Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: HejHn6QT3a59hX95sF6I9Bdm8SJCk9ghHUQyXETlBsA=
Subject key identifier: 30:22:E0:6F:BB:7A:ED:DD:DA:D7:48:C0:B5:CB:07:7A:E3:8E:16:D5
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0194BB296FCE7A358EBC6FD2296DBF5EB191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 07:00:42 +0000
Manifest this update: Fri 31 Jan 2025 07:00:42 +0000
Manifest next update: Sat 01 Feb 2025 07:00:42 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: ZCwynreA7WIgKSCGpmhBY+8bOGXWuzTk7qzcSTdUXIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6f:ce:7a:35:8e:bc:6f:d2:29:6d:bf:5e:b1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jan 31 07:00:42 2025 GMT
Not After : Feb 1 07:00:42 2025 GMT
Subject: CN=3022e06fbb7aeddddad748c0b5cb077ae38e16d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:88:be:13:aa:5b:b8:45:ba:6b:d4:f3:75:
38:8f:9f:59:f6:59:86:cc:92:f9:7e:6a:7a:ce:55:
50:66:68:6b:a8:19:77:ba:9f:c4:8e:3d:95:57:59:
ea:fc:a4:98:68:98:fd:1d:9e:7d:84:e7:dd:b2:83:
36:36:15:39:6a:9b:6f:d2:49:8c:08:5f:9f:c6:4f:
7c:e1:ef:6c:72:56:c4:c4:62:8c:b7:08:0d:35:25:
23:ca:fb:d4:f2:bc:af:28:a3:e3:d7:fa:da:cb:b1:
58:e1:52:69:dc:4a:5c:c6:3d:cd:d7:22:8b:7d:78:
6c:f8:1f:c6:bd:24:9b:84:13:83:6f:4e:f8:be:a9:
5c:73:88:82:5c:fa:5b:44:2a:09:57:4a:73:d5:8d:
84:44:60:0f:74:bd:18:46:3d:15:da:84:99:7b:e6:
67:d9:a5:9a:bf:ba:e6:c3:da:48:d3:ae:b8:e9:95:
f6:d3:cd:09:67:a8:03:03:a6:62:b5:9a:13:64:3e:
f5:9c:b0:75:2c:f0:a5:2f:8f:c2:56:55:9c:bd:50:
ef:6c:84:18:53:d0:81:f0:c7:2a:09:e5:d7:81:32:
ce:d4:c0:3a:8f:60:1c:8e:c8:8d:ce:e2:d5:8f:4f:
8c:aa:6c:0b:0e:47:46:9b:00:f0:bb:dc:36:39:c6:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:E0:6F:BB:7A:ED:DD:DA:D7:48:C0:B5:CB:07:7A:E3:8E:16:D5
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:eb:eb:a3:bd:0a:12:ca:ec:da:fb:8b:57:68:e4:b6:44:
d8:54:ed:ba:84:5e:48:dc:08:d9:5d:24:d1:2e:4a:e5:4d:46:
74:40:95:9a:44:ed:9a:2c:83:7f:e9:4a:ed:c2:4a:f4:11:1e:
9b:26:f2:13:e5:12:49:7d:92:66:06:e8:c7:cc:81:fc:03:36:
a0:66:ca:76:3f:d6:3e:81:ab:73:08:b9:ab:3f:b8:9f:20:6a:
cd:d5:e3:3e:e5:1b:3e:53:94:88:d6:7c:0c:3c:0e:50:ce:da:
87:72:cc:07:53:e8:e8:b0:9a:cf:ec:64:9f:0a:e5:3c:1a:b5:
fa:32:c1:b4:db:a4:c4:e7:6b:a9:d2:e6:63:30:b0:24:1f:39:
20:00:20:86:18:13:5e:61:d0:3e:e3:16:f5:bc:b8:cc:3b:e6:
e6:e7:5b:f3:36:1c:76:da:ce:e6:91:4b:fa:8e:04:0d:f8:32:
45:e7:d0:18:1a:59:3f:df:8d:6b:38:d9:58:dd:3b:f0:cb:dd:
cb:fa:0d:f2:e5:5e:8c:d2:38:af:a2:b4:44:05:d6:0c:52:03:
c0:c2:b8:7d:6b:2b:4b:32:10:2e:0d:48:cc:52:cd:31:4e:a3:
c6:89:d6:a9:01:4e:93:e3:4f:05:77:85:7c:28:6e:c8:63:d7:
eb:12:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:57 2025 by rpki-client on console-fra.rpki-client.org