Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: 5v/sm+bSJQa0780QJQULFC+UGXCj67nBCCLK1lAYUUE=
Subject key identifier: C1:E2:1A:76:E4:A6:68:0F:F6:A5:BD:50:A1:4A:72:3D:BA:B2:76:DA
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 0194BB28EA5AB9A4A03F8A3594614245D297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: e6lpWfVN+KpFgsqibvYi/WEZ3+zpwjnuMLwIMhCzx/M=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ea:5a:b9:a4:a0:3f:8a:35:94:61:42:45:d2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=c1e21a76e4a6680ff6a5bd50a14a723dbab276da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:19:18:39:ba:27:62:97:70:e8:99:b2:0f:5e:
08:49:a1:73:83:84:97:4b:7a:51:19:ec:6f:d2:5d:
bc:17:02:bc:7b:97:2d:13:48:a0:8c:61:87:b5:de:
84:d5:ff:2b:d1:92:ba:7d:87:27:ae:31:f9:da:3e:
2b:63:45:2a:77:83:6f:ac:10:00:80:2e:62:c8:ac:
0e:78:49:a5:d8:9a:cd:9b:45:b6:ee:5b:fb:fc:cb:
89:e2:84:44:6f:d0:e2:6b:86:f3:26:2b:1a:bd:dc:
1b:bb:63:10:09:ce:3d:f4:2b:15:12:4c:21:62:cd:
c7:6d:c5:9f:b8:dc:14:b7:9f:3b:00:11:d5:45:ac:
c5:fe:f9:a1:2f:c1:ad:96:a6:96:84:35:c6:3e:4e:
fd:6d:d6:19:05:74:bc:cc:1e:54:fb:03:fe:b6:2c:
83:2c:8f:a8:e5:c0:1d:9d:83:8e:8a:c1:83:d8:80:
7a:bf:8d:f9:79:04:14:68:1f:53:10:15:fe:1b:23:
c5:20:6d:0f:17:ff:ea:a8:19:aa:2e:34:42:8d:e6:
70:05:53:df:c3:e4:e8:33:4b:3d:a0:23:c6:c0:ab:
29:71:f3:f8:48:0e:61:c7:03:83:04:47:d7:7b:3f:
30:0b:bb:8c:4e:e0:d2:4c:4b:01:b6:a0:ad:94:ac:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:1A:76:E4:A6:68:0F:F6:A5:BD:50:A1:4A:72:3D:BA:B2:76:DA
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a2:5f:7e:49:74:9b:ac:59:f2:51:4a:8e:20:65:28:82:0d:
ea:df:69:a5:aa:6c:e4:45:72:93:63:ff:dc:63:d7:6d:7e:24:
26:4f:bc:1d:87:e4:c9:47:70:96:e9:a3:98:fd:62:72:b3:17:
2d:71:7b:1e:ff:61:81:2e:ea:47:f3:c1:6c:d8:b3:1e:5e:24:
05:fe:18:36:ef:35:41:eb:19:f0:70:cd:8e:cc:ea:fa:a7:0a:
13:a2:47:14:d4:83:3c:9e:d2:40:8c:88:7b:4d:4d:78:ef:a8:
93:8e:6e:6c:21:16:80:4c:9b:27:e8:44:10:57:cb:25:a3:fc:
5b:c7:69:3c:40:c7:30:fe:5b:56:e2:d3:e4:53:dd:0d:bd:03:
20:ef:d7:d8:f2:4a:24:b4:fd:77:e3:cb:f9:e5:2a:ba:ae:07:
52:1a:50:22:f9:43:e3:93:05:61:a0:a2:32:a7:36:0c:2f:e8:
4f:5e:e3:a8:11:a9:e1:3d:0c:ee:e3:7e:68:cb:a3:6c:88:09:
de:9b:bf:5f:d0:d7:4f:99:60:63:ad:37:a4:64:64:42:cd:f3:
0e:96:9f:cb:e6:d2:e6:37:a4:a1:e4:9f:52:c2:1a:93:b3:cd:
7b:2d:f8:2c:28:79:e3:32:42:e5:d6:6e:86:8c:a2:88:fc:90:
82:d7:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:53 2025 by rpki-client on console-fra.rpki-client.org