Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: WGBlCC0CvR74SnstOo7uX/K94wkybBdxV2eW8RnhEgU=
Subject key identifier: 6C:EB:E6:B8:91:C7:0D:50:CF:89:0E:A7:BE:FC:2A:96:9B:2A:2D:C6
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 0194BABBA0ACD75002A16F13ADCA895FA6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:46 +0000
Manifest this update: Fri 31 Jan 2025 05:00:46 +0000
Manifest next update: Sat 01 Feb 2025 05:00:46 +0000
Files and hashes: 1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: 6rp6s3scyoKJGuKiINrySoy7wd5cfbe9gw3KCCrVrA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a0:ac:d7:50:02:a1:6f:13:ad:ca:89:5f:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Jan 31 05:00:46 2025 GMT
Not After : Feb 1 05:00:46 2025 GMT
Subject: CN=6cebe6b891c70d50cf890ea7befc2a969b2a2dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:be:80:41:29:f8:25:e6:50:8b:d8:02:e8:
be:af:5b:8d:81:4a:72:ac:bf:63:25:65:4f:86:8f:
ad:b6:67:7c:48:6f:d8:98:b5:7f:0b:b3:1d:97:43:
d8:ff:a1:c6:21:d0:db:c6:4f:5e:9d:21:7a:28:f6:
3a:24:33:27:37:c9:62:40:31:7a:20:02:d7:18:3d:
f4:ab:c2:11:c0:43:a6:0f:94:12:7e:fa:a4:35:c8:
9e:94:51:cd:1a:aa:44:98:e4:ba:c0:5c:2d:02:24:
40:bb:fc:03:2f:10:58:3b:9f:a6:40:32:a3:bc:93:
c3:01:07:bf:fe:1a:8d:7c:ed:d1:d7:42:a9:c7:d6:
6f:69:2c:15:9c:af:a2:59:0d:f9:63:ae:46:8f:ea:
44:57:87:5e:2b:4f:9a:c0:96:31:0b:79:e4:7f:8f:
64:3b:60:d0:60:46:59:13:f7:85:4a:49:d8:a6:79:
97:c5:05:5a:69:e9:3f:37:b7:12:85:b9:87:95:74:
57:ed:50:a8:73:ad:39:5e:0d:7e:98:7f:e2:ef:3d:
5a:55:cf:0a:66:b6:cd:04:9c:b4:9f:7b:ac:24:4f:
ba:f4:ac:e5:4d:f1:00:a3:a0:6a:79:16:ff:35:bb:
e5:c0:42:31:04:c1:8a:d2:8b:da:b9:e6:30:99:77:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:E6:B8:91:C7:0D:50:CF:89:0E:A7:BE:FC:2A:96:9B:2A:2D:C6
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1c:b3:31:35:11:e3:a8:e6:3b:bd:e8:08:34:eb:6e:06:33:
5d:5f:87:08:98:f7:e0:3d:fe:52:f0:30:e6:c6:6e:b5:50:ad:
fd:b7:27:1b:41:67:d7:eb:45:d1:1d:ed:c3:0c:a7:8c:10:b4:
a3:71:22:4d:4a:c4:81:9f:6a:a0:2c:c0:db:e7:45:fc:bf:f3:
44:91:3b:aa:9c:b4:d6:7f:6a:c0:50:70:3c:b9:ec:8c:f9:a8:
e7:45:86:97:12:dd:01:c8:fb:6d:3f:6a:fe:40:cb:f5:e8:ce:
ba:e2:ab:ca:bc:78:ce:15:9e:45:33:60:a1:88:40:ad:8c:ae:
42:06:d5:9e:d3:c6:f6:5b:5c:02:b1:74:6d:62:f0:cf:98:d3:
bc:f8:46:d6:da:56:5a:68:05:f4:c9:42:d2:e4:7e:cc:d0:26:
b9:54:6b:36:e9:73:2d:7e:ba:3b:28:c4:4e:c2:e4:bf:b7:f4:
f1:7d:07:2e:46:55:43:3f:2c:31:28:02:ac:a5:fb:e2:db:86:
bf:06:06:c0:4c:ee:1d:2d:0f:2a:67:97:30:d3:31:54:63:68:
3e:cc:d3:04:8a:2a:11:ea:00:77:e7:ea:cd:24:91:17:93:2d:
dc:c8:90:45:8b:bc:24:5e:a3:8c:05:6c:a5:c1:eb:a1:bb:46:
61:14:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:55 2025 by rpki-client on console-fra.rpki-client.org