Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File: L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier: 4DFaG6cmdbJhaBvpPJE2vNDRGsvVySZojedH5wJiOUM=
Subject key identifier: D3:FF:AD:EF:FC:61:9D:27:D1:02:8E:84:A9:7D:85:0E:93:69:06:0E
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 0194BAF2108A3E6561BB17066DCCFCD2AA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:13 +0000
Manifest this update: Fri 31 Jan 2025 06:00:13 +0000
Manifest next update: Sat 01 Feb 2025 06:00:13 +0000
Files and hashes: 1: Fezrzno06jPF9kifbXHX27nmWc8.roa (hash: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=)
2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: Rgg2TEXjFkftuwipvaNHfuWp7Z+Yj0/WMK0SKhc5apM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:10:8a:3e:65:61:bb:17:06:6d:cc:fc:d2:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Jan 31 06:00:13 2025 GMT
Not After : Feb 1 06:00:13 2025 GMT
Subject: CN=d3ffadeffc619d27d1028e84a97d850e9369060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:01:0a:3d:0a:b6:16:16:2f:7b:65:47:e8:
69:87:6d:b9:43:82:7c:20:b9:06:29:4f:ac:1f:72:
a6:5f:be:c9:05:9a:92:2c:27:ad:3a:4b:a6:b5:85:
3c:5e:95:24:af:c6:3d:da:21:a9:47:e5:07:c5:9e:
a3:d8:de:7e:59:6a:0d:28:03:13:75:b1:b7:1d:f1:
e3:36:52:d0:90:ce:36:71:dc:46:e2:85:1f:08:8b:
79:e1:75:9c:67:20:bd:20:14:60:03:bd:93:af:f2:
b9:63:ce:06:c5:fa:a8:5a:d3:22:de:e8:2b:95:57:
65:aa:f2:0c:22:05:d2:bb:c1:02:5f:cb:b0:3f:95:
cc:c1:28:13:54:54:26:ad:fc:de:aa:f9:26:a5:51:
bd:c8:ff:b9:14:f9:72:d4:9b:41:95:5e:64:d3:a2:
bd:7b:78:95:a0:05:c2:a4:f3:ab:0c:f7:a6:bd:d9:
e4:b0:fc:81:38:dc:47:49:ac:c6:88:06:22:59:6a:
80:fc:2a:97:c9:48:df:9e:b2:aa:a1:d8:ec:77:54:
c0:f9:11:50:0e:22:eb:4b:f8:8b:34:fe:7d:b0:73:
d1:f3:a4:44:ee:1f:56:21:56:71:b3:3c:5e:fb:a7:
49:3e:b8:e8:1e:04:49:a8:fb:68:69:6e:eb:f5:07:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:AD:EF:FC:61:9D:27:D1:02:8E:84:A9:7D:85:0E:93:69:06:0E
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bd:8c:22:49:a4:97:c5:56:6d:73:58:88:4e:da:a6:ae:ff:
ac:79:9f:79:c3:94:6e:8a:32:04:66:b0:cc:1d:58:e8:43:2a:
b9:da:26:5b:a8:6c:b6:76:9c:43:0b:97:c6:31:21:61:3e:86:
ea:89:96:40:13:50:d8:33:bf:07:c1:4b:a0:38:2d:62:82:e0:
86:ff:2c:1f:46:41:ad:49:4d:94:5b:06:c8:a4:68:e7:b8:fc:
05:69:7d:c8:49:87:aa:b9:af:3d:6d:11:24:59:5e:9c:d5:b0:
ac:6f:eb:1e:31:fa:4e:b9:a2:ca:d2:06:f5:1d:42:77:b0:09:
37:7c:0f:d1:57:48:15:d4:a8:82:75:df:00:7a:10:77:93:ef:
8f:14:8d:ae:91:8f:1d:91:0e:cb:b0:81:68:cc:f1:c2:c5:41:
6a:5e:26:59:4f:3c:d3:c9:17:d6:3b:6d:e9:a4:33:e3:59:22:
72:57:d6:c1:00:8f:1c:b5:55:7c:32:5d:b4:5f:6e:27:f5:42:
d8:cb:46:41:d3:94:28:63:b1:95:cd:07:33:fe:df:f6:58:77:
27:f6:d1:0b:1a:ea:34:4e:45:fd:16:5c:41:8c:30:40:be:94:
c7:6f:23:e2:e1:67:65:b2:3d:c9:27:64:7f:ef:73:a1:05:d6:
cf:c0:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:26 2025 by rpki-client on console-fra.rpki-client.org