Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: wscH7obee7iw54LO4B0xCdnkAWonvT/3xRe1sDa1Cds=
Subject key identifier: C3:88:2D:F7:31:AA:C8:61:55:10:42:18:C7:36:A0:B9:16:86:5B:00
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0194BAF2849C2939B3FE67AD82A4DEC01081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: WSPOLygkdZb6vBn9L2LnIGoU2BCZ6FZptC/OgWNVfsc=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:84:9c:29:39:b3:fe:67:ad:82:a4:de:c0:10:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=c3882df731aac86155104218c736a0b916865b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:98:9a:c8:22:54:8e:2c:49:e8:a2:72:b2:
10:22:bb:4f:7f:67:b8:6b:8e:3c:e6:4d:a3:52:3c:
53:df:de:53:b0:50:d4:48:9a:b7:c8:bb:ed:6b:f6:
0d:29:ff:3f:2c:62:c3:e3:7c:76:8d:fa:b6:17:a5:
d2:3e:1a:00:27:a6:e0:1f:4d:ca:8f:25:71:bb:c0:
ac:e8:20:69:81:0d:46:16:b3:f0:c8:e6:8a:c6:7e:
4a:e2:e2:2f:6f:61:c3:29:37:60:b5:e7:30:2f:41:
e7:ad:3f:ce:74:01:46:23:08:ad:e6:a1:b6:82:f2:
40:c6:22:cf:f7:d0:f1:22:5e:ed:45:f8:9d:f4:7b:
79:96:e4:db:72:ef:43:65:a1:39:31:23:11:23:13:
9f:72:d2:98:65:2d:d4:91:d8:d2:0b:24:6c:15:f4:
9a:e9:90:e7:21:d0:16:64:7c:ab:12:c6:27:b7:4f:
eb:38:b1:fa:59:8b:da:78:c0:94:c3:bf:b0:1e:62:
0f:53:18:62:51:9a:a4:3c:ab:6e:ec:21:2e:ed:2f:
35:a8:1d:a3:25:8f:1d:32:77:46:66:b9:36:46:f2:
f3:8a:c5:be:33:53:a2:66:fd:57:4c:84:05:4f:6c:
7e:32:25:99:90:00:ec:f2:91:af:cf:49:cb:6a:d7:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:88:2D:F7:31:AA:C8:61:55:10:42:18:C7:36:A0:B9:16:86:5B:00
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3a:5b:a0:65:e4:c4:71:82:d3:0c:95:46:27:71:65:76:03:
00:77:45:44:50:29:d5:18:d3:c6:13:4c:c5:44:c0:28:06:44:
03:10:e9:cb:3f:97:3a:6a:6e:2c:b8:0f:3e:fb:e3:8c:c7:58:
fd:b6:58:0e:7c:45:86:a6:1a:bd:ca:4c:5b:45:5e:cf:5f:27:
da:02:08:fd:69:cb:22:98:9a:a0:7e:cb:78:73:e2:ce:8f:55:
19:36:e8:a5:e3:f2:45:18:05:30:70:49:3f:87:bb:37:9a:0b:
01:0b:ee:e6:ec:d6:01:95:1d:79:89:b9:12:44:ab:83:de:51:
28:03:d4:17:6f:ec:ca:31:37:c1:2c:46:9f:02:cd:e9:5c:c0:
ec:9f:ee:8a:fb:6e:64:0c:75:67:e2:82:c5:37:c1:ea:fa:d0:
f0:25:a0:a0:79:50:4d:76:db:57:87:94:b7:b9:f9:8a:4e:36:
b1:4a:cf:43:44:58:40:6d:f4:26:6a:9b:77:b9:da:a4:65:91:
18:23:0b:4e:9f:e7:bc:ed:07:c6:42:b6:1d:d5:7b:0d:7c:9e:
11:67:c6:40:d4:5f:05:c2:71:2f:e4:18:50:9f:11:57:fe:35:
15:59:6d:a2:6a:02:0b:ef:fb:9d:5c:13:e3:e8:c0:5a:ee:d7:
12:f6:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:55 2025 by rpki-client on console-fra.rpki-client.org