Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: 1CrsQcWZ7x3+R1VQNf8TqegZ1ujmTtTSEpNScbSUhx4=
Subject key identifier: B3:E9:E9:FE:DB:61:AA:00:C0:91:92:EF:A6:06:87:E9:72:A2:94:22
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 0194BA84255137F0DABD9520BEA54008AEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: tZwlCeQVksmEAT0rmU0DGK+IuxXKQgAKwam0plex0yo=)
2: EZYeVV1sSE-2JpbNlwV7wPbYnOo.roa (hash: ikr2sxni9DwwzkUepDYlmJ4xAXRqZ6YMknDRjY0uwRw=)
3: zFb9es3uXkPMd-ugsb3acKq2kWs.roa (hash: CpgoliFvyxru2zXx6gfrBhmQolzdlTSAa5FPVi8Uo/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:25:51:37:f0:da:bd:95:20:be:a5:40:08:ae:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=b3e9e9fedb61aa00c09192efa60687e972a29422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:29:b1:3d:7a:21:a5:d6:03:69:d4:d2:08:
ce:73:5d:ca:8c:22:8b:40:df:ad:8c:73:eb:6d:15:
e4:ab:76:a7:fd:5b:d7:06:ad:e8:51:c1:e2:b4:ad:
5c:a1:5e:de:6b:a4:b4:62:10:2a:4f:77:6a:bc:2e:
cf:e6:97:98:ea:76:aa:00:e2:21:b2:7e:75:da:fb:
0b:f4:57:ba:c6:04:b9:79:c3:9e:91:7f:7f:fd:0c:
35:ad:00:12:95:61:cb:bb:a8:f7:3a:eb:99:3f:bd:
25:58:52:26:b4:fa:70:76:31:fc:6c:9b:2f:42:b8:
cc:5e:94:28:4e:c8:01:da:4d:ad:e0:dc:7f:b1:6a:
ed:49:b1:c5:41:ea:2c:56:00:60:92:93:11:31:75:
c6:47:6a:d6:01:bc:6e:c6:4c:97:c0:64:8f:b9:cf:
f5:d6:41:bb:ae:b3:d1:1a:d5:92:ec:46:6e:f8:c1:
26:1c:2f:0f:ed:36:e0:e9:6c:34:47:ed:d9:f8:c0:
f2:70:0f:12:94:6b:9f:1e:9e:19:d3:83:03:dd:b2:
04:65:1a:a8:36:00:46:4f:51:65:01:af:1f:c5:87:
68:f8:b7:b1:5e:fe:6a:f2:e5:39:81:1f:8b:79:0b:
fe:5a:29:2f:0e:d8:71:9b:9c:04:49:e2:5a:c1:70:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:E9:FE:DB:61:AA:00:C0:91:92:EF:A6:06:87:E9:72:A2:94:22
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:1d:b4:7b:3f:f1:0e:5d:35:f2:52:0c:6b:ab:de:b3:60:
9e:4d:b9:b5:11:07:6d:c6:c0:6d:de:48:fb:97:74:51:cd:53:
0f:a5:eb:30:1e:ae:c5:97:44:af:28:df:bc:42:5a:38:9e:08:
1b:e5:c9:80:d2:91:2f:71:29:9e:5f:b5:40:9b:66:36:65:a1:
68:97:dc:3b:8b:09:52:49:3c:b3:78:b5:b6:dd:cb:c9:e9:9c:
01:21:bf:90:c7:c6:70:32:db:b6:c8:a7:95:17:6f:f5:53:40:
ae:48:db:c7:96:9a:4b:58:18:fe:04:5b:b2:68:3d:ae:05:65:
98:49:88:9a:28:99:70:5b:a3:a4:71:a5:ae:7e:7e:5b:ee:9e:
01:f2:29:24:e6:ee:fc:e2:fe:da:57:da:ba:e0:5e:09:f9:42:
d3:d0:d5:11:2b:97:3d:c7:05:0e:60:de:94:a7:a3:f9:80:70:
24:6f:5d:fa:8d:f7:23:fb:31:c5:91:15:d7:b1:95:aa:f2:5f:
cb:3f:ee:3a:ca:bb:6f:04:84:f4:76:13:4e:03:26:fc:e8:8e:
0b:96:a5:02:e8:65:ec:0b:a3:ef:50:57:72:db:1e:59:74:76:
6c:c0:26:de:a9:78:bc:46:e6:f3:84:c4:1e:8e:89:1a:f6:ef:
ec:73:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:40 2025 by rpki-client on console-fra.rpki-client.org