Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: 10NR21cY3sWyvpV584B+07v0gA5tg2FRU7N8PbUn9Sc=
Subject key identifier: 1F:A1:9E:57:ED:4B:B6:E5:02:2C:34:1C:BF:0D:94:8D:01:CC:A6:79
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 0194BB974F6BFC0F4747FF5ADE047555EA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: gpVjoLBTIgv2CgQ5cyVP2DPdG5zpMOvCoksCKiNJdp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4f:6b:fc:0f:47:47:ff:5a:de:04:75:55:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=1fa19e57ed4bb6e5022c341cbf0d948d01cca679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:de:2c:d4:d2:ab:a3:76:ef:88:13:5b:12:
d5:dd:ad:97:af:14:19:a3:bb:77:71:e3:19:5b:e9:
90:82:ba:d2:78:7b:b0:35:e7:54:09:45:6c:2b:75:
ff:22:15:f1:97:99:93:c4:b6:a2:40:52:41:ac:1a:
cc:06:c0:22:20:64:4d:38:c8:29:c1:c6:69:69:8e:
d0:98:bb:76:18:ae:89:c7:e5:a9:28:4f:c3:7a:22:
73:c8:ee:e4:c9:b9:db:86:63:32:41:9f:54:03:59:
cc:7e:85:e3:74:0e:ba:8d:42:da:69:91:ba:b5:ea:
8d:79:99:b7:75:fb:83:aa:06:82:77:2e:8c:da:99:
db:a2:95:20:c6:6a:d4:40:d1:84:f2:97:32:26:24:
a3:6e:0a:86:47:30:5d:60:b3:b4:00:c7:7b:92:2f:
ef:d7:d2:db:cb:a4:8d:eb:4c:d2:8c:4f:17:5b:53:
4c:e9:d9:c9:5a:d7:c5:d8:7b:1a:5e:2e:c6:31:a6:
f8:fe:cb:99:1a:e6:ee:72:d6:59:c2:3d:fc:47:b1:
51:41:c8:22:83:45:01:a9:ae:c7:ef:e0:fd:1a:7c:
a2:11:76:64:ec:25:8c:ed:b9:86:89:df:98:85:d5:
90:0e:90:da:fe:f5:e9:f1:93:f0:32:d8:07:2d:99:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:9E:57:ED:4B:B6:E5:02:2C:34:1C:BF:0D:94:8D:01:CC:A6:79
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:62:a5:75:d1:bd:a7:80:b5:07:00:40:54:d3:3f:8c:e2:
da:fe:7d:8d:b9:16:2d:e4:f6:43:71:49:64:5e:f5:da:53:54:
2a:0e:73:6c:1a:e6:29:39:94:3e:0b:51:6c:c6:fd:28:8a:ac:
5d:c3:6c:96:2d:b3:86:60:c8:39:0f:80:92:66:f6:47:85:9e:
5f:12:9a:9e:28:a1:56:07:2e:60:da:ef:1d:28:60:55:80:b8:
a3:20:9a:cd:69:91:a1:0b:e7:a7:21:9a:c6:fc:2d:58:cf:53:
61:60:f4:46:22:b1:f6:38:cb:47:1b:e9:8d:1d:1a:cd:60:80:
69:82:0f:34:52:f5:c9:d4:2c:7b:d7:40:6f:3f:50:3b:08:d4:
db:a7:6c:7a:c6:be:d2:a5:ee:92:ac:04:6c:f9:fd:d9:79:30:
df:73:b4:02:15:aa:f6:47:23:4a:c1:bd:76:a7:55:ad:e1:39:
63:32:26:07:3d:b0:85:ed:b0:d2:47:86:f8:c7:73:36:55:10:
a7:4f:8a:75:d4:25:db:85:a7:f4:73:71:6f:d5:72:64:c8:f8:
74:f6:a3:3a:8c:7f:69:28:88:20:ba:82:b3:d8:c5:0f:42:0e:
40:44:cc:0b:1c:1b:2b:b4:3e:de:72:35:2c:93:af:f7:b0:85:
bb:9d:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:54 2025 by rpki-client on console-fra.rpki-client.org