Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: o0i2kv+LhqKifRsGC5Hm4twfHYJiL6xRoO2JZ3M1Lok=
Subject key identifier: 96:6D:EA:B5:E4:04:24:CC:AD:87:9A:0A:02:93:08:27:06:55:78:17
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0194BAF25B293D133EDC70400DCF3AF26E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 107E
Signing time: Fri 31 Jan 2025 06:00:32 +0000
Manifest this update: Fri 31 Jan 2025 06:00:32 +0000
Manifest next update: Sat 01 Feb 2025 06:00:32 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: r+ote8JHvBnqA1+yRzO8Z9MzlR5DR+0/IIQbjSCVlXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5b:29:3d:13:3e:dc:70:40:0d:cf:3a:f2:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jan 31 06:00:32 2025 GMT
Not After : Feb 1 06:00:32 2025 GMT
Subject: CN=966deab5e40424ccad879a0a0293082706557817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:39:9f:bf:3a:64:23:a6:aa:19:34:42:4d:
75:24:9e:f4:c5:a4:48:95:64:d3:d4:8e:74:1d:4a:
33:89:bf:fc:af:19:fe:14:fb:c4:a8:37:24:6c:37:
d0:99:a2:8d:7d:32:47:51:59:c6:22:d5:49:69:98:
6d:88:11:d0:21:c0:d5:82:6d:23:ec:6c:5a:5a:5c:
07:36:a8:5d:7b:1a:4c:63:e2:59:3d:9c:b5:b3:95:
d7:8f:b6:67:30:08:23:38:36:b0:90:e6:79:0b:41:
e9:a0:dc:86:5f:dd:90:29:ab:78:ae:b5:62:6a:15:
95:30:41:39:b7:83:3b:22:81:f4:ef:d0:57:98:50:
4d:7e:a1:ba:72:55:10:7c:d8:a6:9a:73:f5:58:d1:
37:0a:3e:58:b9:64:fa:3d:7d:d2:04:28:9b:b2:ca:
b7:4f:5b:c8:54:29:62:13:72:c4:f4:57:89:79:7f:
8a:4a:d3:73:c5:df:05:05:df:92:5c:a7:12:f3:4a:
34:f9:21:ed:eb:5f:5e:3f:77:43:cf:b4:9c:cc:4f:
85:ab:b6:e1:29:c2:92:a5:49:23:a5:13:48:f2:c3:
04:db:92:04:9c:98:5c:f8:99:6e:cb:cc:d1:63:20:
c3:e7:55:24:bc:a3:9b:c0:61:c3:15:cf:bf:38:54:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:EA:B5:E4:04:24:CC:AD:87:9A:0A:02:93:08:27:06:55:78:17
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:59:2b:d4:5c:5e:76:46:52:ff:28:78:e5:40:96:b1:e8:28:
7f:cc:41:c7:6b:bf:e0:d0:6a:b5:cc:f6:ed:fc:78:2c:c6:a9:
54:ce:0c:a4:56:08:f7:3d:31:55:fc:c8:d3:bc:c5:02:9e:87:
fd:1c:f6:a4:cb:48:50:91:f1:ee:96:c1:2f:ae:99:6f:a9:b3:
14:3c:76:a6:5e:5a:cc:c2:bd:26:1e:fe:e2:1f:0a:15:5b:1b:
e1:49:de:77:eb:e3:2f:ad:92:6d:11:5f:c8:ca:af:ff:9a:de:
e4:e3:84:c1:58:8c:ca:dc:4a:fd:67:f1:ab:c6:d3:99:e6:87:
7e:8c:89:f3:e7:e8:23:87:8b:2a:39:15:5d:a5:3b:75:03:1f:
b5:56:41:c0:2a:cd:a8:65:c0:23:67:78:4f:b9:13:08:81:3e:
39:75:b5:13:e5:f5:ab:91:59:45:e5:fa:8f:68:fa:b8:10:67:
f0:c8:47:e0:dc:fc:80:a4:56:bc:78:2e:e8:04:26:61:5a:d5:
ca:8a:5d:3d:c7:c8:68:e4:57:52:79:77:5a:9a:00:35:37:2a:
cb:9b:ed:fc:9f:b4:93:7d:d8:96:78:b1:20:72:26:55:79:9d:
2f:4f:cc:55:d9:75:9b:2e:d9:da:99:fd:d7:99:14:e7:a2:d0:
7a:8d:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:57 2025 by rpki-client on console-fra.rpki-client.org