Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File: eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier: ZQh8kmrLUfppSlzXTtcUF9oaA3FdvsI3Kf3ep8Uk/KY=
Subject key identifier: 21:FD:19:50:8D:0C:41:F5:6C:8C:75:39:AA:B3:05:CC:CD:69:68:8C
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer: /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial: 0194BAF2824EAFA287DEAFBFC0B69194A018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number: 0287
Signing time: Fri 31 Jan 2025 06:00:42 +0000
Manifest this update: Fri 31 Jan 2025 06:00:42 +0000
Manifest next update: Sat 01 Feb 2025 06:00:42 +0000
Files and hashes: 1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: xZTCPmJagoBnG4PxZviJTzv7+EiXCefDPK6FqioXx50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:82:4e:af:a2:87:de:af:bf:c0:b6:91:94:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Validity
Not Before: Jan 31 06:00:42 2025 GMT
Not After : Feb 1 06:00:42 2025 GMT
Subject: CN=21fd19508d0c41f56c8c7539aab305cccd69688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:21:7a:dc:77:15:73:13:09:f8:53:9c:8a:
25:d3:09:45:d3:16:9a:5f:cd:f4:7a:0d:43:49:80:
65:85:ff:b3:e6:65:dd:53:f9:2a:3b:44:bf:ae:cd:
12:f2:d2:95:90:64:6d:68:62:58:7c:a1:55:ef:19:
31:02:fb:c1:fa:31:1b:d8:5a:be:4b:37:b9:13:f1:
db:27:f0:b6:b8:3d:2d:e6:ab:5e:87:b1:b9:53:d8:
07:8b:e4:3b:14:41:3b:e6:64:ad:ad:99:2e:65:0f:
09:93:ba:06:b4:6e:2d:d5:03:c0:66:fe:b5:21:cf:
38:ad:7f:26:c4:b8:0a:8d:34:1e:45:d8:96:0c:13:
3c:e9:a4:b8:81:25:e3:bd:70:3a:68:67:34:25:c4:
a4:a9:8e:99:b9:05:7b:14:32:45:01:8a:95:cc:41:
ab:f6:06:4d:c7:2f:72:ec:f1:26:f2:d8:a6:67:fe:
f2:e8:6b:c7:8d:1d:fb:06:df:58:7e:fe:b1:c5:de:
93:15:82:83:17:e2:f4:18:7c:23:15:95:02:b9:ca:
12:5b:06:bb:2d:5f:4a:c1:c0:41:10:8b:1a:2c:22:
8a:c7:cd:83:47:30:4a:6e:8f:31:11:d0:bf:ea:90:
5b:82:ce:c3:7d:69:97:3d:a9:f2:fe:15:99:13:8d:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:19:50:8D:0C:41:F5:6C:8C:75:39:AA:B3:05:CC:CD:69:68:8C
X509v3 Authority Key Identifier:
keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:d2:64:e0:e3:a1:d4:3a:96:64:5c:33:58:88:08:08:40:
1f:18:73:54:1b:12:ba:98:eb:eb:da:aa:9d:b0:f6:3b:f7:8a:
73:89:10:87:05:51:bb:62:2f:63:9d:6e:16:f6:80:7f:bb:e3:
b9:8c:86:15:c4:43:fe:72:ec:93:92:ef:7d:75:93:6d:71:1b:
5f:85:7a:04:9e:1f:a7:dd:53:27:b8:f5:f5:17:5c:25:75:16:
f2:f3:fc:d1:16:3e:1e:f9:03:be:75:f8:04:28:6a:c5:6d:26:
21:c6:d0:38:6e:29:bd:e1:b2:4e:3e:32:f3:40:42:4e:fb:f5:
9c:3e:10:e2:0f:fb:d7:9f:d8:59:14:62:56:f2:d2:9d:fb:1d:
f8:c8:78:a9:61:ef:b1:1c:43:f8:d5:b3:2a:25:68:cd:e2:55:
a9:0f:1c:6f:3d:32:48:43:1e:df:6a:ae:c5:ff:74:75:59:89:
1e:21:63:39:40:ee:aa:d1:41:06:e5:f4:b9:50:71:23:1b:bb:
ca:ae:49:5f:b9:0b:04:51:03:d0:e4:19:81:cf:bd:49:f8:16:
2e:d8:77:87:26:54:a8:10:af:99:0c:84:2a:8d:09:9b:87:2a:
84:a2:90:c5:1d:d1:4f:f4:84:c0:0e:4a:04:de:74:51:3b:cc:
fe:a5:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:45 2025 by rpki-client on console-fra.rpki-client.org