Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier: lWRFL9HZ2hDum367iyCGzgbb5OHSRVagM2K7Dvks5ho=
Subject key identifier: 6E:C6:FF:40:C6:49:5D:59:F9:9D:53:76:CD:DB:31:C5:52:0C:73:EB
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 0194BA847699E6CE12ACC1D3841D93F33CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number: 0F38
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: TG+xHd+uCKHM/SQOGER4GW/l0K9/kKKvdYvBEoWKHo0=)
2: BOp9ixHh7cmgGmuAq1ikRR7K-2I.roa (hash: LAq5SftJAYWesXelx7o20aUC5vis0pqqbpMqVBvIQEc=)
3: GzhIxob9bA8Czihl63s_AVDH8xs.roa (hash: WxcqeaBj1wEhDd9uj+K5AOhKzURT0h/j4LhtZQ31WLU=)
4: PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa (hash: usR3Xps8iALKamgQOqDuPMkcsTbDs9FVlCIAfdu28Yg=)
5: RA-miC4KaEWvGjUqoItCz1hzspU.roa (hash: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=)
6: aAjiTGjBvK-qa1UvGqne8OL4KrA.roa (hash: BjZaYz009qatAltLmOSug4n6bf9uQdN4teDrrkkHNbw=)
7: fe1oOTHUFPkwFLaBhSJgtXk18K0.roa (hash: fkkgIxypjSY0trqrdH7vDswC8HMHlpDfymztaFU8S48=)
8: xSBLAUIBkAaXVfG28KwmA-ZeLjA.roa (hash: +GtT6G/GYlmVcKLK3ncI4uHy4NjU73KHg0yKe98N+yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:76:99:e6:ce:12:ac:c1:d3:84:1d:93:f3:3c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=6ec6ff40c6495d59f99d5376cddb31c5520c73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:23:6e:49:0e:5b:03:a2:b8:75:21:20:6a:
ae:69:fa:6e:69:7e:bb:d9:0f:30:5c:d3:85:96:ce:
d6:83:91:8a:d7:5d:55:5c:78:76:df:ac:9d:fe:59:
68:55:ae:51:59:ca:02:d5:a3:05:78:2e:4b:21:42:
30:87:e2:cd:8a:ec:ef:b6:05:42:15:19:f0:1d:b1:
11:22:47:80:d0:ff:29:75:87:11:f2:fa:01:89:0a:
b6:19:c4:47:ca:46:68:55:f8:f9:0e:6b:a7:a2:0c:
79:81:bf:e4:ce:8e:93:72:cb:a2:0b:f8:bf:85:9b:
0d:31:18:15:3b:73:93:d4:da:7b:e1:37:19:cd:fb:
11:92:de:d6:68:74:78:5a:f5:46:0a:05:75:8a:52:
55:94:43:28:b3:87:76:5f:de:45:3f:48:e0:12:bd:
b7:a3:0e:1e:36:29:47:6e:fc:ee:f6:92:67:64:e3:
1d:7a:b3:18:19:85:eb:7f:4e:46:36:6a:65:48:34:
f1:3e:59:8c:b5:0d:87:1d:90:d2:b1:c4:38:82:a5:
88:05:de:5f:43:cf:95:f4:ff:8c:8f:de:e1:72:c6:
0f:b9:54:da:aa:63:32:7e:c4:ee:24:2f:7b:5e:8a:
db:6b:0a:0a:81:5c:70:95:43:ce:cb:31:e4:a5:9b:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:FF:40:C6:49:5D:59:F9:9D:53:76:CD:DB:31:C5:52:0C:73:EB
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:7b:6d:5c:35:93:12:56:d3:f6:eb:15:30:b8:3d:b9:97:
56:b0:09:0b:7c:0c:54:a5:2f:f0:14:7e:6d:b2:b3:7a:ca:92:
4c:96:a7:6b:bd:13:58:b9:e3:f4:dd:d2:00:cb:97:47:5f:b9:
85:50:17:13:f6:67:4c:d1:0b:82:12:38:58:84:8d:a0:03:de:
70:04:93:8c:d2:43:b0:a1:7b:16:5c:27:f9:fc:4a:b7:77:0a:
98:79:4c:b5:5f:02:14:b2:e6:1e:5d:7b:a4:91:3a:06:55:b8:
76:8f:62:57:85:94:d5:95:dc:f8:e9:64:c7:e7:53:ab:1e:07:
19:be:17:85:42:5a:0d:a7:1c:3a:9b:ca:6f:5b:67:b4:ca:58:
c4:54:08:71:22:3d:28:5a:6b:40:51:08:da:1d:dd:47:80:04:
41:d3:0a:3d:e1:3c:fb:69:e6:24:c6:4b:ac:9a:fc:ec:d3:3e:
ad:98:24:1c:44:f5:76:81:d3:fa:4c:99:6d:e6:16:9f:18:bf:
9d:e2:19:94:77:7b:6f:35:a6:b4:77:36:b2:9c:11:4d:39:f9:
a6:c0:78:ec:d7:55:b4:7b:43:16:d5:96:cb:71:76:e3:f5:00:
5d:b7:64:8b:4c:9c:64:b0:19:12:95:8c:44:a8:90:ea:ca:d6:
bf:f3:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:25 2025 by rpki-client on console-fra.rpki-client.org