Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: P1brK09qitlyo6sJ5UBlIq5GJRcFfcm/kpdf6hYpEw0=
Subject key identifier: 22:88:45:6E:6B:5C:6F:84:0F:A0:C6:9D:7B:80:72:45:02:74:2F:BB
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0194BABB65ECA39A09BF0A4C8AF22E6B781F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: Rv/MaMUCEU3KLR4AKTkpLRMWtW5rF0AcRvYGp2gZpwY=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:65:ec:a3:9a:09:bf:0a:4c:8a:f2:2e:6b:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=2288456e6b5c6f840fa0c69d7b80724502742fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:b4:6a:70:2d:eb:f6:cf:1c:59:5c:2a:bd:
65:ea:a1:0c:f8:de:0d:e4:19:db:99:ab:79:4d:04:
85:dc:19:04:ff:e4:9d:7e:51:08:1b:38:d5:21:5c:
a2:63:ba:37:e2:65:43:19:07:8c:76:23:e0:c8:7f:
09:a5:04:d9:4f:b9:5e:63:7e:63:17:7f:61:82:fc:
5b:af:8d:85:36:d5:44:c7:bc:c5:68:7b:07:c7:41:
b6:83:05:ac:2c:3e:c0:dd:af:75:d6:f1:0f:34:fc:
68:3d:93:da:4b:c2:eb:2d:e7:f7:c0:69:ef:8e:00:
81:64:15:07:fa:13:e4:53:41:80:d5:3f:e0:b0:11:
a2:0c:97:73:05:ce:c9:a4:b6:71:7e:86:8a:b0:f3:
7b:45:2d:94:48:b0:c7:fb:df:3b:d2:fe:74:7a:e3:
5b:f0:73:ed:60:c4:4c:71:b9:48:18:6a:09:f7:88:
33:3f:8c:46:c4:db:b8:dc:46:8d:5e:14:c4:8e:2e:
6f:fc:74:92:1c:cf:5d:af:42:27:f8:28:84:59:5b:
fe:53:ad:a2:95:5b:80:d6:3d:89:af:ca:71:d9:a6:
8e:d4:ff:1a:4a:c2:cd:38:ab:33:ce:69:01:b8:d1:
ce:3c:df:1a:04:0f:f9:63:a1:9c:3e:1c:1f:fd:e0:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:45:6E:6B:5C:6F:84:0F:A0:C6:9D:7B:80:72:45:02:74:2F:BB
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:ad:88:6e:78:25:02:91:3a:9b:1a:45:65:7e:3f:d5:26:
4c:cf:96:b6:90:15:c6:fc:e3:40:b2:95:48:73:f4:b2:d8:43:
a8:89:8d:fe:20:87:f4:b6:93:53:af:a3:16:e2:8d:25:10:ac:
fb:4a:00:24:ba:78:1e:c8:a9:8b:a9:2d:4f:68:f6:1d:96:bb:
24:64:a3:51:13:f3:83:61:43:9f:d3:69:cd:a0:7a:6b:23:91:
ea:2d:77:86:03:17:a0:13:86:2e:4a:88:f6:84:e5:f3:dd:b8:
a2:6d:ce:d0:02:e7:03:74:97:00:0f:2f:44:ae:d3:b6:d1:a1:
96:3c:1f:30:75:43:33:d0:20:2f:ff:ce:09:1e:12:50:77:fa:
ff:3e:4c:37:0f:23:a3:5f:9d:b6:50:99:40:b7:71:3d:ca:6d:
00:ff:97:aa:2e:e4:54:1a:a1:9c:ed:c5:4b:41:5c:5c:f5:f9:
c9:f5:47:77:5e:3b:28:1f:72:ef:9b:27:73:8f:18:fd:ba:52:
fc:c9:93:41:ad:81:33:e7:f9:cc:c8:25:3e:66:00:70:20:92:
68:85:ef:a5:6d:fe:8f:97:c4:9b:26:9f:eb:7a:ae:58:a0:b0:
73:fa:b3:85:26:69:67:36:2e:cb:62:30:1a:49:88:ee:76:4c:
7b:f5:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:59 2025 by rpki-client on console-fra.rpki-client.org