Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: +Gunk/m6OTjRzAa4o6OA5uzvr9bVJBNMZI4722jrnfI=
Subject key identifier: 6A:62:70:DB:BE:27:8B:61:D5:C8:C0:DF:84:92:31:D9:83:71:5B:7A
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 0194BB972006D49F49E18A76B6B43A53D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: zq2QmujQ9pKXnSIsUHhl45+CukGo3cBZzJw67l1eglM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:20:06:d4:9f:49:e1:8a:76:b6:b4:3a:53:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=6a6270dbbe278b61d5c8c0df849231d983715b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:31:28:62:46:41:26:31:0b:2b:dd:49:f9:
11:4f:c5:e5:d6:c8:4f:3b:91:5b:9f:f5:02:0c:10:
33:2a:04:14:5e:3c:fb:fe:6d:75:b4:e6:85:c5:3f:
f2:fd:74:96:ea:54:fd:8d:cc:c0:f8:3d:5d:0f:bf:
20:0e:ac:a4:f1:0d:ce:f5:de:0b:e5:a6:2b:3a:e3:
a0:bb:af:b3:b1:9a:1f:cb:be:04:d2:26:25:6d:9b:
1a:1e:ea:3d:8a:fa:14:ff:23:7f:0c:97:e6:8b:a7:
4f:e9:8f:ad:a3:57:0e:82:99:db:a8:3d:7f:ba:84:
80:18:3f:2b:dc:d8:71:48:de:01:ee:ae:35:6b:ae:
d0:40:64:d4:37:8a:d8:66:d6:50:60:c1:62:17:49:
b2:4d:49:76:16:b7:a3:0d:09:71:1e:fa:b2:8c:f8:
90:f4:21:e2:d7:2d:a2:b2:d7:1f:9e:9a:b3:a9:41:
73:cd:60:f9:c3:42:45:1b:a4:56:81:eb:42:02:cc:
2c:3d:88:f0:03:f5:19:07:fb:07:d7:e5:31:fa:3c:
a8:66:e4:48:1e:0d:0d:db:74:e1:a9:73:7d:56:03:
89:32:91:c2:c0:12:31:59:08:97:1d:e3:f8:79:61:
70:ad:98:06:d2:ec:0b:8b:b1:9f:c6:8f:c1:f8:18:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:70:DB:BE:27:8B:61:D5:C8:C0:DF:84:92:31:D9:83:71:5B:7A
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:ec:af:de:bb:03:60:09:9f:ac:2d:74:10:f1:e9:7a:ca:
e1:3e:4d:a7:f8:99:9d:f4:b3:45:56:44:dd:06:be:f9:5d:06:
97:66:c8:d5:df:03:3d:22:da:14:ff:98:53:58:0b:4e:b8:e9:
bb:bd:41:d3:d7:ba:b7:c7:b4:0b:aa:0a:73:71:87:af:08:15:
92:38:0a:41:fc:c8:4b:62:88:8b:4c:5e:58:90:05:d5:25:52:
15:96:de:f9:ab:64:cc:be:f2:35:d1:c4:ce:ac:78:fe:af:bd:
85:c7:81:89:be:16:c0:ee:83:df:64:f3:0e:4d:a0:26:da:f9:
be:0b:b6:f4:a9:cb:be:2b:c9:da:38:13:7b:16:5e:d7:fb:50:
74:7b:71:40:3d:61:46:e2:b1:fd:c7:29:b4:c6:c4:a7:d7:d9:
6b:50:5a:78:08:8d:30:41:38:ca:9f:28:23:c7:fd:4a:99:cd:
e3:8a:79:1a:f7:62:a2:82:16:cd:6a:e7:f9:26:e2:7e:60:2a:
6b:c2:35:63:f6:7e:63:78:8f:66:4f:43:c2:92:17:cb:ac:f8:
75:23:b8:d4:e2:c9:67:07:2c:80:c2:3e:36:7c:3b:2a:86:01:
6f:8f:92:c8:42:a8:f2:d6:0e:9a:15:ed:46:f2:5c:ff:62:07:
26:f2:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:46 2025 by rpki-client on console-fra.rpki-client.org