Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: E6EgDjvhOODD32ghDX3izBUGfJMb0JnCn5NZUptH4vQ=
Subject key identifier: 3E:EC:47:03:14:3C:CE:57:9C:8D:E9:D7:98:B3:38:F7:9B:23:7F:5F
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0194BB2994687443130B406564BD053C94F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:51 +0000
Manifest this update: Fri 31 Jan 2025 07:00:51 +0000
Manifest next update: Sat 01 Feb 2025 07:00:51 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: nSfe0blOQ+duhLHeAQagdt1AgA6ZbFig22t7/OdMJzw=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:94:68:74:43:13:0b:40:65:64:bd:05:3c:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jan 31 07:00:51 2025 GMT
Not After : Feb 1 07:00:51 2025 GMT
Subject: CN=3eec4703143cce579c8de9d798b338f79b237f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:2f:85:ea:da:98:f6:dd:f8:12:bd:4d:17:
19:56:1d:c2:b6:2e:8d:fc:7f:12:5b:36:95:9b:ff:
fc:2a:dc:f8:da:15:3f:36:4c:0b:3c:07:c7:fc:9b:
7a:8e:9d:89:d3:8f:39:ed:8a:c3:5b:dd:39:d9:aa:
0f:fd:c7:28:87:e7:d1:c8:cc:e9:ad:cf:a9:20:3e:
87:c9:c2:91:6b:82:2a:a6:48:f4:ee:c5:b9:4f:4e:
a6:73:ab:1c:7d:6f:f3:18:2c:42:32:3e:97:f4:84:
12:3c:67:fb:bb:63:b3:ac:46:bb:d6:ad:ba:9d:ba:
3c:d0:7c:90:00:15:df:30:df:e2:af:2d:26:6e:15:
17:7d:e0:b3:c0:7a:77:f5:a7:f9:60:c6:83:64:68:
e2:41:2c:b1:68:38:92:7f:b3:a5:0b:0f:61:45:53:
6e:da:63:4d:2b:b1:1f:79:90:61:67:9e:91:ad:7c:
5f:84:33:81:d0:76:aa:6c:f2:80:11:29:20:d2:51:
85:66:3e:fe:f8:a7:6c:72:ab:18:95:6e:5a:8d:7c:
be:46:45:22:82:c1:35:d5:40:5f:52:dc:a5:e1:2b:
41:61:1d:7c:4d:80:6e:48:5a:aa:6c:83:82:25:34:
92:e1:78:f6:82:21:e9:6e:23:34:8b:45:27:9e:94:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:47:03:14:3C:CE:57:9C:8D:E9:D7:98:B3:38:F7:9B:23:7F:5F
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:6c:07:34:d1:7e:f4:77:84:c8:5a:d8:87:f7:83:42:3d:
13:63:c8:b2:7b:b3:0e:0b:6f:29:2a:95:ce:0e:fc:b2:bf:c5:
63:86:c6:2d:6e:5d:32:c1:2f:23:e4:ac:01:ab:78:8b:39:ee:
fd:10:31:69:53:6f:fc:a2:b5:66:25:aa:61:79:75:43:85:4c:
5c:87:ce:25:d9:5d:ee:84:17:ba:0c:90:09:b1:7b:5d:1a:0e:
b9:aa:09:fa:52:91:4e:8d:29:5f:e5:fd:3e:14:86:c5:9a:98:
18:f0:4b:7e:31:de:b6:f4:87:90:7d:24:6d:06:6d:32:71:d8:
15:a9:09:05:b3:5a:64:f7:f7:f4:32:32:eb:6b:2f:7c:a7:84:
fa:fe:39:12:65:e0:ac:42:a2:0e:fb:2c:f3:48:25:99:a5:14:
06:52:2e:b7:d1:a3:92:82:d7:d6:b2:e7:b7:09:f8:31:aa:4e:
96:12:94:3d:d2:1c:df:db:70:73:03:ae:36:73:d7:42:7b:8b:
03:0c:4e:b7:a4:c1:98:da:05:ef:fd:7e:5e:aa:ba:78:d4:76:
61:f8:28:28:5e:ba:3f:1a:d2:33:81:64:4d:7c:61:eb:3a:0c:
65:f3:f7:3c:ed:fc:27:35:6c:33:17:80:d3:13:9f:84:80:60:
09:f0:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:26 2025 by rpki-client on console-fra.rpki-client.org