Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File: eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier: LO2QiKViA+AMZm8WnjcBHDVOtrQLHx3kmir4HU5hLKo=
Subject key identifier: 97:D8:2D:7F:B9:60:B6:74:02:B5:F6:65:18:19:34:DE:A3:EC:28:34
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 0194BABB25DC30E05160D5FB7A22144D95E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:14 +0000
Manifest this update: Fri 31 Jan 2025 05:00:14 +0000
Manifest next update: Sat 01 Feb 2025 05:00:14 +0000
Files and hashes: 1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: egXW3k2Xi9FJOhYTMYUYZEz/QEyKGYxR2wsxpJckmR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:25:dc:30:e0:51:60:d5:fb:7a:22:14:4d:95:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Jan 31 05:00:14 2025 GMT
Not After : Feb 1 05:00:14 2025 GMT
Subject: CN=97d82d7fb960b67402b5f665181934dea3ec2834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:b2:7a:32:50:3c:75:ad:e0:53:65:5c:7e:
7d:2e:d8:aa:c1:f6:b3:63:cc:f6:f3:6f:40:e2:40:
ef:ff:8e:61:96:fd:84:69:60:1f:b4:5b:19:fc:b4:
6c:6c:29:df:0d:e1:97:64:89:9e:4d:b8:7d:c3:55:
6e:d5:60:1a:ab:ca:35:ff:19:1a:e7:06:ca:1c:d1:
6c:3c:31:93:79:31:e8:b3:bf:27:00:fa:5a:66:35:
12:55:6d:83:13:2a:82:da:a2:36:53:8e:c0:37:4f:
f5:55:b5:3e:55:f3:a6:d8:a3:8f:b7:d4:5f:35:ef:
6a:66:26:b1:10:e2:70:51:4c:c2:45:86:4c:1e:74:
ad:5c:50:6b:93:d6:7b:6a:2c:dc:2e:a7:b7:7e:7b:
a2:d6:5a:50:d5:8a:34:ff:a8:d8:ee:d0:9f:7b:d9:
af:06:6f:a5:6f:05:89:5b:c6:07:06:0f:8f:97:b3:
72:9e:a2:a8:58:1b:02:4d:72:88:09:ec:52:32:80:
c8:85:f3:b7:4d:2e:6a:f3:b5:9a:90:99:90:2d:4e:
1b:0c:a2:c1:e8:df:8f:7b:23:75:b0:1a:71:dc:44:
14:f6:86:88:d1:4b:b6:ce:8c:6d:35:ae:8a:73:99:
37:22:9d:44:33:8f:00:80:d5:73:26:8f:e7:41:f1:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:2D:7F:B9:60:B6:74:02:B5:F6:65:18:19:34:DE:A3:EC:28:34
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:db:cf:c7:a3:43:fb:68:08:0c:88:64:97:4b:1b:ce:0c:
a0:cd:e3:34:65:2d:d9:f7:c7:0a:cf:10:be:8a:a0:c2:38:7e:
0b:3d:05:c9:11:4d:65:21:c9:da:83:d6:57:e2:1f:b9:f6:1e:
8b:fe:e3:6d:b6:0b:30:9a:e3:1e:8e:2d:64:35:f5:0f:57:59:
b7:54:1d:8a:e8:cf:da:14:ee:e9:c4:95:dd:8c:d9:d7:65:28:
32:d1:a0:4a:4c:6e:eb:ce:e1:ce:22:c3:0a:25:3e:1b:79:ea:
74:13:46:22:22:bc:1f:e5:93:fe:70:74:88:57:ec:fc:f3:4d:
ee:20:2c:56:2e:72:4a:05:c7:c6:a0:47:ef:5a:a4:d4:6c:9e:
4c:b2:33:2c:a8:af:d9:75:89:1b:8b:1b:90:e9:f3:d8:19:7c:
b1:e0:29:4f:c3:01:b9:15:36:71:e7:98:f3:25:48:6e:ab:74:
ec:71:7d:19:3a:6d:58:5f:83:f8:d0:f6:bf:f8:02:c6:bb:ea:
27:f7:18:02:74:ab:26:be:75:56:65:9f:a9:fc:96:6c:68:46:
a6:67:b7:02:ae:90:85:a6:10:52:b1:d1:09:55:43:8f:74:ed:
dc:65:68:29:80:3d:b3:24:2a:83:b2:e6:2c:84:05:65:47:f2:
8d:be:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:09 2025 by rpki-client on console-fra.rpki-client.org