Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: cfG6moTECLuIypgGVzQ5L3mYfJAWonnsN7+aIGnh6+c=
Subject key identifier: C6:72:99:3B:84:0B:B0:BA:54:6B:DC:07:AD:79:12:86:60:9B:8E:BB
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 0194BABB4BD973691F5EBA618F432C926A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:24 +0000
Manifest this update: Fri 31 Jan 2025 05:00:24 +0000
Manifest next update: Sat 01 Feb 2025 05:00:24 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: nTM1YS/loR8tAvmQvBxfdAAX8z5McVDetL+zUeZ9jFk=)
2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:4b:d9:73:69:1f:5e:ba:61:8f:43:2c:92:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Jan 31 05:00:24 2025 GMT
Not After : Feb 1 05:00:24 2025 GMT
Subject: CN=c672993b840bb0ba546bdc07ad791286609b8ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:ee:1f:56:b6:34:b7:c5:f2:7f:50:a4:bf:
b3:dc:c7:38:79:a7:c0:44:3c:b2:a9:a3:51:1a:4e:
e0:1b:f2:54:19:4e:4d:d2:ee:47:2a:58:49:7a:a0:
22:5b:03:a7:f6:dd:30:07:a6:68:45:f4:bc:aa:30:
1c:c5:d4:1b:84:ee:00:c9:6e:92:d2:5a:44:64:58:
81:2d:fd:8f:71:2b:4b:df:63:c2:56:5c:00:95:d1:
f6:1b:a9:04:99:ec:26:65:05:fb:3c:16:14:7e:f7:
3e:8e:c3:b6:6f:2c:4b:d8:76:5a:e0:31:a0:8e:99:
b7:ed:d8:a0:a5:13:23:38:92:18:ca:39:b7:26:dd:
56:c5:40:97:82:20:4c:fb:a5:88:26:85:fe:56:ed:
af:58:64:e5:b3:03:f7:b4:c2:5e:ad:19:09:2e:a2:
6f:12:a3:e8:4f:1a:5b:f8:51:85:f6:53:14:c9:fe:
d4:7d:84:20:34:7b:5c:af:69:62:d5:86:97:48:e0:
7f:7e:9c:86:72:59:5e:4b:d7:2a:71:8b:77:80:c9:
98:c4:68:5f:22:78:ed:e5:d6:59:ec:03:87:6f:c9:
63:b4:d0:4c:31:a1:f2:b9:6f:4f:85:48:33:ff:df:
f6:dd:07:4e:b6:34:d5:98:18:f1:19:55:90:48:c1:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:99:3B:84:0B:B0:BA:54:6B:DC:07:AD:79:12:86:60:9B:8E:BB
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:d0:ea:fd:5f:6b:3d:e5:5d:96:73:e6:98:16:68:97:58:
fd:16:3d:e1:76:c6:ab:6b:fb:36:9a:c7:32:83:fd:20:a4:55:
2e:db:44:72:0f:cf:02:51:7d:c8:47:5c:e8:2b:3f:40:84:23:
f8:47:4d:75:eb:29:5b:88:10:a5:d2:c0:12:48:86:df:a8:1a:
62:d3:5d:84:42:6e:79:a6:8e:7d:7b:b8:28:0f:7e:5d:5a:ad:
ec:af:74:e4:99:72:10:85:ec:5e:a3:fe:e3:45:fb:b4:f8:bf:
41:65:d2:e9:1f:f1:85:c6:0c:c7:fe:e9:e2:7b:1b:f4:da:aa:
e0:ac:76:ca:78:2c:65:01:57:ff:b3:cb:7c:8e:4b:c5:e5:63:
f4:e6:ee:21:87:e8:13:ba:c3:65:4e:ae:ca:17:41:15:b7:e3:
08:3e:ec:aa:fc:84:5a:5e:45:c1:f2:5b:57:c5:4c:4e:e0:ee:
5f:3b:ff:f5:40:c0:0e:cf:1a:c8:66:9b:23:42:5b:f8:62:3c:
c8:8b:a3:8e:c0:65:13:6a:fd:02:78:0c:43:94:f2:80:0a:76:
fb:c8:61:ee:a7:b1:77:ae:02:db:85:00:e0:40:97:73:f8:e4:
80:47:7e:4c:aa:7a:9a:43:d2:60:46:a4:da:d7:86:47:26:5f:
27:4f:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:00 2025 by rpki-client on console-fra.rpki-client.org