Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: 9Mx4krkjUz/LsQ4ZgRM7NJ/vCnXtJeRmwX5hr3c0w/M=
Subject key identifier: CE:35:7A:8C:D8:A6:06:B7:0D:95:13:22:72:AE:F6:71:2A:79:36:19
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 0194BA846AFC0854B58FC2EB81F4FC925997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 116E
Signing time: Fri 31 Jan 2025 04:00:27 +0000
Manifest this update: Fri 31 Jan 2025 04:00:27 +0000
Manifest next update: Sat 01 Feb 2025 04:00:27 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: EMwR3lusShabP2tebju77gBjvAkYl/rtJ11pQpKGFZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6a:fc:08:54:b5:8f:c2:eb:81:f4:fc:92:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Jan 31 04:00:27 2025 GMT
Not After : Feb 1 04:00:27 2025 GMT
Subject: CN=ce357a8cd8a606b70d95132272aef6712a793619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:1a:79:ec:24:a4:5f:c6:a1:32:60:70:3b:
10:4f:38:55:e9:32:48:78:74:ba:54:4a:61:e3:a5:
96:69:14:3a:a3:1b:d7:0a:82:0f:51:b1:f1:b7:4d:
28:ae:3f:bb:45:b1:d6:03:b5:ac:04:e7:92:b4:f0:
da:0d:9d:c3:be:88:d7:3c:c7:14:c5:cf:80:e4:6e:
8c:40:b1:71:37:dc:3d:ec:7c:af:fa:9d:a9:41:a9:
4e:df:50:5a:00:69:89:a5:0d:54:2f:f2:80:e8:93:
62:8a:b0:a6:85:f8:14:d6:e3:00:5b:99:60:bc:0d:
4e:b9:22:d5:fc:3f:c6:93:1a:09:8c:9e:28:25:d7:
d3:d3:97:3a:f2:a5:95:91:06:cb:e3:62:63:6a:df:
8d:13:2e:35:9f:9d:62:6e:90:46:ad:77:09:f1:c4:
fd:a2:a6:dd:e1:dd:e5:44:1d:ce:5c:be:9c:d8:6f:
1e:b1:e0:ca:ac:fa:6b:79:de:41:4e:ed:03:a9:bf:
62:38:8c:f9:45:eb:77:2b:60:4a:b4:12:eb:24:f0:
a0:53:ab:ce:19:bb:d6:96:12:17:ac:b9:2e:64:6e:
39:f3:22:c1:fc:76:4d:ee:29:68:95:b3:71:34:01:
a0:4d:41:1d:bf:5d:0e:b5:bf:cd:26:c4:bc:aa:c2:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:35:7A:8C:D8:A6:06:B7:0D:95:13:22:72:AE:F6:71:2A:79:36:19
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:9a:d9:22:98:01:45:5f:2d:13:15:0c:df:6a:30:c3:af:
26:bf:9e:35:bd:e5:74:13:cc:7e:72:56:c4:1f:b3:a9:a6:1d:
0f:47:0d:80:5f:50:8e:36:14:95:b9:97:8f:65:56:e7:6b:c5:
24:bb:cb:b1:67:9f:d3:a5:b7:fa:a9:ba:0e:53:00:d5:07:58:
c9:7f:31:2c:f8:d4:0d:5a:6a:f4:f5:0e:e1:f3:b0:8a:6e:d5:
92:0d:f0:fe:42:09:51:a8:e8:3e:ee:bb:bb:4e:22:da:3e:ef:
bf:12:ac:0e:d4:a4:57:d6:19:4b:cc:f8:65:09:40:b0:36:4a:
50:1a:09:36:2d:cb:ff:ae:48:76:c1:27:71:d4:f8:8b:9e:5f:
47:e9:f2:ce:de:d6:2f:c6:61:19:0a:83:f4:8f:55:95:6d:77:
35:c9:c5:aa:12:83:01:6a:9f:a5:32:cb:5e:8a:2f:b6:4b:be:
19:0a:df:fd:69:c4:ad:76:bc:4b:c3:e9:a6:99:1d:e4:c7:95:
aa:f8:ff:d7:14:4d:c1:3d:6f:ae:9d:63:1d:79:1e:34:41:2b:
da:c0:00:06:b2:73:c6:17:ca:b6:c0:31:9e:88:b5:18:fe:3f:
5f:4d:cf:f8:46:f8:75:43:ff:f1:13:55:cd:55:26:81:6e:fd:
15:f7:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:16 2025 by rpki-client on console-fra.rpki-client.org