Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File: MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier: JJJhNh+0mYEbhRGDFVquhgXv8OXnKtDMQwC1w/IYV1U=
Subject key identifier: 85:52:A6:C9:A0:C5:EA:4B:A8:33:0A:B9:31:67:63:68:F6:FD:76:7E
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial: 0194BAF283ADEF882316132B5166F8019443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: 3SB8g0Jb96zMmjg47ELxSz9GuJUzC8Ax/i4tVdR1dwY=)
2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:83:ad:ef:88:23:16:13:2b:51:66:f8:01:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=8552a6c9a0c5ea4ba8330ab931676368f6fd767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:20:1b:1d:82:bb:2f:47:8c:13:5c:5a:5c:
aa:6c:dd:c9:51:22:fe:29:c3:c5:a0:79:2e:d3:e1:
ed:4b:cd:b0:dc:a6:5a:cb:87:9c:1f:1d:93:52:37:
54:fe:1e:0b:23:d7:62:c2:7f:91:54:b1:e1:cb:5f:
d8:94:79:2d:fb:a7:c2:05:8c:8a:6d:1c:91:02:06:
7d:79:13:a9:fe:8f:57:1a:19:d0:36:64:ba:79:9a:
6d:bf:44:3b:27:b7:d5:ed:2c:26:28:83:39:73:02:
1e:9d:cc:81:90:6b:57:d0:10:9f:41:c4:d4:8d:5a:
b1:ae:78:cd:71:b3:52:24:78:d3:a4:fb:2a:93:6f:
c1:92:7c:ab:39:91:55:96:8c:47:9d:8a:eb:73:7f:
14:b6:92:1d:e3:b8:06:26:17:0c:f4:ef:98:41:f1:
ec:6b:02:94:f4:57:e9:1c:dd:2e:65:04:97:fc:e4:
2c:44:63:b0:80:ce:1d:f2:d1:aa:f2:36:0a:ee:33:
73:3f:eb:de:fc:e3:90:36:fc:eb:47:ff:70:d9:8b:
83:69:32:61:2c:10:15:3b:f2:23:ef:43:a0:4c:dc:
29:e8:7f:89:10:18:39:8d:0a:57:3b:6d:c7:04:1c:
86:3b:f8:5f:f7:7b:2b:22:bc:49:24:b8:0c:98:ba:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:A6:C9:A0:C5:EA:4B:A8:33:0A:B9:31:67:63:68:F6:FD:76:7E
X509v3 Authority Key Identifier:
keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:b6:d2:1b:80:70:7b:21:6c:ce:3a:c4:7b:a1:a4:5f:4e:
55:52:20:db:2d:b9:73:75:6d:ad:51:8b:37:ec:2b:c9:c1:10:
32:4e:2a:f6:f5:c2:a3:59:54:ed:ee:1e:ac:4c:26:08:bc:b7:
9d:be:70:6d:4d:e6:7b:f6:2f:04:43:02:6b:74:4c:2e:6e:1e:
22:a6:3d:16:8e:5d:1c:7c:99:41:8a:f2:fe:0f:c3:0c:8f:7e:
f4:2c:ba:8d:c0:8c:7d:dc:d1:19:74:ed:8a:50:1a:30:ca:f8:
dd:8d:23:0c:76:40:c0:70:a3:cb:87:39:73:ae:8a:c0:93:99:
c3:8a:80:8c:73:44:58:4e:21:1a:b4:bd:11:93:d1:4b:22:83:
48:aa:53:3d:87:60:a0:9b:ec:f8:7b:ff:45:eb:11:a8:52:51:
2a:f8:73:4a:82:ba:6b:3d:00:2a:89:a0:1f:a0:c4:e9:59:b6:
e8:48:b3:1c:52:12:36:53:c2:df:fb:7a:17:64:b4:82:b0:13:
30:18:26:fd:6b:a7:e2:a4:45:09:3b:89:64:bf:44:b8:12:b7:
bc:ce:1e:6f:27:34:32:88:4e:ee:50:36:74:23:bb:09:3e:ff:
58:cf:a9:6c:c9:d8:d4:6e:2a:9b:a2:dc:92:79:eb:99:b9:f3:
89:04:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:22 2025 by rpki-client on console-fra.rpki-client.org