Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File: EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier: L7AtRdiMv6MmNlUYjuKI67pM6kRZnyrGUHDVNjgFJfU=
Subject key identifier: F1:D7:94:0A:43:B9:8A:7C:6C:26:38:B8:02:5D:75:02:20:35:E9:90
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 0194BB97442BE131B4FA29007223555C2249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:40 +0000
Manifest this update: Fri 31 Jan 2025 09:00:40 +0000
Manifest next update: Sat 01 Feb 2025 09:00:40 +0000
Files and hashes: 1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: 6MnQZACjriOA9+/53Hkc11MLhIw1LzbQO8JC1ebWmxU=)
3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
4: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
5: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:44:2b:e1:31:b4:fa:29:00:72:23:55:5c:22:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Jan 31 09:00:40 2025 GMT
Not After : Feb 1 09:00:40 2025 GMT
Subject: CN=f1d7940a43b98a7c6c2638b8025d75022035e990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:82:d8:47:4d:95:c4:d3:ae:ba:3f:7a:f4:
74:d1:ad:21:4e:1e:53:ff:36:99:27:06:c2:fa:1c:
f3:c1:cf:a4:69:ff:f9:f8:3d:f3:5b:ba:ba:05:55:
72:15:78:48:f6:59:d6:c1:ca:e5:5d:d7:b0:40:7e:
3f:fb:47:1e:e1:9a:94:a0:a7:97:81:b7:4e:ee:af:
80:4b:7d:90:3e:0e:3d:ba:a2:34:fb:cd:ec:10:1d:
80:98:37:ec:ef:d7:ad:16:02:0f:bf:73:33:b1:ec:
4d:1d:00:67:a0:e1:6f:35:3c:f7:ea:d9:a4:39:89:
42:82:17:79:45:b2:fb:a9:4e:2c:3e:91:8b:2c:07:
ca:59:46:5e:94:ec:d6:18:28:7d:0b:5e:c2:b4:57:
f6:33:5d:b1:f2:35:f0:ac:80:05:ba:4a:9b:4d:2e:
33:47:ac:3b:7a:b4:7c:48:50:9f:23:8d:1c:7a:83:
dc:f9:5e:3b:e9:6c:5e:3e:59:a5:02:d2:17:68:af:
9b:e1:da:03:aa:57:26:d8:22:41:dd:bc:7f:0c:c7:
51:79:38:9b:3f:99:c2:c7:d9:b3:4b:a1:d3:9f:c0:
83:72:14:d9:68:25:ed:28:0f:b4:18:fe:d5:b7:39:
fa:d3:91:28:78:82:54:94:f4:9b:82:77:12:d0:dc:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D7:94:0A:43:B9:8A:7C:6C:26:38:B8:02:5D:75:02:20:35:E9:90
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7d:bb:59:fa:83:a3:9a:18:a3:4a:73:5a:67:6d:37:37:b8:
e5:63:d1:22:de:75:27:ec:43:9b:eb:75:a6:fa:44:16:2f:5f:
6e:7e:92:0c:a6:d3:9e:48:45:20:93:92:0f:9f:7a:45:4a:b5:
ca:1f:c5:67:bf:8d:5b:07:28:8b:d5:81:26:c6:6c:30:c6:e4:
5c:44:b8:c4:98:63:67:0f:6f:a7:2c:c3:be:7a:45:be:26:94:
4d:d2:e9:72:0b:af:3f:d6:60:d8:97:19:62:3d:2c:6a:76:3f:
13:f5:0f:94:88:5e:2e:64:2c:77:61:7b:19:b9:78:c7:71:c5:
56:00:5c:a5:d1:c2:23:9b:80:a3:7a:29:a8:cc:90:94:10:49:
ff:07:d4:87:1a:2c:f0:2b:5f:5c:d0:c6:54:56:9f:f2:99:6a:
a9:0a:c8:10:90:d7:4a:29:5f:bd:c7:1f:22:a4:eb:f8:b1:d8:
f7:87:42:06:9d:5f:bf:3a:9a:18:32:6b:05:23:70:de:15:63:
ec:40:2f:7b:05:ef:97:58:04:bb:1a:0c:5e:9e:08:f2:1f:20:
04:1e:3e:b0:5c:af:2a:09:0f:f6:96:1a:27:78:84:f4:2b:62:
70:66:f7:0a:fb:c9:48:c6:12:0d:52:fb:4c:68:59:01:57:63:
b8:a4:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:57 2025 by rpki-client on console-fra.rpki-client.org