Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: wYay97M9LcyBt1nKyPStGcrWTQzzBOhb7MS7Q9sE/1M=
Subject key identifier: 31:F7:50:97:B4:6C:0E:1D:20:F9:2D:17:D4:8F:BB:40:63:65:12:10
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 0194BA842F12EB3AC8A85B7D76AEBB02A61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: +I6yASW2HjZiCwjFnjLgKKKQRO9B2QwkLClkc9L7qF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2f:12:eb:3a:c8:a8:5b:7d:76:ae:bb:02:a6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=31f75097b46c0e1d20f92d17d48fbb4063651210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:e3:5e:8a:35:d2:9c:ad:f4:68:93:50:71:
cf:e8:5f:bc:4d:1b:2b:90:37:fe:fd:90:76:35:15:
ce:2b:16:89:a1:81:cb:2a:5b:e9:86:c7:b5:a1:0f:
1f:17:1d:6f:38:57:cb:2e:88:93:b6:4b:f9:9d:6c:
81:f8:5b:94:68:8e:80:69:45:47:3c:9f:88:dc:91:
19:c4:b6:3e:b1:8b:4e:e6:c9:78:e0:ce:94:db:e1:
85:1f:9d:e3:a6:72:06:9c:0a:e5:c4:a0:b8:36:5c:
51:cd:1b:eb:5e:7b:b6:3a:15:c8:a1:64:7b:22:ca:
f4:8c:a9:e3:df:04:e8:86:8f:fb:93:d4:01:a2:bb:
7e:ac:94:1d:97:b4:b4:59:23:3b:7e:58:b6:0c:c2:
19:b4:40:2e:db:13:65:7e:d4:b3:e9:b8:50:32:c6:
c4:1f:9d:0a:eb:c2:62:e7:50:d1:8f:40:4c:66:4c:
e0:7b:07:7b:7a:b7:a3:d3:ec:f7:cf:b8:5a:2d:5a:
a4:a9:93:46:2b:9c:37:64:26:ef:8a:15:76:08:a0:
45:08:4c:0f:7b:7c:62:5a:d9:30:18:b3:9a:2f:bf:
4f:38:20:f6:03:27:f8:c3:e6:c4:4e:d3:6f:ff:d4:
8b:38:d6:3e:a9:a7:b9:d0:5e:85:30:d0:db:5d:b6:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:50:97:B4:6C:0E:1D:20:F9:2D:17:D4:8F:BB:40:63:65:12:10
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4b:02:30:11:55:17:c8:86:d7:06:92:c5:27:93:57:87:1a:
70:71:57:1a:0a:92:ec:ea:03:21:37:35:ff:0f:6d:40:c2:06:
44:d0:ec:ea:0e:46:9c:ac:8d:95:87:2f:69:06:e8:e9:30:cf:
e4:be:80:15:74:93:94:52:7c:bb:07:ef:41:4e:34:0f:89:8d:
ac:3b:0d:cd:e4:a0:fd:19:a2:1d:bd:14:ae:3c:65:9c:13:b1:
9a:f1:6a:d4:f3:db:63:98:e1:00:27:34:4c:42:7f:f4:b5:ae:
d6:d8:21:cc:98:24:cf:8b:f9:a4:de:9c:c5:34:73:17:43:d5:
78:ae:14:c8:77:26:fc:45:af:2c:95:8e:42:d0:2f:f6:82:f5:
ed:ca:35:bd:60:61:e7:96:b2:8a:70:73:ac:fc:0e:59:fb:67:
13:c7:8b:d1:09:c8:21:f5:3a:78:86:31:5d:d3:7a:e7:dd:b1:
4c:1f:ce:9d:a4:82:d2:36:ff:7b:86:98:16:c3:1c:12:3d:13:
18:e8:e1:49:4c:e7:70:4a:73:8a:f7:bb:29:27:d6:67:3f:7f:
aa:a3:d8:e7:f9:7c:8e:bf:2d:61:f6:8d:b7:35:ce:2d:78:0b:
54:ad:73:5b:8d:f1:b4:68:21:ba:6c:49:7e:b4:e5:a0:29:e0:
d2:00:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:49 2025 by rpki-client on console-fra.rpki-client.org