Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: uxUtnkAgmydcJG8q0eoYx/PmrAow73mSRzOGT3MdrPA=
Subject key identifier: EC:99:EB:40:C0:11:09:AD:70:A4:CC:79:DD:57:46:4C:D4:81:63:58
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 0194BAF27E5858A123D7890A17585A7CCA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 11B2
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: Ltkh6q5SYqfa0jCjFfkiTKNrHnf4q4tNljDAy/ttkT4=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7e:58:58:a1:23:d7:89:0a:17:58:5a:7c:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=ec99eb40c01109ad70a4cc79dd57464cd4816358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:76:24:7e:dc:15:72:ce:25:93:ba:8b:7c:
81:08:36:a8:5b:c0:bc:d0:90:fe:e0:c2:4c:cd:81:
91:16:40:0c:59:05:3c:05:2f:02:46:63:99:49:15:
a0:5a:c8:55:1e:72:71:94:56:17:80:53:e0:28:d4:
99:1a:6f:c1:75:e1:fe:6d:de:6f:6a:de:9f:f2:f9:
b3:a8:d2:1d:a7:ee:3e:92:bd:3e:56:8a:ac:e3:67:
39:f1:f7:42:6c:5b:3d:1a:70:36:8e:69:ee:85:3a:
86:ae:02:35:22:eb:b5:32:85:19:19:13:35:cf:6a:
4a:5d:de:7d:ba:3c:99:51:51:94:10:3e:a3:a3:95:
8c:04:a1:a1:02:67:e5:d3:ac:57:01:fd:a3:81:62:
bb:c8:e6:85:3d:38:ee:be:3e:e6:6d:41:be:ab:35:
48:0d:ae:e3:7a:42:9b:08:1d:a1:c2:2a:72:29:e7:
8c:02:e6:b3:da:84:02:f3:6d:c3:a3:4b:3a:52:1f:
36:3e:1a:a8:41:ee:40:c1:c7:58:30:aa:dc:18:f1:
3d:2e:71:8a:ab:31:3e:1c:c1:8e:87:99:92:1a:98:
2a:0d:70:7c:48:a2:10:a0:88:54:f3:97:b0:21:9a:
f2:ab:05:6a:73:76:28:94:04:ee:e3:dc:5c:62:e1:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:EB:40:C0:11:09:AD:70:A4:CC:79:DD:57:46:4C:D4:81:63:58
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:28:66:bd:b7:a5:57:c4:cb:2b:8a:c7:24:d3:e9:3b:98:
cc:d5:55:b1:e7:28:f5:76:fb:74:02:a4:95:ef:97:f5:0e:15:
d9:f0:36:92:97:8c:8b:c9:96:4f:03:2a:64:91:79:60:6b:b4:
2f:ea:03:d5:b5:46:99:09:ad:c7:83:38:87:41:81:97:fa:0c:
56:0f:e0:48:c1:11:91:d2:00:6d:d5:e3:78:e1:3a:96:aa:2c:
fb:6b:98:b8:5b:06:2d:48:b7:e2:cb:59:f6:b6:79:11:60:7f:
93:d8:ed:c1:e8:81:3f:c7:71:1e:2f:64:f6:dc:7e:f0:cf:b2:
f7:48:8b:43:9e:8f:58:7e:a9:b3:88:c5:fd:2a:68:05:73:31:
95:3f:0a:c2:40:39:fb:9f:30:3d:bc:aa:67:78:7c:fd:e4:73:
a8:96:33:84:a3:e5:da:af:7f:f4:a8:00:08:96:e0:37:4e:a0:
81:4a:e9:0b:89:6a:62:bc:3b:f0:5e:79:19:aa:27:c7:5e:78:
a6:ec:67:2b:5e:70:52:56:43:1f:fa:59:77:17:1f:d1:db:63:
0d:61:9a:12:98:7e:bc:f9:19:40:72:4d:54:2a:e5:0b:4f:59:
7e:ac:f7:43:71:b7:99:f2:f2:c0:0e:41:61:06:4f:0d:f5:93:
25:e7:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:42 2025 by rpki-client on console-fra.rpki-client.org