Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
File: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft (raw, json)
Hash identifier: wFALnxgyDS1w2tvOhFM0j6sL8MEgBIzLfZmdqGUIt7g=
Subject key identifier: C7:42:B8:A2:2C:A0:48:BE:AD:7C:3C:62:A9:A6:1E:33:C4:2A:0B:C0
Authority key identifier: 88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
Certificate issuer: /CN=88727fad5b5c06852e1dafa071ce4767a799e050
Certificate serial: 01951247645977952ECDEF03B06A5F481263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:23 +0000
Manifest this update: Mon 17 Feb 2025 05:00:23 +0000
Manifest next update: Tue 18 Feb 2025 05:00:23 +0000
Files and hashes: 1: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl (hash: GeTdzOpYWtfXqOuWjT1shQhK8p4vClqa4n8E7BpsnIE=)
2: y26WpZEldCdiwpqodYBCZ3hzMbM.roa (hash: Q1+h8XgN41jDqcPqF4sdoSdNWkaGt5GnKBqYH1YkYlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:64:59:77:95:2e:cd:ef:03:b0:6a:5f:48:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88727fad5b5c06852e1dafa071ce4767a799e050
Validity
Not Before: Feb 17 05:00:23 2025 GMT
Not After : Feb 18 05:00:23 2025 GMT
Subject: CN=c742b8a22ca048bead7c3c62a9a61e33c42a0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:3a:dd:65:46:d7:9c:9a:bf:e6:44:37:5f:
81:36:81:a4:c0:1c:c9:85:4b:81:e0:9a:8a:42:73:
94:ad:f9:6c:6e:c9:df:05:50:ee:b6:d9:fe:9b:bf:
eb:5b:55:55:6f:9e:05:60:d4:d1:23:5b:93:e2:40:
eb:7e:74:8f:e6:ab:a1:f2:65:65:4e:73:aa:a7:13:
05:28:6f:55:8e:db:f6:97:fa:4b:0d:f8:68:c5:4e:
50:6a:29:4f:eb:92:42:bb:e5:d5:55:51:ac:e8:ff:
bb:a1:66:69:89:9e:15:bd:b6:ad:32:91:87:56:f4:
2d:86:69:1d:53:9c:41:f0:d1:ec:3a:9b:6d:66:e4:
57:40:19:c4:c2:38:cf:56:08:f7:78:98:07:79:a5:
15:89:68:59:d0:44:ad:18:82:d4:df:d7:25:43:db:
fc:60:4b:a6:ab:2c:89:18:3d:ea:d0:25:54:5c:21:
a0:bc:e1:1f:0a:08:1e:f4:36:3f:3b:5c:03:f4:8f:
8a:a2:b7:41:fc:42:e8:c2:30:02:e2:c4:5c:48:07:
0f:e4:4c:0d:4f:5c:84:7a:e9:50:7e:eb:d7:d8:9f:
45:4f:67:38:06:e4:60:e5:c8:b9:03:3f:93:bb:11:
c7:7d:7f:47:74:f2:b5:b3:a3:ea:5a:1f:7b:9a:04:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:B8:A2:2C:A0:48:BE:AD:7C:3C:62:A9:A6:1E:33:C4:2A:0B:C0
X509v3 Authority Key Identifier:
keyid:88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:c5:0a:c6:65:0f:ec:2c:3b:cb:67:0e:95:4e:a9:2b:d5:
39:e7:81:9a:63:0b:ee:0a:fa:b4:ac:4a:58:ea:da:4e:dc:9a:
d0:fb:79:5f:7f:fd:fd:bd:9c:dd:43:ed:13:d1:5d:0c:34:93:
c8:72:28:ba:e0:dd:c8:74:cd:6c:0c:b7:6b:c4:3b:77:0e:c0:
88:c2:87:de:93:91:b8:83:25:46:85:82:4f:2a:82:a4:0e:53:
ce:17:47:35:bf:e6:02:c1:f8:f3:64:3b:55:11:d5:22:2a:00:
96:af:66:03:64:e8:03:3c:ae:b0:20:dd:ad:28:6f:a2:d5:63:
2a:d8:45:dd:47:4c:c5:bb:25:73:07:bd:cc:2b:3e:20:53:49:
78:40:a7:4a:04:c1:a4:9b:26:f7:6b:60:d8:8b:b6:ff:4a:cd:
6b:23:c9:3c:be:95:84:75:a0:58:74:88:35:f4:03:70:e2:0a:
04:00:dd:d3:bd:b8:d7:c3:ec:1d:40:43:1b:68:81:c9:c4:e9:
38:3a:db:e3:26:49:15:0b:ee:5c:54:d0:73:e4:28:3e:ea:34:
15:87:7d:15:30:cc:9c:6d:85:c4:3f:d8:a5:8a:a5:98:d2:89:
0e:27:66:c2:f4:d3:4a:8b:86:15:ff:9c:d4:57:01:e5:83:3c:
f8:17:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:50 2025 by rpki-client