
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
File: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft (raw, json)
Hash identifier: z6i8bQauA6namjFYOEaEuqAM9TRpnfDKMPsaoe0XMTk=
Subject key identifier: D8:DE:9C:54:63:2F:A3:27:A7:9E:F0:42:5B:A8:83:3F:BE:25:39:AC
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 0194BB605682DF969AAFACA10090CFE1B08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
Manifest number: 77
Signing time: Fri 31 Jan 2025 08:00:40 +0000
Manifest this update: Fri 31 Jan 2025 08:00:40 +0000
Manifest next update: Sat 01 Feb 2025 08:00:40 +0000
Files and hashes: 1: Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl (hash: +7czaEhLXrysvn1NYk1zCgcEu6NFTT0OKXufgbg4q7M=)
2: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (hash: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:56:82:df:96:9a:af:ac:a1:00:90:cf:e1:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jan 31 08:00:40 2025 GMT
Not After : Feb 1 08:00:40 2025 GMT
Subject: CN=d8de9c54632fa327a79ef0425ba8833fbe2539ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:66:0c:20:fa:e5:7f:f3:01:84:9d:1b:54:
47:07:9f:1c:06:a6:ce:55:54:15:9d:0e:2d:1f:09:
e6:48:d1:04:ff:4d:44:5e:ed:7d:cb:ed:a5:fe:09:
ff:33:3f:3b:08:ad:01:53:53:79:fe:72:e6:73:09:
9f:fa:e7:d7:07:77:da:ff:bd:05:9c:cc:4b:b1:9f:
81:6f:3d:bd:24:1d:6a:a0:72:77:35:14:7a:96:b6:
64:37:f5:77:71:80:d6:9c:7a:c9:98:1d:05:59:3e:
b3:cd:50:0f:e3:15:14:c3:16:41:fe:60:48:f6:3e:
36:5d:6e:93:da:54:19:1a:06:f0:d1:bb:b3:63:32:
4e:7d:5c:e7:54:8d:02:38:55:00:18:ca:c0:da:94:
33:51:58:c6:55:4c:04:cb:fc:dd:d6:34:40:3c:16:
3a:9c:96:80:1c:08:7c:86:c9:22:a3:84:e0:0b:1c:
e8:7d:10:39:0a:21:44:35:b7:04:f5:d1:3e:e0:97:
c7:e9:a0:50:c0:bf:54:ef:f7:1c:79:f8:e5:5d:9a:
39:91:e3:59:59:31:75:65:42:d6:47:4e:55:66:5b:
b6:e7:ae:ac:69:8a:7f:a4:2f:38:34:f4:f5:fc:c9:
23:64:f4:c8:14:85:f4:80:ca:9b:41:cc:85:e7:82:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DE:9C:54:63:2F:A3:27:A7:9E:F0:42:5B:A8:83:3F:BE:25:39:AC
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:ed:73:1d:09:99:49:c5:49:d8:22:0b:cd:9b:26:a2:0b:
e8:33:e6:9e:d0:a7:c8:2a:82:66:d3:da:ed:ca:0e:ab:e8:53:
b4:99:ce:e8:d1:32:3d:97:be:24:e8:d8:3e:2e:39:76:8d:d1:
c4:3c:60:28:d1:90:2a:e6:40:3a:21:35:6f:d8:d2:68:0a:46:
6f:5e:c7:46:45:b5:21:fc:38:1e:48:9d:15:39:8c:f8:08:7d:
f3:71:fa:22:a1:6f:a4:1c:94:d8:72:85:ca:b2:3a:bf:33:e4:
dd:40:39:9d:5f:13:b8:d5:db:c4:6c:85:f5:94:4a:c4:7f:98:
fb:67:97:77:0a:95:a4:dc:ae:49:41:df:6e:6d:4a:f6:db:79:
28:ba:7d:49:e1:04:15:63:63:be:a1:9d:99:c0:35:0b:d7:9f:
f1:b4:8e:e8:84:bf:97:cd:58:e1:6d:f9:94:7b:c8:e2:dc:e7:
13:27:57:6c:36:7b:da:7f:6a:51:58:0d:4c:b6:5b:94:a4:11:
99:4e:95:73:18:60:15:fc:5c:28:18:a4:9b:64:4a:8b:10:38:
38:c9:83:19:2c:20:74:bd:e0:82:dc:a4:a4:6a:70:dc:04:26:
de:be:d7:7b:a0:01:81:48:9f:14:96:48:b6:ad:76:ac:55:46:
a1:f5:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:23 2025 by rpki-client on console-fra.rpki-client.org