Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: YSWegF4XFWuo/2KqRG6iaf7XUsN18L5jBMO92DEC8is=
Subject key identifier: 6F:C7:58:D8:38:DC:D5:18:96:D0:B6:67:69:D2:7C:C6:FF:F9:1E:EF
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0194BB2917160686C43009C09432D50BA2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 07:00:19 +0000
Manifest this update: Fri 31 Jan 2025 07:00:19 +0000
Manifest next update: Sat 01 Feb 2025 07:00:19 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: JdLCPx1Dn8PWEYQwnOQ8sptP+sUqdmnTnamKiblcJf8=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:17:16:06:86:c4:30:09:c0:94:32:d5:0b:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 31 07:00:19 2025 GMT
Not After : Feb 1 07:00:19 2025 GMT
Subject: CN=6fc758d838dcd51896d0b66769d27cc6fff91eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:46:4c:0f:d1:b4:f3:6e:ff:b2:68:52:65:c0:
b0:b4:1b:34:7c:c9:59:7f:fb:b1:35:62:bb:bd:be:
a0:aa:36:d7:11:51:5d:ac:6f:a6:6f:37:b0:c6:f2:
2f:8f:ce:bf:de:c8:ab:23:c0:03:3a:af:b8:17:e3:
80:35:32:bf:88:cd:a5:9e:b8:a6:b0:24:6c:fb:09:
b6:cf:47:4d:a6:42:93:b4:0b:02:d4:58:ad:02:53:
bf:77:46:17:58:a0:93:f8:29:51:e6:50:fa:84:fa:
ea:9a:34:66:f8:34:fe:a8:cd:dc:67:5c:e0:fa:e4:
06:91:d1:4b:c8:01:c5:94:63:7e:55:c6:8a:01:04:
58:bc:62:c8:23:20:db:3d:b8:63:51:10:5d:89:2f:
f3:c0:3a:97:7e:03:f0:db:09:7e:7b:4f:f0:3e:31:
01:c1:20:e3:26:ce:30:0a:96:52:64:2d:f0:51:86:
f3:42:c8:f0:c5:14:df:90:93:75:9b:5b:63:cf:1c:
b6:77:88:49:78:81:ea:1f:d4:52:1c:79:3a:25:61:
42:38:4f:9b:7a:7a:4f:35:b9:80:c9:00:5e:5a:a9:
91:e2:20:90:01:1e:18:e6:aa:87:00:b2:42:23:cc:
91:16:02:16:ed:47:cb:9d:c3:c8:3a:59:6e:91:12:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:58:D8:38:DC:D5:18:96:D0:B6:67:69:D2:7C:C6:FF:F9:1E:EF
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:aa:cf:70:0e:4a:7b:5f:db:b2:db:92:3a:58:16:0b:68:5b:
e9:b3:38:5c:d2:8d:12:50:52:36:11:31:5f:1f:6c:d3:3e:7f:
c8:75:04:8d:12:11:6f:de:aa:73:22:6d:a1:4b:65:00:6d:51:
51:2d:31:1c:8a:32:00:52:b6:db:e6:f5:b7:dc:9d:79:e1:97:
e8:1c:98:4e:38:4f:65:76:75:5f:12:56:97:58:6f:2e:e2:12:
21:59:0d:73:f8:68:b6:06:66:50:f7:84:ff:71:1e:1f:0a:88:
9c:9e:9f:ab:9e:aa:31:d0:96:48:6b:6f:07:4e:38:97:a7:11:
01:04:fd:03:ad:c4:29:3b:c1:d9:f7:a4:11:21:45:43:5b:80:
ee:7b:a6:b1:a8:88:28:1c:68:79:a4:83:86:1f:95:97:09:61:
39:91:af:2e:2e:13:77:5d:71:de:24:4d:45:c5:44:0d:08:d4:
1e:d5:2f:54:3b:ad:15:ea:d8:a8:34:ab:11:d2:cb:f4:96:a6:
82:00:74:02:14:e9:c8:91:60:41:f6:a2:0e:d9:bb:52:fb:49:
6a:90:59:25:71:7d:01:60:f7:f1:59:eb:d0:75:7d:02:9d:3b:
da:d9:77:89:f0:e5:7b:fa:02:d5:43:4e:d8:a5:07:51:43:6a:
1e:75:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:21 2025 by rpki-client on console-fra.rpki-client.org