93:23:41:ac:d1:64:e0:32:58:4a:7f:31:51:8a:0d:b4:
6d:5b:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:32 2025 by rpki-client on console-fra.rpki-client.org