Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: cLxH7rgrCZjOKtrIf5thj+f4dAF8LR8euQfpZzA2LkU=
Subject key identifier: 0D:28:08:E2:D0:E4:02:28:49:6D:73:95:0F:1A:E1:7A:4D:70:06:95
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 0194BC04F96765717D4E032491843C46780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: nMWdJ4JISOrGinbWYEpvSw97iajPeQ8TPLR10NWcQ5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:67:65:71:7d:4e:03:24:91:84:3c:46:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=0d2808e2d0e40228496d73950f1ae17a4d700695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:77:8e:0a:54:94:26:94:09:0c:72:1b:eb:
10:25:f5:67:9b:4f:88:3b:ee:1c:67:f9:95:86:cc:
97:46:6a:b2:29:e0:da:be:c6:e9:b1:b6:ec:6a:01:
1a:13:f9:48:e8:51:16:5b:cf:3a:7d:8f:3b:1f:83:
45:6f:c7:37:68:e3:fa:d0:0d:f4:ec:85:f1:72:45:
ca:6a:50:b8:1f:2e:0c:14:a6:81:ad:90:4d:ae:ee:
18:06:6d:7e:5c:03:28:37:e2:f3:e9:09:fb:77:29:
9b:af:bf:32:84:31:a5:7e:62:cb:7b:dc:a9:d4:65:
24:a2:5e:df:c0:04:51:9a:1c:c6:8a:03:15:a1:87:
0a:b8:8e:d7:16:4f:30:4a:69:6f:bf:a3:65:b9:8f:
04:6e:1c:39:2b:cc:4c:5c:3b:68:d4:ea:6b:d5:14:
95:a7:35:08:f6:fa:1a:6b:00:ae:6d:ce:0d:e3:fc:
0c:16:9e:80:ef:19:6a:96:01:ac:cf:9f:9a:c6:c7:
78:46:e4:09:e1:58:94:37:41:00:82:5d:f4:d7:ac:
4f:b1:e5:c7:83:75:dd:d5:04:d9:22:48:95:ff:00:
fd:c9:3f:35:24:d9:71:e6:2c:34:01:43:54:48:8d:
c4:5f:af:0b:a9:56:5a:4d:18:2d:0f:a8:fa:d7:74:
67:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:28:08:E2:D0:E4:02:28:49:6D:73:95:0F:1A:E1:7A:4D:70:06:95
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b5:ae:75:9d:5b:aa:aa:04:69:df:48:03:fa:7f:c3:e8:49:
70:b1:d2:96:7c:f4:04:c1:2a:37:73:57:ed:5b:ee:9d:06:7e:
b7:6e:6e:35:73:cf:41:a6:f7:50:72:e6:2e:20:66:f3:32:d7:
2d:cb:d0:0a:5c:6c:f5:78:62:ba:94:6e:68:3b:3b:6d:f2:87:
51:76:80:ec:38:7a:a4:e0:5d:39:c9:0d:0e:3f:83:98:8f:2b:
fc:65:b8:3b:36:a1:cd:41:99:14:f2:79:60:7d:bf:7f:73:7e:
2a:bc:f7:8f:45:d2:4d:33:2e:02:4e:dc:7f:41:69:d0:ea:ea:
8a:1e:d8:f4:54:b8:c8:0d:6f:74:91:85:4b:7d:93:e2:48:51:
c9:97:e3:35:03:3a:7f:ce:1f:6a:7b:8e:53:2b:8a:3f:56:97:
c7:8f:77:26:22:1a:b9:99:4b:62:cf:05:f9:51:d7:c4:5d:1c:
f8:f8:96:3b:30:14:7e:1b:a1:16:89:52:48:b4:b7:73:11:a1:
a3:4d:1b:93:35:13:e9:e8:28:1a:56:95:8e:e2:f8:da:2e:52:
0d:f3:a4:ae:54:d6:21:0c:8a:53:cb:01:9b:9d:53:b6:1b:d8:
08:c6:07:f3:28:5e:fc:eb:a6:e8:34:10:1b:56:aa:7b:5d:1c:
f9:80:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:07 2025 by rpki-client on console-fra.rpki-client.org