Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: rvdTIju8xbtaCFadYDs6lCeRB+W4rMWkEUUOeJaWJjw=
Subject key identifier: F1:84:FE:15:0E:79:D3:72:64:CA:A9:29:7B:D5:4F:43:5A:46:4D:5D
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 0194BB6010D58CD3F271A709AB3FCDF7871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:22 +0000
Manifest this update: Fri 31 Jan 2025 08:00:22 +0000
Manifest next update: Sat 01 Feb 2025 08:00:22 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: qFhQ2sLxaoviAqCt9iCkFZyPERazTN5yoZOChHFTNdk=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:10:d5:8c:d3:f2:71:a7:09:ab:3f:cd:f7:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Jan 31 08:00:22 2025 GMT
Not After : Feb 1 08:00:22 2025 GMT
Subject: CN=f184fe150e79d37264caa9297bd54f435a464d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:81:a2:c0:a6:79:c7:d2:ed:39:eb:35:e6:
65:17:2d:3d:bf:7f:89:84:fa:52:ce:c9:58:39:6b:
8a:e2:fe:52:78:f7:0c:d2:37:3c:ae:c6:08:83:0f:
03:40:6f:94:c1:85:e3:bd:a2:a8:db:28:f3:6e:ab:
dd:c9:a6:a4:f9:d8:e9:67:11:f6:a4:55:31:c1:35:
a6:fa:c9:64:fb:d9:51:0f:e9:df:b4:ba:0d:90:8f:
6f:f2:20:e6:9d:fa:41:9a:e4:3e:90:21:e3:7f:70:
2c:63:43:0e:6f:22:df:e0:e2:9c:c2:df:3a:8f:5c:
5f:ac:39:b4:1e:69:99:2b:b3:2c:9c:29:11:2f:2c:
e0:07:fc:d4:7f:4e:30:d1:09:f5:76:68:2d:99:fc:
75:09:39:7d:be:bc:cd:6b:99:af:97:d3:7b:b3:e4:
f0:51:8f:62:76:a7:01:6a:0a:78:07:58:18:8c:f5:
04:94:f2:17:5f:a6:60:f7:64:47:1a:f4:7a:b6:77:
70:2a:c1:83:a4:b2:36:ad:b1:c9:f9:6f:3e:18:89:
b5:71:20:c9:63:f7:53:76:f1:20:d8:6e:4d:ed:c1:
3f:d4:20:6d:ee:56:5f:23:c0:62:97:d7:8b:8b:c8:
9f:d3:84:8f:f4:76:a8:d8:68:b9:ce:c6:18:c9:05:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:FE:15:0E:79:D3:72:64:CA:A9:29:7B:D5:4F:43:5A:46:4D:5D
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:7d:99:aa:a6:b8:e5:bc:b4:0c:2d:53:3f:9d:37:6f:f2:
72:a2:1d:ea:c0:ea:41:14:3e:cc:05:3e:52:2f:53:51:71:61:
40:55:ad:ea:65:ff:11:5d:8a:6b:ec:ee:ad:31:fe:f1:fe:e4:
98:19:82:fa:4c:13:6f:45:c5:bb:3d:4d:93:19:7d:fc:23:ab:
9c:4b:b8:74:6d:12:17:60:2e:8f:7f:88:e7:55:dd:33:78:8a:
69:03:a2:46:94:46:f0:73:09:71:44:d6:21:71:5e:c8:79:b9:
ba:f9:06:5d:27:fb:50:ff:4c:06:00:5c:b8:18:20:86:74:c3:
9b:aa:74:44:4c:21:aa:95:ab:b2:88:5b:93:78:3b:58:8b:04:
56:f7:b5:2f:0a:67:fb:20:04:e3:3a:49:5c:34:22:ef:7d:91:
77:35:ea:ee:ac:86:c5:16:18:91:45:d9:a5:6e:1e:28:ef:ce:
12:6c:c3:64:34:4f:a0:5d:e7:2f:42:4c:34:12:51:73:2c:51:
db:93:75:c2:71:74:f2:48:aa:74:71:a1:c5:35:ea:07:21:97:
5a:7b:f0:12:5a:6b:ed:c0:9e:4f:2f:b8:08:6c:b9:d6:26:ed:
ec:3c:70:f4:59:7e:db:04:a2:18:a5:39:c7:47:72:01:1a:12:
1d:6c:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:29 2025 by rpki-client on console-fra.rpki-client.org