Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
File: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft (raw, json)
Hash identifier: SAIEH9KXIXxNXnkc3Of/nDPhzrNaGrgaMLg5kuZ6ZW4=
Subject key identifier: A8:FA:1B:56:FD:D6:F1:5C:08:D7:DA:8C:AB:E1:97:B0:4D:01:6F:B2
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 0194BC3C7C3C9AA64D6AE874DFA3168651D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
Manifest number: 0EC8
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa (hash: FXd1EkC/KOtADwk2h9q6zCHuOQnU/RYSKRv48syIK80=)
2: 9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa (hash: UY1UPsGvghj6PCWZfYzuCTpSPNsdGtDSEoWLKHoTyLY=)
3: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl (hash: 7BWJNwf9lpXg9P6O2ai5yX/10qVo1DXDeAn5kULc6N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:3c:9a:a6:4d:6a:e8:74:df:a3:16:86:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=a8fa1b56fdd6f15c08d7da8cabe197b04d016fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:79:5c:6b:57:cd:9b:b8:ee:f6:18:09:a1:
90:3f:30:c7:fd:85:b3:85:2c:59:b8:ed:cf:ee:62:
28:e2:c8:53:64:be:55:c0:bc:a5:f6:e9:4e:3d:74:
78:9e:b6:f0:42:bc:5c:37:41:f8:68:91:b5:7d:9e:
4a:d5:f8:e1:01:a1:af:e4:62:13:7b:83:38:57:a0:
2f:c9:81:00:de:63:d6:a0:7a:f3:21:22:81:49:7b:
e7:5d:ab:d5:f5:16:39:49:17:e9:3d:15:69:83:05:
0e:19:78:3c:5d:1a:8b:f6:14:cb:b0:19:e3:ba:62:
cb:44:a2:8c:79:1c:6b:4b:b9:7e:18:9a:b7:85:3d:
52:04:a0:7f:c4:f4:a0:25:ab:b8:db:d9:ac:05:85:
36:77:bb:ba:0a:79:a3:a6:ff:c3:72:1f:d8:76:de:
19:f5:fd:84:c4:9e:e6:e5:b6:0d:84:29:0a:9a:dd:
c4:2e:5c:76:03:b9:14:8e:21:97:6d:55:d0:0d:5b:
9e:06:40:de:59:b0:d1:09:f5:e2:99:3f:8e:cd:6d:
c3:f5:2b:44:04:49:4a:8b:4a:40:ec:1f:4e:fc:45:
3f:1d:28:db:61:af:bc:ed:7b:2c:93:38:46:10:b1:
93:ef:d9:40:3c:ba:a2:72:4c:9c:fd:00:c0:46:e7:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:1B:56:FD:D6:F1:5C:08:D7:DA:8C:AB:E1:97:B0:4D:01:6F:B2
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:5f:eb:1c:3f:25:58:99:bb:ac:1d:cc:b0:68:db:04:b0:
31:d3:d8:9c:f9:1b:ca:f7:ea:dc:01:65:29:02:9c:02:84:5e:
4a:4c:13:36:0e:d4:0b:46:95:ae:3f:6c:47:ac:0f:7c:63:b7:
f8:cb:eb:8e:24:f9:89:8f:a1:3e:77:63:a2:5e:47:85:e9:7d:
7f:7d:5b:3e:e2:46:c8:b4:fb:8a:ce:62:b6:45:f9:ba:28:10:
53:3f:12:2e:cd:c3:58:66:99:36:29:30:8a:21:36:99:19:ce:
6f:c4:38:93:db:e7:63:3e:ce:58:24:b3:7c:6b:d7:8a:75:92:
7c:7c:ea:2e:e7:38:f7:cb:68:d3:f6:39:b1:50:64:4b:f9:31:
bb:e8:eb:4f:92:00:2e:50:ba:d6:62:67:ab:c2:87:37:34:5c:
09:62:dc:05:4d:55:e9:98:e4:95:28:60:55:5e:8f:3a:55:16:
df:a6:9d:8b:57:af:04:5f:37:5b:a7:9d:60:95:91:4b:27:56:
f6:f3:ef:b8:4e:44:e6:e9:d7:ed:07:01:f2:f2:0a:15:4f:48:
11:4a:96:82:ce:ca:d1:f8:2a:32:ed:d8:3f:c0:e9:47:34:5d:
d1:c9:b8:79:e5:b5:5a:58:77:dc:d6:a1:01:5e:e8:71:f2:70:
a7:aa:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:16 2025 by rpki-client on console-fra.rpki-client.org