Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: OM6062WnEcPMdwywmriH/SOFDkOW977i0EtVRD3nCVM=
Subject key identifier: 8E:61:35:A7:B3:7B:F3:B6:8D:42:99:E4:64:86:B9:EB:F2:A1:17:B0
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0194BB96F40B59B3909DB0BA270BB9FA7B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 09:00:19 +0000
Manifest this update: Fri 31 Jan 2025 09:00:19 +0000
Manifest next update: Sat 01 Feb 2025 09:00:19 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: /pf9NQAxZQiBsCZF9jpocs1MI2WmR6rGG28RRc/EyZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f4:0b:59:b3:90:9d:b0:ba:27:0b:b9:fa:7b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jan 31 09:00:19 2025 GMT
Not After : Feb 1 09:00:19 2025 GMT
Subject: CN=8e6135a7b37bf3b68d4299e46486b9ebf2a117b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:40:cb:ae:f0:57:ed:20:b3:c0:65:78:71:
9a:16:bf:4f:0c:9f:1e:b0:ac:3f:44:38:98:33:cd:
4c:dc:5e:af:5d:61:d6:9d:08:94:19:fe:94:7c:d0:
6f:0f:75:ab:1a:ae:41:63:2f:06:60:d1:2b:7e:43:
7f:36:ad:27:d3:ae:c7:6b:68:1b:5a:8e:51:de:20:
13:fa:44:8d:b1:df:0b:8b:4d:8d:47:53:53:99:28:
2a:58:83:45:51:74:56:55:de:b6:6b:d4:71:49:90:
17:8b:26:df:cf:de:4a:52:3d:d5:e1:79:07:4b:38:
7d:2f:f3:c3:b4:8f:b5:40:5e:be:77:41:59:20:7e:
74:2b:e1:da:6c:7b:3f:9a:8c:7d:05:ce:e4:da:34:
a5:12:dd:2c:ea:6f:b4:bd:70:5d:74:32:72:bd:b7:
09:47:91:1b:51:84:ef:b8:69:2a:04:ea:14:da:a1:
ba:79:b1:47:a5:32:01:cb:07:39:6c:11:f4:44:93:
03:fe:b2:19:66:40:55:58:80:3b:2c:b5:44:53:83:
80:eb:0f:00:c5:0b:a6:c0:15:62:b9:b0:36:6d:b8:
67:ab:51:dc:8f:01:c2:f1:d8:84:1c:f4:aa:41:72:
38:b7:f9:cf:14:0d:0f:01:83:38:25:3a:d3:69:66:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:35:A7:B3:7B:F3:B6:8D:42:99:E4:64:86:B9:EB:F2:A1:17:B0
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:59:c6:55:bd:9d:21:f8:e9:c3:ed:ac:29:06:05:0b:1d:94:
b1:b5:0f:de:eb:d2:6c:9e:b2:39:d7:f4:98:51:df:02:70:63:
ae:b9:69:33:28:e8:7e:6b:9d:f0:91:e6:fb:d6:4c:60:06:09:
0f:37:14:5b:0e:8e:f8:20:76:5e:b9:2d:72:63:e7:c7:6d:31:
8b:33:c8:5d:c1:2a:b2:ea:12:5d:f3:af:1e:74:f2:30:c8:6d:
51:81:17:01:06:5b:62:09:26:31:da:3e:88:98:eb:73:44:be:
e6:22:ec:14:1d:30:e7:3b:77:93:a2:da:d7:88:29:d5:53:57:
19:b7:dd:16:58:d6:0c:ee:77:7e:3b:a3:ff:7b:0a:23:67:34:
c6:a3:70:b9:1c:48:10:f1:64:4e:07:c6:63:ee:d5:82:5c:b0:
7f:61:c2:6f:38:08:90:b5:df:b8:08:14:68:94:8f:75:5c:18:
34:0b:57:8f:89:c9:77:c1:b6:00:73:87:83:54:33:09:96:46:
b9:f9:1c:c0:54:fb:a2:18:5a:46:46:6e:26:97:7d:6e:f2:4e:
44:55:98:af:29:9a:eb:6a:ad:28:3d:53:87:27:ae:b1:12:2c:
9c:54:36:39:95:6c:a5:97:a6:3f:cf:90:04:36:63:85:8c:29:
a4:e1:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:27 2025 by rpki-client on console-fra.rpki-client.org