Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: LjoXVc/JflWBN2a/XXUwzoOs1IyYjoC/RyP/KAQxqHM=
Subject key identifier: 01:94:4A:BB:3E:22:9C:21:3D:88:4E:42:CD:4F:C7:9F:08:82:86:5A
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0194BB5FF343D0D4F7BA1010BA4975093A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0A3E
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: EEGdQVayw6d1uKWW2OuW/ZKe/2UOAU7rzwQCQqDdBzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f3:43:d0:d4:f7:ba:10:10:ba:49:75:09:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=01944abb3e229c213d884e42cd4fc79f0882865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:c9:ba:de:78:b4:51:5b:4a:34:18:d6:01:
0b:96:39:e4:a3:c7:f6:25:ec:ca:5a:d3:da:f1:58:
35:a6:3d:92:51:20:f4:db:df:33:e0:44:96:ec:6d:
8b:65:0e:70:9f:13:84:e5:de:4e:2b:5c:f5:b5:e6:
73:23:6f:ed:1b:62:b1:af:15:8b:e4:ad:dc:b8:72:
1e:03:12:e2:58:3e:fa:51:00:73:93:88:ef:78:ea:
b4:88:58:ad:e5:d2:7f:ac:89:f5:06:dc:7d:d0:c1:
d7:68:45:4f:07:c4:2e:34:c5:30:19:2a:78:14:97:
19:ad:4c:4a:38:13:3c:65:c6:0b:78:71:c4:8a:16:
3e:02:9e:b4:78:66:68:d2:7a:ad:c2:ae:e3:53:ba:
5b:40:df:e0:11:8e:53:3e:11:47:57:59:be:96:ab:
aa:c1:7a:72:83:8e:70:dc:07:d1:af:49:49:71:92:
7a:e5:21:b7:0f:87:69:a9:19:c4:ba:e6:4c:b9:98:
d9:d0:06:62:df:48:b8:54:69:50:85:eb:5b:4d:50:
de:77:b4:39:e0:85:b5:de:1d:7d:e8:bf:c9:f5:12:
21:fb:fb:19:1b:6c:03:a1:1c:c2:5b:60:00:6c:99:
05:47:37:d7:63:4a:71:a5:af:3d:72:6c:c1:93:e0:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:4A:BB:3E:22:9C:21:3D:88:4E:42:CD:4F:C7:9F:08:82:86:5A
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:ef:66:cc:ea:a0:d6:10:49:59:7f:68:bd:3a:f8:14:50:
ac:64:90:ff:a0:2c:c4:b9:6e:8e:11:a2:d5:9c:9e:57:3c:f8:
be:8b:50:b3:58:fd:dc:2b:d9:ab:62:39:64:22:97:69:cc:1f:
ad:21:6d:93:22:87:78:b8:31:5f:32:c5:d1:53:80:ef:5d:2e:
2f:2a:7c:59:29:88:c4:74:8c:20:d6:27:9e:60:78:78:18:48:
69:a2:9a:45:a6:63:26:63:9b:e6:b9:11:d8:eb:94:e4:ab:fa:
76:39:f1:f1:10:b8:34:ca:7a:2b:dc:15:e5:9e:27:d9:cf:23:
8a:7f:3c:7f:66:b7:84:61:29:eb:de:d9:7f:a2:85:53:02:af:
b2:1f:0d:5f:4d:9e:29:97:5b:5d:f1:1b:19:7f:58:d0:e6:b3:
a8:12:1c:24:40:d0:e1:86:5c:11:a9:29:8f:8f:96:8c:70:e8:
97:02:81:cc:3d:46:9c:1d:6e:4e:7b:c0:1e:4c:85:8e:2c:14:
d2:3a:cf:d0:d4:08:f2:6f:db:23:41:97:ac:fb:f4:dc:86:70:
d1:7f:fa:28:eb:fe:c8:e0:ed:61:58:9c:dc:24:1d:34:9f:5b:
b4:84:3e:f5:5f:ce:66:57:06:73:d9:99:14:2b:56:46:bc:99:
0a:89:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:47 2025 by rpki-client on console-fra.rpki-client.org