Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: pQZry6Y2xcgmli1JbcftMecfHg6MCBhhHxAMpq5xwZE=
Subject key identifier: 6D:99:B4:D8:A2:21:1F:D9:44:83:F9:74:FE:4D:A1:52:E8:B6:CB:61
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0194BAF20AD66BF6327656C05880CB145AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:12 +0000
Manifest this update: Fri 31 Jan 2025 06:00:12 +0000
Manifest next update: Sat 01 Feb 2025 06:00:12 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: FfLte4JU8Xq6G91rTkp+JUCg+4768x17AmWXr3e7Mkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:0a:d6:6b:f6:32:76:56:c0:58:80:cb:14:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jan 31 06:00:12 2025 GMT
Not After : Feb 1 06:00:12 2025 GMT
Subject: CN=6d99b4d8a2211fd94483f974fe4da152e8b6cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:f8:17:42:8b:4b:91:c6:5a:3f:1d:09:fb:
d0:98:f1:45:d3:d5:1a:70:c7:1c:3a:3e:4e:4d:01:
70:d2:f4:26:a2:cd:38:63:6c:8e:73:d6:47:02:dd:
45:9e:27:87:97:b9:c7:c2:59:6a:c9:90:2d:51:a1:
45:e4:bb:4f:94:ee:39:fe:99:ce:de:f5:2c:53:bc:
0d:a8:fb:74:8f:69:1e:04:90:60:5a:f3:a8:5b:c7:
2d:6a:0e:f8:a0:cc:10:48:2a:32:a9:cf:5b:05:95:
ca:60:a6:ee:c0:37:9b:3e:02:68:60:e0:4b:39:fb:
7e:14:43:9e:6b:16:29:09:61:7c:20:b2:70:88:2b:
5d:64:cd:d3:01:e6:a8:36:1c:12:ee:f1:5f:ca:96:
3b:59:16:ad:a9:a0:8b:83:f8:af:03:71:ad:7f:5b:
6e:cf:33:bf:60:d4:b9:4a:e1:8f:d5:29:d6:0d:c8:
9b:58:6d:06:fa:9c:f8:b0:45:22:ac:a1:e9:8e:e4:
d3:9e:43:df:df:23:72:b2:8b:09:86:aa:37:d8:c7:
f8:9f:7c:17:4f:b6:dc:99:d2:14:ad:d3:83:99:2e:
fa:fd:8f:97:22:f0:51:c0:b5:9f:5d:48:3a:f5:6b:
78:b4:b1:ca:c7:2b:5c:d2:3f:6b:7f:45:5b:07:40:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:B4:D8:A2:21:1F:D9:44:83:F9:74:FE:4D:A1:52:E8:B6:CB:61
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:36:23:9a:88:e0:65:1b:90:54:82:fe:1c:5f:db:2a:25:22:
ba:6d:54:ca:34:31:d9:d8:1c:76:f6:63:1b:fa:2f:95:33:da:
f8:fd:93:6f:73:d7:04:60:e8:42:02:ae:92:e9:e4:d8:b4:41:
2a:38:bf:06:21:e3:42:8b:00:f7:5a:fd:68:1f:dd:70:9e:c5:
1e:cd:6c:1f:24:d2:aa:bc:4c:27:f2:00:91:11:89:5f:0d:84:
6b:fc:85:09:da:33:38:15:0d:c5:99:e4:32:f0:0d:27:b4:6e:
88:ab:ff:6b:64:22:22:b1:6d:4d:40:d1:53:3d:c5:fe:ec:46:
bf:50:7e:fe:5e:12:6a:2d:9f:23:49:a4:6f:43:c0:c8:c7:a9:
67:10:bd:be:e3:7f:cf:aa:cc:8b:19:89:34:06:3a:60:3c:c5:
ca:e8:be:ec:40:f3:cf:bf:7e:c9:76:03:b6:2b:15:e5:d6:75:
c9:be:4c:61:e0:7b:e2:54:c8:9c:b4:39:05:17:dc:28:67:3f:
d9:4d:8b:41:1e:b8:20:ad:70:9a:c1:d8:7f:7c:d4:6e:c1:02:
7c:9b:29:16:3f:ab:e2:55:2f:64:ec:d7:47:a7:13:91:0f:45:
c9:bd:3a:87:2e:6c:6f:4f:e4:66:92:95:53:92:25:61:1a:95:
94:fb:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:14 2025 by rpki-client on console-fra.rpki-client.org