Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: wwO6FPkUpxIT/wTKo6qM9iEAH+Aegpqrp71AJei3DK8=
Subject key identifier: EA:2E:65:B0:0B:B1:A1:FF:3E:67:73:EB:19:2F:35:BD:EE:CC:9C:B6
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 0194BABBCF7B80E8562FCF2BF2C606A3144B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 079A
Signing time: Fri 31 Jan 2025 05:00:57 +0000
Manifest this update: Fri 31 Jan 2025 05:00:57 +0000
Manifest next update: Sat 01 Feb 2025 05:00:57 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: naLmGjYdhSV9Jx1Tz+3gMrLXGV7v39ZHdjRyMfcONIs=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:cf:7b:80:e8:56:2f:cf:2b:f2:c6:06:a3:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Jan 31 05:00:57 2025 GMT
Not After : Feb 1 05:00:57 2025 GMT
Subject: CN=ea2e65b00bb1a1ff3e6773eb192f35bdeecc9cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:7f:c1:eb:44:21:8c:28:80:a1:be:46:ec:
68:1a:d5:64:5a:c7:15:0e:48:ba:cc:5a:84:87:80:
73:1f:c0:d6:4d:95:90:85:a4:ae:4e:0d:ab:e0:57:
cf:d0:b9:1a:ed:b7:ab:f4:d2:c5:ba:74:0e:f2:84:
d2:5f:06:3f:66:7c:0a:5a:fb:eb:b1:ef:a0:24:fd:
a6:29:ce:a7:14:83:7f:63:f2:03:c9:2e:1b:b1:9a:
16:30:c4:4a:1e:7c:a9:e5:ae:bf:33:fe:c8:5c:e1:
ce:f3:bd:ed:0e:cb:13:5c:e1:a5:4d:0f:da:f9:c2:
8f:b9:ad:cd:96:d3:fb:a7:6b:12:54:90:bc:54:87:
36:c1:f0:f1:f0:d2:dd:ba:fb:92:fc:4f:66:04:ec:
83:80:81:f7:77:e0:08:71:c2:64:6b:f0:d6:58:68:
bb:e5:73:9a:2a:d9:76:09:4a:cf:a5:1e:20:37:17:
05:e7:83:78:a8:a3:9f:27:1f:1c:ed:4f:d5:18:f2:
8d:f2:ab:a9:f7:99:1b:f4:8a:50:2d:3c:75:60:b5:
c9:05:1a:47:02:7b:5f:74:3a:d6:1c:be:4c:bd:9c:
f4:8b:2c:9f:98:6c:37:01:1d:92:c3:22:07:87:04:
cb:36:ff:04:4d:c8:34:f0:3a:d1:45:1c:8f:40:09:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2E:65:B0:0B:B1:A1:FF:3E:67:73:EB:19:2F:35:BD:EE:CC:9C:B6
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:73:23:9a:55:cd:e6:ce:f5:24:82:6a:c4:67:15:ea:dd:11:
61:64:76:b4:e7:3b:72:66:33:60:88:51:1f:83:10:dd:88:7b:
4a:f5:20:6a:af:e3:0a:d7:f3:c2:e4:ca:74:2c:2b:00:a9:e0:
b6:8e:66:7d:3c:23:4e:18:1b:e9:66:ed:e8:5d:34:7e:23:38:
de:28:ca:52:58:a7:fd:7e:36:42:40:a9:8d:07:99:d8:7c:b2:
9e:60:b1:97:20:61:69:5e:5d:3c:d4:0f:ee:3a:f7:03:59:d6:
2b:eb:30:bd:61:f8:1c:1a:a4:34:7d:a7:81:38:88:c6:cd:b1:
0a:7a:73:25:b8:b5:53:ec:f1:ed:5f:59:4d:b1:21:2f:e0:50:
31:0d:62:16:9f:a6:7c:fe:77:69:57:d6:43:b3:0f:95:89:77:
dc:5d:38:59:5c:0f:fd:50:b1:b9:9d:83:c0:62:f9:3e:99:96:
9d:d4:9a:75:e8:63:60:ec:7f:8d:85:6e:04:7c:8a:fe:61:b3:
86:ca:e1:4f:91:9d:ca:be:30:9c:f6:5f:de:95:ab:66:81:09:
bb:c7:cd:38:36:36:aa:05:17:84:e1:96:25:dd:ad:09:0f:b6:
c1:81:43:22:74:4f:42:3a:13:5b:3d:5e:db:92:38:b6:ae:b3:
3e:b1:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:12 2025 by rpki-client on console-fra.rpki-client.org