Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: yCB8lHu6FySRlM57IG/BNt5zXxxzfZDWMkAI9SvbFZE=
Subject key identifier: 92:7D:40:B5:97:99:1D:A6:93:B7:09:F8:A0:5E:86:9D:69:86:4E:C1
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 0194BB975225C39349C0C145294CF597C669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: 90ddPC+UtMiWbjWE3amzsVjrp9tZ12c9FXBg78aDZfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:52:25:c3:93:49:c0:c1:45:29:4c:f5:97:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=927d40b597991da693b709f8a05e869d69864ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:8d:35:d5:5c:93:68:98:80:40:1d:22:bb:
33:5d:e8:a5:06:70:d3:ae:be:d2:fb:d9:7b:e5:26:
bf:f3:fa:bd:93:48:8e:7e:0c:a0:ec:f0:44:83:77:
66:a1:c3:06:d4:fb:94:73:63:92:a0:0c:91:86:5f:
31:64:2a:0a:d5:63:03:95:ed:0b:1a:7e:f9:4f:7f:
d7:56:89:ee:8f:d6:85:cc:32:3f:ef:ad:12:39:0f:
1f:08:9f:bb:75:00:65:24:95:1f:4d:0e:f6:5f:b7:
f3:51:90:96:cc:37:0d:c4:84:b0:5f:39:dc:82:02:
14:e3:bc:e6:8b:1c:ca:d4:9d:5a:23:af:b4:60:dc:
1b:fd:7d:0e:84:c5:41:e5:fc:2c:c9:db:bc:96:c1:
cb:1e:89:55:4f:71:15:17:c1:0c:a4:fb:98:3f:60:
ef:df:fb:c7:bf:a8:14:63:a8:32:0d:98:c6:31:d9:
56:88:50:e7:2d:f0:91:a5:39:3c:1a:03:5b:39:9a:
b5:18:07:87:7b:14:8e:3e:c6:00:0b:78:87:89:58:
33:ca:9b:fa:97:54:d4:6f:d5:37:a0:ad:90:f4:22:
74:4a:51:cd:51:5c:3f:99:3f:f7:4c:31:dd:18:20:
4d:68:bc:f2:c7:25:ca:99:cc:bb:8a:fa:db:74:cf:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:40:B5:97:99:1D:A6:93:B7:09:F8:A0:5E:86:9D:69:86:4E:C1
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d0:37:41:3a:86:a4:a6:05:32:54:41:52:47:4f:7b:6a:b2:
c8:45:29:bb:72:ad:25:af:74:5d:c9:00:3e:b8:62:16:49:9d:
ac:dd:6d:e9:b0:69:26:7e:43:85:98:c2:19:00:8d:c4:df:55:
7d:e6:99:d5:8d:50:16:f6:e9:ad:c5:63:5e:ea:58:d6:7f:69:
74:57:43:62:2a:b3:51:24:34:d2:b2:23:43:88:97:56:e1:47:
4e:f8:b8:5c:df:34:67:24:41:40:bb:f8:c9:52:2c:23:c2:64:
51:cb:b6:22:67:92:ad:3b:26:b2:32:5a:22:14:2b:cb:49:68:
b1:ca:76:44:72:12:56:40:c2:b3:43:3a:a9:1e:d4:51:28:6b:
94:a2:e1:52:32:45:dc:fb:75:b3:76:0d:f7:c5:92:af:8d:46:
17:fb:b6:4e:bc:73:01:16:ae:7f:30:bf:41:65:66:9f:af:b9:
16:8f:da:18:22:e7:a1:1a:80:8c:e7:8d:2f:d5:6b:47:1e:9e:
45:c3:4a:5f:c4:76:dc:3b:d7:05:b9:0f:a3:bb:27:b1:10:c8:
ce:86:95:a9:96:1c:07:5a:d7:0c:e6:fa:ae:4b:a4:58:14:5e:
6c:50:b9:09:a7:1f:e4:21:ae:4d:9b:c4:47:6c:24:fa:e5:e7:
91:ce:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:58 2025 by rpki-client on console-fra.rpki-client.org