Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: rqXsvqCyKXj08rlKXvly5+3eWdLe+jfJf5yyCMMcosc=
Subject key identifier: 6C:B9:F7:8A:8D:20:8B:38:D7:0F:85:F7:FB:A6:88:EC:D5:2E:E7:F1
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0194BABB9476839DE3CF77E150E6CDC4AB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 1129
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: sX/BIFY4RSpniP2VhPDsDMoH/ClTM0Xbm2bqnY4aLeo=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:94:76:83:9d:e3:cf:77:e1:50:e6:cd:c4:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=6cb9f78a8d208b38d70f85f7fba688ecd52ee7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:6a:ab:f8:0a:74:84:eb:69:d2:a2:33:76:
bc:8b:88:ed:f6:32:b3:a1:2e:35:fa:6a:a6:b3:3e:
1f:69:f4:86:56:f4:ab:94:be:b2:8a:9f:bf:dd:18:
91:4d:4e:91:e8:34:0e:23:d0:25:2a:3b:55:b6:41:
b6:61:96:f0:7e:57:64:53:bd:1e:5f:ef:53:b6:17:
f9:73:66:6e:13:c6:c0:3c:50:3c:ed:73:3a:2a:9f:
34:15:74:a9:3a:8a:e7:8b:e3:2d:b0:1f:bf:0c:d9:
4f:7a:18:7a:a7:5f:34:22:34:cf:0c:ab:51:93:f1:
2f:10:c1:c0:f8:e7:9a:b5:5f:af:04:84:8a:fd:75:
54:02:bf:54:35:29:89:a9:26:bd:c7:24:0e:f6:b5:
8a:46:3a:24:39:83:96:8a:9d:8e:ff:8a:b0:46:af:
57:f9:83:19:d8:f6:42:c8:e0:0b:41:14:07:7c:70:
45:2b:84:5c:a3:ad:68:e4:d9:77:4e:07:f6:8d:30:
f1:ba:fd:70:84:f1:8b:70:69:95:b7:ca:23:ec:e1:
a7:fc:34:e5:c7:87:aa:dc:51:7b:0a:a8:a3:b9:c6:
2e:0e:bc:19:aa:47:96:b8:1d:19:22:18:d1:c1:1f:
98:83:30:25:8c:3e:b0:75:ee:d9:cd:c2:34:2b:26:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:F7:8A:8D:20:8B:38:D7:0F:85:F7:FB:A6:88:EC:D5:2E:E7:F1
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:75:24:09:8a:d1:b1:64:bb:1f:12:c9:32:8f:15:5b:e2:d4:
11:38:b1:92:3c:a9:3b:b0:b7:aa:a7:be:d6:0a:e6:1d:45:18:
5c:bb:2d:2b:d9:76:97:7e:30:48:e5:25:a4:03:8c:e8:41:cd:
7b:70:44:22:39:12:cd:80:88:79:9e:7e:c4:cf:af:0d:18:2c:
5a:ac:31:85:9c:1b:68:18:6a:e4:a5:77:fe:2b:f2:b7:45:b1:
14:97:80:26:9c:8c:30:47:b1:ae:3a:e4:91:38:9c:ec:4c:2b:
a7:ae:58:52:9f:e4:01:6c:68:4e:7d:0a:75:c2:95:42:ba:6f:
20:41:46:46:16:1b:b9:58:f7:21:e6:b4:1a:34:24:03:3c:f2:
98:c0:2b:53:6c:fc:b8:20:74:c9:3d:08:2c:84:17:ae:cf:24:
1e:3d:eb:10:87:9d:78:9e:2b:ef:ea:ec:00:24:57:4f:e6:a4:
e9:67:c2:1b:f2:d0:f1:88:f4:29:e6:d4:72:2c:ca:4f:94:ee:
be:e3:d2:31:35:b3:68:27:8a:78:bd:04:88:08:73:e6:12:24:
cd:17:bf:63:89:98:e1:ce:1d:b3:c6:39:b5:58:cd:40:14:63:
64:1f:bc:59:fc:b5:f2:00:94:2c:28:21:db:10:96:5e:1f:b3:
04:e4:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:23 2025 by rpki-client on console-fra.rpki-client.org