Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: CdUKV//K4k632UAQZa3a02/s/6NuFSmoOvm9cEw00wM=
Subject key identifier: 84:9E:B9:6B:89:FE:65:74:34:92:91:A5:19:08:3C:AB:30:57:90:DB
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0194BB970088DEBF2C539388332875F1F545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 0594
Signing time: Fri 31 Jan 2025 09:00:22 +0000
Manifest this update: Fri 31 Jan 2025 09:00:22 +0000
Manifest next update: Sat 01 Feb 2025 09:00:22 +0000
Files and hashes: 1: 1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa (hash: w2Nu5EYLge3T/hRnhBjIuPbqdFqlZcs61kedmEN0JbA=)
2: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: FeZx2OMR6URF+1dBwXqbVzGMGzYqVXEbIoKf8tD4L/o=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:00:88:de:bf:2c:53:93:88:33:28:75:f1:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jan 31 09:00:22 2025 GMT
Not After : Feb 1 09:00:22 2025 GMT
Subject: CN=849eb96b89fe6574349291a519083cab305790db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:3d:b3:a8:8c:1c:f9:7e:6e:9d:32:24:39:
bf:02:53:b5:f5:49:34:67:f2:ee:85:0b:a2:04:44:
c9:31:ef:f4:17:00:0b:1e:5a:fb:ef:01:3e:a9:7e:
9e:61:cb:1c:1d:70:3f:71:1e:f9:ef:4d:02:d9:73:
57:df:83:03:84:8f:77:4f:4e:99:a9:9f:d0:8b:28:
c5:c6:c7:72:a3:20:a8:f3:91:f6:5c:de:ab:c7:76:
b2:00:41:8a:62:c6:d6:3a:42:7b:7c:df:47:cf:cb:
22:f7:41:aa:97:1a:96:df:fd:d5:f2:a8:d1:08:b2:
97:d3:1d:93:23:5e:d7:bf:77:da:1b:45:50:8f:57:
f3:e6:77:a9:29:18:f3:3c:0d:7c:20:bb:fc:ba:02:
46:c9:bc:f1:a2:66:a9:b8:39:53:fb:45:06:0f:07:
83:c9:8e:22:48:38:44:73:85:1b:ca:4a:a7:d7:c0:
27:e7:31:ce:0d:6b:21:8b:66:9c:e8:1a:ef:6a:e7:
34:7d:41:78:e2:99:a3:f9:8a:53:f1:11:f5:a1:b4:
c2:3e:94:61:a9:de:3e:30:68:8e:b0:79:67:88:e9:
b4:64:b6:49:03:3e:a3:0c:82:3a:de:38:f7:f2:37:
b1:83:f9:e3:77:d6:60:a7:63:6e:50:bf:6c:39:a0:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:B9:6B:89:FE:65:74:34:92:91:A5:19:08:3C:AB:30:57:90:DB
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:64:c9:29:f0:4c:05:23:79:8f:13:e7:38:4f:bf:a7:82:50:
66:5e:4b:f0:02:7e:0e:44:31:c4:f5:85:95:26:25:a8:79:f0:
c4:22:fa:88:83:97:13:8f:6a:07:a5:41:a1:aa:ee:55:f6:7b:
3f:0e:43:2e:a8:9a:fe:3f:1d:05:3c:92:7a:ff:e6:60:bb:95:
51:95:94:29:56:3d:28:61:8b:19:3a:b6:af:96:33:db:e8:9c:
c1:6a:65:86:3c:ff:a6:ae:ee:78:3c:ce:90:68:63:f5:41:55:
7e:87:01:7f:88:a5:03:90:40:c7:34:4d:b7:92:73:60:ac:12:
86:07:09:55:2a:a8:b4:da:17:07:34:d0:dd:11:d5:37:20:2d:
33:4a:45:6a:e2:01:9f:50:a1:ed:20:56:c8:08:9c:6d:46:de:
97:11:df:94:36:a5:c2:34:fd:9e:2c:d8:8f:90:fb:75:40:e4:
66:09:c6:98:e9:fb:5e:a8:02:8d:8b:bb:0a:a2:d8:9c:c5:b2:
25:fd:70:89:09:d6:b6:c5:48:cc:69:20:19:02:49:91:09:e0:
2a:ae:f3:11:19:4a:25:8e:d9:42:85:4f:05:d1:0d:d4:96:10:
78:9d:46:db:2b:86:dc:d4:eb:69:c5:00:ec:4c:75:26:11:f4:
72:f0:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:14 2025 by rpki-client on console-fra.rpki-client.org