Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: hG3RKCyRv4glW9eKw4i8NDS8acGhBeXEGVbPD6EaN8Y=
Subject key identifier: 54:0F:A0:DC:96:AC:2E:3D:1C:29:E2:D4:EB:6A:86:DC:5D:22:BD:1C
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 0194BB290F38FB7D73932ABD9B17620F0E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:17 +0000
Manifest this update: Fri 31 Jan 2025 07:00:17 +0000
Manifest next update: Sat 01 Feb 2025 07:00:17 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: 7jIe0/gdLIM6b4plluUvlZwmC2ob4THsY1od4KcR6+8=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:0f:38:fb:7d:73:93:2a:bd:9b:17:62:0f:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Jan 31 07:00:17 2025 GMT
Not After : Feb 1 07:00:17 2025 GMT
Subject: CN=540fa0dc96ac2e3d1c29e2d4eb6a86dc5d22bd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:40:7e:18:c6:7a:24:d6:ff:e7:a5:1e:f6:
5d:fa:37:46:0c:6d:55:4d:56:a9:14:ed:6c:be:c2:
68:24:70:fb:09:52:84:ae:c9:fc:0e:fd:4f:09:af:
c9:2f:38:40:8e:0f:93:18:71:15:8f:41:59:59:de:
fa:be:22:2e:31:d7:92:44:9d:73:25:5e:e6:87:be:
5f:a6:73:0d:46:ae:91:21:33:81:ae:02:dc:6f:f3:
0e:88:5a:e6:31:89:97:21:78:2c:d5:ed:72:07:b5:
c0:6e:78:03:a0:69:f4:94:f2:1d:a2:e6:7f:6f:11:
77:e7:0b:d6:9b:b0:6e:93:22:98:e1:7d:74:c9:16:
d9:62:0e:9a:7a:73:bf:48:5b:e9:72:78:9b:29:18:
4a:12:01:ab:07:c2:30:5c:d7:6e:e6:00:dc:4a:ab:
1b:f7:91:4e:45:ae:18:88:aa:5f:53:fa:7c:f1:13:
ce:30:e4:07:9c:e5:9d:6d:59:76:25:e1:5c:91:0c:
59:fd:9b:c4:53:14:e5:1d:84:4d:83:ff:f2:75:55:
1b:f1:78:8a:a9:bf:48:a8:d4:2a:f2:b6:87:3e:9d:
37:d2:94:9d:90:42:7a:af:7c:4e:c2:de:98:26:72:
3a:ed:60:27:02:b2:ea:bb:18:36:01:6b:5f:9e:cd:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:A0:DC:96:AC:2E:3D:1C:29:E2:D4:EB:6A:86:DC:5D:22:BD:1C
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:01:f8:51:5d:30:d7:cb:98:fd:bf:a9:8d:ab:40:f1:7f:69:
86:40:62:ee:a1:43:d7:ee:63:e9:49:c4:d1:cc:0c:11:1a:f0:
bb:f5:18:9f:8d:55:bd:a0:b8:72:30:af:8c:6d:e0:ff:07:0f:
72:63:b0:d8:c7:ff:42:e7:68:8a:33:45:bf:b7:b8:d6:c0:07:
4c:c5:9e:cb:28:b1:95:5f:b7:d0:f7:34:90:aa:81:11:77:2e:
ea:2e:8b:8e:43:63:eb:5d:88:1c:2c:7f:7c:85:0d:81:e5:7a:
44:a6:5f:73:9d:b8:7d:4c:86:3b:fd:3c:94:2f:48:18:23:b0:
88:b9:33:c0:30:7c:ae:1d:f8:06:aa:28:e5:e0:e4:af:b3:e9:
2b:3a:c0:ab:6a:ce:ab:40:80:2d:8a:33:63:6e:97:b0:1d:65:
83:be:de:4b:78:90:18:45:00:85:2b:49:d7:2f:4d:63:7c:53:
97:6e:35:6b:42:d0:1a:5f:a4:de:be:00:78:79:d9:51:fb:e7:
4a:bb:19:1a:34:70:8d:44:fb:ab:69:21:55:3c:8c:7d:06:51:
a1:f6:2e:3b:0f:9a:f2:7d:ff:4d:4e:2f:b1:9b:94:20:61:6e:
0a:71:2a:82:ae:71:91:9e:24:8e:f4:af:9d:76:70:74:0b:3c:
fc:a2:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:02 2025 by rpki-client on console-fra.rpki-client.org