Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
File: dLM_sg3VV80LFO3-EIgPDg0hxSk.mft (raw, json)
Hash identifier: QXAEXa90E4bv2U5i3HfrQfjLfNf3FUNaTW/RwshyIEk=
Subject key identifier: A6:B8:B9:A6:11:A6:86:D3:51:FD:27:6D:58:D2:A4:70:75:97:F8:02
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 0194BA84828F741BA63E36927A72AF46112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: 7XzhjrOg-Z7qBV45mobEyhWoPO0.roa (hash: PcT7axGWrzmC1UC4BdMVD7KNq4KOcnvcH7qwOmp2S40=)
2: JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa (hash: bYm30H+hk6LyQs89QWpfVlG6uGHxd4o6fuhs92pT8Og=)
3: dLM_sg3VV80LFO3-EIgPDg0hxSk.crl (hash: R4CSn260dlI1LdtQ/Mbr8iLWk/vo+tWrpt2MgjKMjdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:82:8f:74:1b:a6:3e:36:92:7a:72:af:46:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=a6b8b9a611a686d351fd276d58d2a4707597f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:1d:1c:e9:b0:86:28:21:90:69:3e:a2:38:
d4:df:9e:aa:8c:c5:9b:33:95:05:6f:9c:59:ac:a8:
3a:8b:91:ea:90:65:be:ae:fe:e7:64:cf:0b:0c:e4:
dd:be:f4:ec:36:20:2e:39:f5:b6:47:55:5a:89:9b:
9f:eb:d6:58:17:4a:1c:07:d3:a9:c5:7b:04:2b:d7:
43:f0:a6:fb:b7:34:31:c9:16:84:b9:d2:b3:e6:45:
75:e9:69:2f:a6:34:f9:ad:26:07:19:c7:38:40:97:
29:24:da:c1:21:df:ad:f0:d6:00:68:bc:d2:b5:21:
1c:6e:1c:7e:ee:f2:c4:6a:b9:8b:89:06:d8:1e:86:
f6:4e:f2:53:7c:ac:0a:25:78:75:40:2f:8e:36:84:
24:35:b8:0b:5e:d9:13:92:55:c0:e8:52:9d:60:73:
32:eb:6c:c6:bd:9e:30:44:cd:0c:57:c1:95:ea:06:
72:b3:0b:49:e4:bf:ce:92:a7:61:a0:e6:0b:95:21:
ab:1a:35:ce:d1:73:80:5a:5e:00:56:c9:fb:b1:2c:
c7:52:7c:f9:b0:c2:fd:e4:6d:3a:5c:9e:5e:3f:94:
c1:da:ec:c6:7e:0c:5e:1f:b6:c4:c2:94:78:0b:74:
35:31:c0:aa:03:ef:23:75:d7:4a:a0:e6:58:58:db:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:B9:A6:11:A6:86:D3:51:FD:27:6D:58:D2:A4:70:75:97:F8:02
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:0f:0f:6d:a8:21:fb:80:79:76:83:e4:ba:77:d0:23:2f:
8f:d3:7d:04:59:e2:4c:aa:5a:57:90:82:8a:e4:5a:95:91:e2:
37:ba:51:6d:34:f0:41:aa:9c:4c:0a:f8:30:c8:27:fd:46:8c:
9a:5d:a9:62:7e:17:c4:f9:27:d1:a0:7d:1e:bb:9d:17:fc:f9:
6a:bc:b7:a6:19:4a:97:ee:78:78:53:53:19:e9:3f:e6:f0:fe:
fc:3d:86:bc:25:83:e5:03:5d:51:1b:27:dd:2b:64:95:e1:c6:
ab:73:cd:91:ec:15:96:62:a4:dd:c0:68:69:fc:59:65:5d:95:
ba:d8:3c:15:2c:51:3d:d2:8a:16:9c:1d:9c:86:bb:2d:66:ea:
ef:c6:7d:58:af:92:be:d2:17:f0:6c:27:74:83:5e:b2:40:1b:
2e:06:5d:f1:dc:bd:2e:da:11:ce:88:d7:cd:f8:0e:a5:5d:26:
e6:0a:5f:b3:1f:57:f8:22:9d:91:78:08:c3:60:f2:58:53:dc:
13:c4:85:f7:8f:f6:e0:bf:5b:67:1f:f5:58:3c:0a:79:20:77:
e4:17:01:e1:4b:26:11:38:70:e1:db:c4:2a:a4:bd:b3:ed:d0:
5a:a3:ee:5e:e2:87:5c:2a:fd:6c:5b:3d:3d:4e:84:4c:91:9d:
9b:1b:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:15 2025 by rpki-client on console-fra.rpki-client.org