Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: TmDP4uDE4fP8qsFmEspWfAsXsArzNXT02iDSPd95CM4=
Subject key identifier: 6F:46:49:15:8E:65:8B:2C:41:1E:39:1B:1B:BE:B1:B5:AF:6C:6D:FE
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 0194BB97110C75A2F39FF991847B252D747C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: 3OKHFMOl2FO98Nbfg2s9iarM3wOiylITgt9tEQ51XtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:11:0c:75:a2:f3:9f:f9:91:84:7b:25:2d:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=6f4649158e658b2c411e391b1bbeb1b5af6c6dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:26:25:92:2a:e9:f6:80:8e:2e:09:79:51:
25:d9:c9:38:7d:f4:f1:2e:53:e4:bc:b7:d9:b0:38:
56:d8:6b:f8:e9:7f:82:89:27:aa:a6:de:43:24:be:
2d:3d:67:cf:7a:95:36:99:95:94:a2:6b:a7:29:03:
a9:c5:fa:1e:01:d3:9f:d8:95:5d:1f:c8:61:21:1f:
c9:1b:2a:79:43:dc:2b:5f:e5:e2:d0:99:dc:5d:c5:
5d:87:39:2f:84:0d:25:30:ee:a5:41:97:21:bb:dc:
b2:eb:a5:4f:d1:18:00:66:a8:29:ef:2c:3d:38:b2:
84:bd:c5:eb:ea:ce:32:9b:77:83:5d:2e:b2:8e:a1:
4e:a2:d9:d8:22:5d:3f:b2:da:95:17:9b:55:3f:8e:
70:63:aa:36:ef:53:3b:f9:cf:3b:d5:25:c1:af:95:
c9:87:9c:fb:71:14:93:de:18:d2:07:3f:d7:ef:68:
b2:e1:40:fd:07:2f:fd:f1:01:aa:08:ca:bf:87:8d:
6c:e5:42:09:23:e5:d3:50:56:88:c6:be:6d:21:47:
46:cf:ba:0a:11:c1:ac:71:84:91:5a:28:e6:22:2b:
00:fe:75:43:7e:f1:11:4a:c6:29:67:cd:bf:5c:9e:
e5:7b:8d:4c:b6:e7:88:72:16:75:e4:ba:f9:c0:ee:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:49:15:8E:65:8B:2C:41:1E:39:1B:1B:BE:B1:B5:AF:6C:6D:FE
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:71:de:75:23:38:e5:11:7a:db:dc:cb:7d:ab:d7:e1:42:
e4:0d:fd:48:91:0a:6a:dc:ae:07:bc:55:f3:ca:3a:a2:8e:1e:
ba:26:18:c8:0a:d4:d4:69:05:a4:7a:00:ea:d5:b8:01:c4:19:
90:ec:f4:1a:47:54:68:0e:bf:8a:b5:fc:41:41:b6:42:c4:93:
20:b2:56:f5:7d:f4:6a:f9:d4:03:65:1b:3a:fc:92:d8:be:26:
5d:5f:14:62:33:29:7d:79:6b:0d:dc:6b:12:49:36:00:5e:dd:
aa:1c:51:c4:a4:8f:64:09:53:84:54:af:2a:48:a5:43:58:38:
79:a3:cc:10:e6:70:85:c7:05:e2:53:de:68:bb:3f:6f:ef:3c:
8e:3d:88:06:b7:a9:ae:4b:5b:15:a3:37:05:e1:67:97:05:34:
20:ea:38:e0:86:a2:21:9b:77:4d:11:1f:8d:d6:b0:1a:59:1e:
18:b2:6e:98:e9:bb:c4:1d:e2:1b:ac:c6:60:09:71:25:f6:18:
ab:a6:f9:c9:ea:d1:8a:92:05:73:48:62:ff:60:fc:8b:fd:ee:
dc:d7:00:f4:7f:59:94:2b:55:dd:92:f5:2d:d9:50:16:d7:43:
d1:04:fa:75:64:29:70:aa:0d:b6:88:c2:37:6c:12:95:1b:5a:
86:ae:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:47 2025 by rpki-client on console-fra.rpki-client.org