Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: +/uwV8DLev4Qqi1yicFGXe3kB4rXo1MQ1ipvPgqPCBQ=
Subject key identifier: E7:2F:1C:E3:6E:70:24:40:5C:E8:C3:46:72:DA:E1:28:64:69:CE:FA
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 0194BB96D36DAA20F323AA4D36919377E953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0A96
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: 2h17LYuDgIV95LPxWbBb1i7i2ozRjXJwTs4eizpYhWI=)
2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d3:6d:aa:20:f3:23:aa:4d:36:91:93:77:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=e72f1ce36e7024405ce8c34672dae1286469cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:91:d0:fc:0a:d0:45:00:5f:50:01:df:49:
73:c5:bb:5c:03:b9:bd:27:20:04:c1:78:0a:aa:4e:
12:12:d3:3c:40:3d:ee:37:f9:e2:22:75:d1:b7:04:
2d:cb:bf:ca:85:f3:9d:fd:6b:91:02:5f:da:4f:cc:
58:14:e5:34:f7:8a:a4:6e:25:3b:81:f6:7a:3d:da:
3d:7f:65:e9:31:e9:85:60:72:51:0f:02:ee:85:d8:
db:47:a6:34:13:cd:6b:9d:36:7c:73:3f:dd:86:ce:
3b:6a:0a:7b:16:30:0e:10:6f:a4:b4:b3:44:99:4a:
83:d6:32:5d:a8:ea:53:0d:3c:f4:ca:02:7c:44:c9:
d7:6d:fd:a9:6d:5b:82:bd:f5:0a:50:50:9e:af:0c:
66:05:7c:8b:b8:b5:5b:92:18:31:9f:e1:11:49:20:
58:81:a1:15:21:31:5f:06:05:a1:49:71:24:e0:8a:
54:57:d7:07:55:4b:60:96:e4:7b:d2:a9:8e:4a:9b:
8f:5a:6f:7a:47:13:a3:84:c3:eb:77:80:ed:32:ac:
92:cd:12:14:91:8d:cf:e5:55:cc:d3:81:a9:bc:f3:
b6:c3:40:00:a5:fe:a9:e9:cf:85:3e:d6:99:58:5b:
09:62:c2:9f:0a:ee:50:2f:48:7c:96:01:14:41:fd:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:1C:E3:6E:70:24:40:5C:E8:C3:46:72:DA:E1:28:64:69:CE:FA
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9b:54:b4:2f:cb:39:12:83:80:21:4b:c1:fe:41:31:67:1e:
ce:79:4e:f9:10:e1:23:e6:d2:48:51:74:80:dc:4b:cf:7d:f3:
8d:2b:9d:79:4f:e5:38:5c:30:3d:10:1b:31:d8:6a:df:a5:c0:
a5:e3:d7:18:8c:9b:f1:f4:be:7d:22:d3:5d:a2:f2:25:cb:30:
03:31:74:0f:9a:65:d4:e3:71:0b:71:bc:5d:f0:9a:29:e7:39:
0a:64:4e:74:0d:00:a3:e1:4d:11:96:b3:4f:76:17:3c:4e:d4:
fe:23:17:58:57:25:c8:56:a9:9f:b6:af:ae:43:78:c6:11:98:
56:94:62:0f:aa:22:81:f6:d9:62:5b:a6:64:aa:44:43:46:88:
c2:2d:32:11:24:77:d6:65:0d:d7:3f:70:fc:03:16:f4:4c:66:
dd:cd:d4:77:cf:dd:07:bc:9d:82:76:f0:e7:cf:83:80:a0:4a:
bf:44:f4:1f:1e:e9:a3:e7:4e:6c:40:1b:5b:90:c1:4b:e1:50:
75:e4:7f:97:e8:3e:50:0d:c3:b4:2f:0c:62:b2:57:31:09:43:
19:a5:2a:0b:bb:b8:a8:ab:7c:91:9a:5b:08:c0:15:33:3c:cf:
88:70:49:6d:e4:8a:fd:ff:a5:83:8d:83:d1:bf:53:fd:97:00:
b1:73:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:58 2025 by rpki-client on console-fra.rpki-client.org