Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: fzeps+GxQKV2r4sDxIe/7jf5ab8m1PDaKkKFpZHn2Ws=
Subject key identifier: 98:A9:A4:44:F2:CD:6E:61:9E:19:26:1C:8C:57:6D:64:E2:66:BE:B8
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0194BB5FFF018546669280272F90A2BE913D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: sruxIt1papx650CAxuBFkN2O5FLPvA1+Pcc3D+ryLZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ff:01:85:46:66:92:80:27:2f:90:a2:be:91:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=98a9a444f2cd6e619e19261c8c576d64e266beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:d8:5c:01:f0:13:8a:43:b3:72:7b:22:0d:
68:06:85:4b:86:1c:e0:cb:b6:1a:4e:3d:23:08:a2:
60:95:f8:2f:48:28:b1:1a:18:bd:e6:86:09:11:4d:
6f:98:74:d8:f0:f7:57:63:41:9a:d4:73:db:98:86:
ea:0c:8d:7a:94:32:56:12:00:ef:e4:4c:73:51:76:
60:d2:91:fe:af:9f:e6:f9:a0:7b:ff:19:2f:6e:ae:
7e:d6:89:c8:e8:46:83:92:19:e6:7d:a5:2a:96:ff:
40:80:a7:12:d0:91:5d:4e:34:ca:62:1b:f8:b8:34:
5d:11:8d:0c:ab:68:65:3e:f3:a2:21:65:ff:58:a1:
27:d1:53:6f:87:bd:69:55:38:c0:85:b2:27:93:73:
63:41:3f:bb:83:65:e3:8c:89:7e:40:4e:a1:87:a8:
56:5e:2b:da:bd:86:e5:5f:1c:ec:5d:fd:06:53:36:
d1:1e:ac:d2:3d:7c:21:e4:b3:9e:e9:a9:42:a5:1b:
fd:55:34:e0:d6:6d:27:66:25:1b:3a:a3:e4:fc:27:
92:cc:52:4a:77:5f:75:1c:b6:1a:a5:f5:52:b3:6f:
c4:ed:ee:58:c3:b9:a3:79:ac:9b:34:9a:9f:bb:88:
a9:a7:37:81:9e:15:a6:79:60:5d:4b:3c:b9:2b:17:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:A4:44:F2:CD:6E:61:9E:19:26:1C:8C:57:6D:64:E2:66:BE:B8
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:12:1c:f6:0d:91:c5:a6:e2:ab:f0:90:e7:0c:a4:f5:90:
0e:d1:35:77:9e:c3:89:fc:38:84:d5:57:d0:c7:01:53:0f:ac:
1a:f7:66:d2:4c:a8:9f:0f:ff:74:95:b4:d8:dc:25:90:a7:0b:
8a:1b:0e:ad:3f:81:d9:14:1e:f7:a0:06:c9:5d:de:f9:91:66:
33:4b:d7:83:63:27:29:98:13:7e:f8:0a:2e:3e:fe:5c:cf:2c:
2b:f0:d8:99:21:69:8f:79:3f:a3:85:73:e1:57:17:f8:36:fb:
84:7b:4b:73:c8:b0:d1:44:b6:47:9c:30:4f:d9:8c:65:89:6c:
7a:f5:42:56:fd:53:5b:02:ad:a4:8d:b0:46:67:ff:64:fc:72:
e4:73:c6:43:5b:08:f9:33:51:7a:0f:91:96:f1:4c:57:30:2c:
28:85:20:e3:ae:1f:c7:eb:57:89:f2:62:c5:77:22:77:02:34:
90:1c:51:9d:69:39:12:f1:94:22:c2:52:11:1a:29:c9:a7:54:
8b:ed:25:0e:f2:74:a7:19:9a:ab:0f:1b:d0:d0:eb:56:c9:45:
22:e2:10:19:72:51:a4:34:7b:16:55:6d:98:98:93:2d:e1:bc:
af:bc:d6:a5:0e:22:36:86:6f:38:bd:91:7f:93:17:93:e9:48:
7d:c3:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:27 2025 by rpki-client on console-fra.rpki-client.org