Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: 8Othu3qsaPosvfrN5vrAjO3emqPnwoXokg6ybt5JT+8=
Subject key identifier: 6F:77:20:22:8B:ED:31:A1:41:3C:40:9A:A4:C5:EA:4E:63:3F:96:6E
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0194BB96D850AE286C8AAA2B23CE00771A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 124A
Signing time: Fri 31 Jan 2025 09:00:12 +0000
Manifest this update: Fri 31 Jan 2025 09:00:12 +0000
Manifest next update: Sat 01 Feb 2025 09:00:12 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: 5LJlxLZEINFL56PeXVCBGR97at8RjMXIcgmSRSLsYzs=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d8:50:ae:28:6c:8a:aa:2b:23:ce:00:77:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jan 31 09:00:12 2025 GMT
Not After : Feb 1 09:00:12 2025 GMT
Subject: CN=6f7720228bed31a1413c409aa4c5ea4e633f966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:f5:e8:de:f7:4d:bf:cc:58:6b:25:e0:96:
56:ac:e5:12:01:f6:1a:8f:95:cd:ac:f2:de:36:c8:
2c:39:1f:7f:9b:05:af:63:10:78:41:03:5d:29:03:
f9:74:53:b4:6e:74:68:88:35:ac:04:51:32:5e:54:
42:67:ed:11:c4:32:c7:71:ac:31:e1:2e:82:d4:00:
b3:38:bc:68:89:1f:d5:84:bf:a2:04:01:56:f1:03:
75:68:de:7e:65:bd:a4:2b:ca:ac:69:e0:65:ec:ad:
9f:14:4d:11:da:45:53:7b:65:6c:c1:57:72:57:4d:
47:48:1c:74:32:15:92:10:9a:b1:3a:56:21:4e:ae:
95:d0:c7:6c:c2:c9:19:33:67:b6:ce:2b:f7:08:23:
ab:17:07:a3:b5:38:b7:31:49:1b:4e:b5:e5:fb:a0:
a7:19:ee:79:1c:f0:97:a2:0c:00:c1:5e:02:91:0d:
78:3f:cb:d8:e3:e5:3c:c0:3e:a8:41:2a:aa:7d:52:
13:30:25:b2:c2:ef:45:ea:d8:e7:df:41:97:63:99:
91:5b:74:0a:fc:2d:7f:fe:29:7d:95:86:bd:23:0a:
6f:4d:bd:eb:be:b3:ea:fe:d0:a1:a6:a1:fc:93:12:
45:94:34:06:ed:29:39:bb:99:5d:8d:0f:1b:e1:63:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:20:22:8B:ED:31:A1:41:3C:40:9A:A4:C5:EA:4E:63:3F:96:6E
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d2:60:16:a6:63:9a:eb:41:54:07:b3:fc:1d:51:73:37:83:
c8:c2:95:09:9f:cc:16:e9:ee:9c:7b:98:02:fd:db:06:1b:5c:
ee:2f:ff:25:14:73:d5:b3:3f:e7:c3:12:e3:c0:6a:c6:da:4b:
e1:6f:74:9d:e7:4b:36:b0:02:00:35:b1:62:61:7f:fd:21:25:
55:77:72:7e:fe:95:79:99:c6:8c:e8:8a:2d:35:3c:0a:8e:9a:
48:0f:ac:f0:f3:f1:98:14:57:13:41:3e:80:8f:01:ed:06:f2:
12:0f:bc:c8:df:9a:36:86:79:e0:10:7f:85:ea:ce:68:7d:89:
c5:d1:25:6c:9f:68:10:14:f7:a0:dd:13:14:62:51:6e:6b:f7:
ae:34:e5:74:90:72:1d:04:a7:f4:bd:33:c5:2d:77:45:44:93:
61:b6:bd:f1:06:52:ca:b9:ac:09:0d:ae:c9:99:5e:30:40:af:
51:da:51:41:17:24:19:b9:b3:8f:de:bc:d4:3a:d7:a1:d5:f0:
dd:53:13:67:58:35:40:b3:d1:d6:41:f2:21:7b:cc:d6:bb:28:
40:2e:50:f3:b7:c7:c9:bb:11:38:c0:e9:d9:40:1b:b4:13:8e:
c7:e5:01:0e:84:23:18:56:f0:6f:68:bc:a0:3d:c6:49:cf:a1:
57:c1:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:33 2025 by rpki-client on console-fra.rpki-client.org