Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: 3zwUluf+a6D1hiuf2r/8/jslSPFv5PYnqxhHM3ygGzk=
Subject key identifier: D1:0A:A4:62:7E:A5:7B:1F:B0:08:F6:9C:2D:0E:03:CA:C7:7B:47:9F
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 0194BA8459CB3F1B51C54B791CABEFB3054F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: gzqHzvvD8lXzjJsk+WxMCmKczqtlfCd4nyrL4t+Po5I=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:59:cb:3f:1b:51:c5:4b:79:1c:ab:ef:b3:05:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=d10aa4627ea57b1fb008f69c2d0e03cac77b479f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:c0:0f:ed:a8:2f:22:1c:4b:cc:23:4b:93:
38:69:ae:3d:d9:69:a3:ac:af:65:a5:12:83:21:20:
17:a9:d3:f3:33:88:9d:f3:e5:23:c1:58:3a:be:4b:
c4:86:79:38:80:9f:54:f9:85:ff:71:93:4f:3c:15:
cf:88:0f:8c:b8:e2:36:9f:68:39:66:bb:90:93:95:
a2:43:14:47:00:bc:18:a3:26:5f:c2:bd:0a:e1:52:
33:e1:b1:ad:a7:de:62:1e:05:92:16:77:a0:e2:45:
b0:b9:50:3d:65:0b:b1:ed:ef:83:90:53:7b:dc:e1:
e4:1a:be:32:99:44:94:7b:8e:bd:32:f0:94:24:bd:
1e:c8:2e:74:37:e5:ae:c3:66:be:3a:9e:20:83:2c:
9d:16:51:c1:96:fc:a0:da:a3:ff:6f:2d:41:5d:9b:
59:f2:69:fa:63:5b:5b:8c:45:bf:62:27:44:78:e0:
fb:87:5c:c0:bd:1a:5f:ee:19:27:cf:99:d1:7b:cc:
ce:e6:96:40:0b:ea:ba:c3:dc:74:95:1a:ba:97:69:
e0:b2:d1:c9:6f:8b:0a:49:1c:cd:dd:54:ef:0c:dc:
e9:f0:77:6c:f6:6f:e0:c3:21:3c:93:b4:8b:68:3e:
26:48:92:0c:4a:61:dc:dd:1c:4d:5b:d6:c3:73:27:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:A4:62:7E:A5:7B:1F:B0:08:F6:9C:2D:0E:03:CA:C7:7B:47:9F
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e7:4f:71:6b:21:1a:ee:aa:4d:d5:69:a1:d4:0d:b2:f2:18:
85:dd:f6:3e:68:60:5c:75:c8:d0:bb:21:dd:de:6c:8d:6e:94:
93:51:2e:a7:ba:54:58:d1:1a:91:3d:fd:71:fa:a6:08:53:b6:
72:b3:ed:8c:d5:3d:5c:f2:a8:0f:86:42:be:4b:9d:b0:96:39:
6c:01:ba:64:3e:33:4d:d6:89:92:0f:6e:3d:9e:ed:6a:29:ad:
c9:98:64:18:cb:87:9d:e8:8e:b2:4f:da:64:01:06:0e:fe:96:
80:f4:2e:be:42:e9:88:53:55:39:75:49:ac:1f:46:fe:a4:0a:
21:9e:4a:98:94:6b:86:45:27:c4:d1:67:c4:2c:5c:56:8f:88:
3f:30:c6:d7:50:f9:b2:c6:86:c4:33:8e:fa:38:30:38:a0:d4:
62:b4:cb:1a:5c:9b:0b:2f:3a:77:bc:d4:93:81:a7:e5:f2:84:
96:5d:97:a6:48:71:68:74:3f:0b:0b:1a:8b:55:52:1f:20:0a:
00:a3:d1:81:f2:0e:98:a0:a4:a0:c4:f7:00:28:d0:d3:7f:a3:
95:3f:42:04:96:60:ea:e8:9d:8c:dd:31:f4:d6:1e:84:18:56:
c3:a6:bd:e4:4b:02:1f:d5:83:4d:9e:15:fb:9a:06:02:55:15:
af:68:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:20 2025 by rpki-client on console-fra.rpki-client.org