Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File: eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier: VBzsv1qgWraesvXIvYPRWds6SKnjioauphmaud3IfH0=
Subject key identifier: EE:DC:01:06:BF:47:FB:76:CC:2B:12:05:F3:46:45:34:57:9C:C3:C5
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer: /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial: 0194BAF2164638ADC53E666C59E9CCE1193C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number: 062F
Signing time: Fri 31 Jan 2025 06:00:14 +0000
Manifest this update: Fri 31 Jan 2025 06:00:14 +0000
Manifest next update: Sat 01 Feb 2025 06:00:14 +0000
Files and hashes: 1: 3O6Hfmbr30Ak6WicBkkKlx5hysk.roa (hash: kcj0ENONASwkAQnmBjvrTNy0GRh8JWD6AlfD+TxgS4I=)
2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: 88uW0sPH1uTu3IH5OcAqRjCy3qZZM5FCEjemieb25mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:16:46:38:ad:c5:3e:66:6c:59:e9:cc:e1:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Validity
Not Before: Jan 31 06:00:14 2025 GMT
Not After : Feb 1 06:00:14 2025 GMT
Subject: CN=eedc0106bf47fb76cc2b1205f3464534579cc3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:3c:9d:ed:e4:86:6e:82:ce:3a:73:54:39:
32:1e:94:dc:55:05:eb:43:a1:0c:d8:0c:79:88:99:
dd:94:e6:7a:28:7f:ba:66:98:9f:fd:4c:fc:17:bc:
71:a7:4b:7c:35:2c:d0:ee:c2:50:3b:7f:f5:34:e8:
03:a8:52:e4:56:65:f5:77:b8:d3:ce:b6:3c:20:84:
57:bb:81:3b:24:7f:04:37:7d:8c:e2:38:14:9d:93:
42:22:c7:3c:56:9f:39:64:83:fe:fa:fa:28:03:4e:
9f:57:94:ab:b4:92:42:1a:3e:2f:96:86:a5:4f:fc:
20:7c:dc:2e:cc:9a:9f:ba:c8:10:3a:eb:97:3e:af:
cc:9d:ba:c9:60:9d:99:2d:dd:aa:c1:e8:70:15:b5:
7e:50:27:a1:fb:b5:5b:ea:3e:f1:ad:0a:83:97:6d:
7f:b3:bf:50:a6:b3:48:e4:af:85:28:d1:db:e9:b1:
20:92:8c:3c:8b:4a:82:87:61:6c:62:75:a9:7c:c9:
d1:a3:60:e5:28:69:7a:44:85:27:5f:20:8f:1a:a3:
82:9e:7f:70:c4:e7:81:d0:c9:2e:6c:4a:8f:c4:09:
78:d8:cc:76:ff:55:0d:58:99:66:49:88:fc:4f:a1:
2b:8d:42:97:e7:c1:69:21:d7:68:c5:64:a3:25:29:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:01:06:BF:47:FB:76:CC:2B:12:05:F3:46:45:34:57:9C:C3:C5
X509v3 Authority Key Identifier:
keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:ab:c1:87:89:ad:98:55:77:17:08:3c:c9:9a:91:ae:43:
27:01:22:28:c7:bf:cc:97:78:c7:14:eb:da:b9:88:40:97:36:
1b:e1:0c:d3:d0:df:07:17:8e:d6:61:9b:12:34:24:5d:f2:35:
ba:cb:19:59:0e:e2:23:d4:2b:c4:d7:74:75:0c:ea:fc:b9:53:
2f:40:77:f8:18:e1:56:51:2e:62:95:35:7f:72:86:5b:b3:82:
23:75:f3:11:00:21:22:49:30:4b:88:3a:d4:c2:3c:71:b7:9a:
0c:f7:56:83:ab:7e:c5:43:2c:d2:51:f6:44:9c:bc:ea:5c:6d:
99:95:2a:83:e9:a1:ab:cd:e8:75:df:85:3e:a0:5d:5c:73:65:
13:d0:15:c3:64:28:b4:8c:70:ba:99:c8:f7:cb:ed:f1:96:e9:
63:04:fc:3c:c7:e5:41:43:c3:44:cb:e9:df:7d:1d:16:d5:cb:
41:9b:35:1d:b7:27:be:5c:cc:dc:03:1a:10:6f:60:71:0a:90:
e3:d8:c1:1f:25:c9:da:cb:d8:3d:25:eb:92:64:f9:bc:d1:bd:
e8:56:9f:1a:ee:1e:c3:9d:a2:b0:e5:92:c3:04:ea:87:f5:ed:
b2:03:26:e5:87:8e:6e:ed:95:9d:62:af:ae:ac:90:c6:e8:a4:
b1:f4:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:36 2025 by rpki-client on console-fra.rpki-client.org