Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: rDjfrIk4sD5k5MR6SzARsopBqHIIfXS+RYcCSnlWuss=
Subject key identifier: CF:9A:9D:87:6F:F5:31:22:5F:0B:BB:11:F1:C1:A5:A3:1D:A2:0D:FB
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 0194BB96EAA63B8F4225F0CB6C8680C11DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:17 +0000
Manifest this update: Fri 31 Jan 2025 09:00:17 +0000
Manifest next update: Sat 01 Feb 2025 09:00:17 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: mJ6BFrRrvbiQ7Fdn8DpKPh4D0Y9KHTDuOnUeh/ZJ6CY=)
2: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
3: lE2TPINVoSL881LdoolBNaY_JUc.roa (hash: Qw7FA0BgnLj9ipm0a5MjNE3Et6SvLKBGGJMjS6H7uVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ea:a6:3b:8f:42:25:f0:cb:6c:86:80:c1:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jan 31 09:00:17 2025 GMT
Not After : Feb 1 09:00:17 2025 GMT
Subject: CN=cf9a9d876ff531225f0bbb11f1c1a5a31da20dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:c9:df:4f:96:ef:dc:cd:06:25:08:88:bd:
d3:8f:30:ef:c4:81:75:4f:ee:82:94:13:6d:a0:8d:
0b:e7:35:41:a4:e7:f4:39:9b:41:a4:fd:f0:5d:5c:
44:bb:51:b3:11:0a:fc:65:f9:0d:29:d8:7e:69:f6:
32:8f:aa:97:db:99:d0:8d:1a:63:16:8d:55:a8:de:
f2:d6:71:c1:0d:31:30:87:a3:b2:ab:f4:70:a7:33:
a3:dc:24:e7:33:b0:58:73:19:f1:78:fd:05:03:d2:
cb:31:71:af:e7:28:a0:ca:be:2b:42:2c:6f:91:7b:
1d:f7:69:69:c8:26:74:03:50:ee:60:6e:a8:7a:99:
1c:e8:8b:8a:d2:d8:77:9b:f8:f6:cc:b5:46:d1:7d:
29:e6:a0:62:2e:bc:a6:4a:32:00:7f:36:f7:f1:71:
a9:e2:ca:49:fd:15:a1:37:b5:b5:71:e9:ab:e9:a5:
82:98:0d:4a:f5:34:9c:69:9e:2d:57:03:57:28:16:
71:47:83:7f:c6:97:a2:2d:48:1f:71:f5:3e:94:5e:
d5:cd:65:b3:24:ab:00:11:ba:5b:58:67:45:b6:ea:
ec:6e:20:21:f5:cd:da:40:ab:d0:09:46:09:e8:96:
fc:05:22:40:b2:e8:fa:55:c2:53:f0:63:c7:6a:bb:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:9D:87:6F:F5:31:22:5F:0B:BB:11:F1:C1:A5:A3:1D:A2:0D:FB
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:d3:08:51:0a:fd:fb:5e:03:0c:a2:65:98:58:4b:42:33:
44:08:eb:8a:1b:f4:64:b9:57:eb:02:e3:c3:32:00:e4:9c:b1:
bd:dd:df:b3:4d:18:14:52:51:fc:e6:69:e8:db:e8:d9:e0:8e:
a4:7f:af:3a:bb:f9:3a:04:a7:5c:dc:51:78:f6:de:0a:18:d4:
b3:d9:75:0c:cc:97:73:5e:d9:34:12:c7:94:e9:9f:17:5e:33:
1f:13:55:37:05:e0:b0:4e:25:ee:8f:72:5a:35:e3:51:bb:50:
2f:53:08:2c:4c:51:f4:35:65:36:c6:e9:6e:b2:3a:d7:67:a4:
c5:25:6b:87:14:ec:8c:6d:7e:bb:c0:97:fd:e8:e5:dd:17:9d:
ce:c6:d9:b9:0f:64:4f:68:c8:0c:45:44:17:f1:c6:7f:66:3a:
1c:5e:58:03:bf:89:01:82:62:d9:8d:75:cf:68:55:15:60:58:
ba:ff:d4:fd:58:91:0e:ae:3a:b8:cd:ec:5f:8a:92:60:e8:bb:
e8:5a:11:bd:b9:87:b9:34:a6:09:37:76:53:da:43:aa:d8:82:
67:02:1b:a2:3b:d6:08:37:56:37:9d:33:bd:fe:e1:9c:d3:eb:
56:cd:35:87:99:2e:71:28:af:21:ff:14:90:22:72:3b:9f:f2:
c5:c8:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:23 2025 by rpki-client on console-fra.rpki-client.org