Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: IlPqCPLdi9Hio/gGpHCis7KCjd8MSfFGRxTUVzkezsY=
Subject key identifier: FD:77:63:48:EE:53:91:52:B1:80:AE:D8:35:6D:37:A1:BC:59:27:FE
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 0194BB9731D01CBCBB5E61245B14DF20C7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:35 +0000
Manifest this update: Fri 31 Jan 2025 09:00:35 +0000
Manifest next update: Sat 01 Feb 2025 09:00:35 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: UDcQJKvUbMeJHVYvFnjgzVVE9y7cICn8pPX/QznAx+M=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:31:d0:1c:bc:bb:5e:61:24:5b:14:df:20:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Jan 31 09:00:35 2025 GMT
Not After : Feb 1 09:00:35 2025 GMT
Subject: CN=fd776348ee539152b180aed8356d37a1bc5927fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:5b:cc:e3:c0:53:68:bd:24:2b:be:6f:97:
21:7a:1c:cc:a9:0e:b0:0b:88:56:bc:b6:d0:6d:44:
44:15:de:6e:d3:0c:68:e2:3d:e8:05:d2:e5:b8:8b:
ef:61:88:6b:11:1a:f6:ad:8c:a8:01:d2:9b:9d:52:
01:ee:50:6f:db:9e:b3:c5:e7:29:87:d1:09:18:45:
67:ef:5b:ba:62:a2:3d:df:f3:35:ee:37:72:ff:3d:
8c:08:2e:a3:df:03:00:eb:64:ea:2e:75:49:72:f4:
59:59:08:47:ba:22:aa:6b:fc:9f:e4:2a:d1:cc:6d:
64:11:1e:77:1d:fe:07:3c:9a:01:04:2c:37:3a:d5:
b8:74:41:35:38:82:d5:82:01:7e:41:67:f8:9e:97:
5f:c6:dd:c0:dc:a1:69:77:8c:ef:32:ba:35:e1:75:
6e:14:07:e5:90:6e:6f:2c:78:20:d6:d0:b9:48:c6:
90:55:8e:f2:fd:87:49:42:a2:0b:04:9d:17:cb:ad:
f9:59:95:c8:90:28:d6:5f:22:4e:2b:90:8e:18:bd:
7a:ec:2a:ba:5a:dc:87:c7:5f:73:42:bc:54:36:c4:
a5:5d:95:ad:55:2d:4b:ab:41:a1:ec:a6:19:ce:08:
19:14:dd:59:c6:24:52:59:2d:69:6c:90:f3:bd:a5:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:63:48:EE:53:91:52:B1:80:AE:D8:35:6D:37:A1:BC:59:27:FE
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:14:69:65:c0:9b:38:33:7e:c4:a9:8d:e6:bb:e1:a1:44:
5d:1c:2c:ed:4f:56:22:ab:38:fc:c4:c3:af:ce:22:54:ec:d0:
bc:4f:cd:9a:e5:e4:19:dd:de:4b:f5:fd:57:dc:87:0d:25:21:
f0:29:3a:17:43:33:c9:0e:f2:a4:8c:cb:9e:e0:43:4f:fb:d0:
77:7e:96:f4:b8:6d:35:b5:e0:22:0a:88:de:16:4a:31:8d:51:
61:7c:9a:4f:78:58:66:1e:bd:84:00:f6:01:88:97:7b:5b:9f:
26:cf:ec:20:6a:5a:6a:15:08:69:af:aa:a4:4c:dc:f1:1a:da:
da:66:2e:2f:dc:0c:55:3e:70:64:d5:39:ce:b7:81:1f:83:75:
02:27:91:2d:e2:f8:3b:42:81:c8:3a:10:25:f4:e5:8d:99:5b:
d9:5d:e8:21:73:83:a0:8a:1b:4b:62:47:51:6e:c4:77:11:a9:
5b:ec:43:39:5a:47:c0:fe:57:7b:1f:b9:88:5a:50:03:aa:c6:
9f:5e:0e:f2:85:71:a1:b1:28:22:3d:b6:dd:ad:c2:1a:1c:f3:
f5:7c:72:c9:56:4f:19:da:88:12:e4:fa:11:ec:d1:37:4c:cf:
85:e8:2f:45:1a:3c:75:47:d8:2e:68:a9:d6:9b:b5:aa:82:11:
4f:0c:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:30 2025 by rpki-client on console-fra.rpki-client.org