Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: sDCEg3J6vXRi/4UgCzXncL7pWk/rkNkNZUDe/W8vLbw=
Subject key identifier: D2:BE:4C:06:F4:E2:A3:01:B0:31:5A:A9:75:32:C4:C1:02:E0:E4:90
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 0194C387676D94362968B17BAA24DF947C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 111D
Signing time: Sat 01 Feb 2025 22:00:18 +0000
Manifest this update: Sat 01 Feb 2025 22:00:18 +0000
Manifest next update: Sun 02 Feb 2025 22:00:18 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: Jr2LfyhGYEM5DxPTlKQdlwEBSBtLwQ5gfdHvxbR+MbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:67:6d:94:36:29:68:b1:7b:aa:24:df:94:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Feb 1 22:00:18 2025 GMT
Not After : Feb 2 22:00:18 2025 GMT
Subject: CN=d2be4c06f4e2a301b0315aa97532c4c102e0e490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:5c:23:b8:fa:3b:5f:76:82:76:09:3c:44:
d8:1f:ea:39:d5:8d:1a:f8:b5:6b:df:c9:97:6b:ee:
53:a7:65:af:5f:b0:2a:67:30:b2:25:cd:e5:aa:bf:
60:33:51:46:be:df:59:94:12:67:7e:1b:f7:f5:85:
b1:9f:7e:cc:c7:d6:7a:dd:ef:4d:27:ad:f4:67:09:
67:49:fe:66:ab:ab:88:05:62:44:6c:c5:77:f6:95:
2f:75:d1:a8:7b:05:24:1f:56:12:50:61:22:e0:f3:
82:ce:e7:48:c1:c6:b2:7a:22:68:66:84:1d:d4:13:
27:65:7c:47:df:13:fd:59:ce:7e:1e:a2:f4:c7:a9:
d4:74:cc:f6:f3:80:fe:c8:fb:80:48:7a:f7:ee:0a:
1b:77:dc:11:90:0d:a1:f8:87:cc:9c:6c:b6:96:88:
ba:ec:38:bf:42:61:be:77:19:6d:b3:39:40:fe:db:
82:9c:29:7d:8f:b9:35:f1:0d:ed:ec:b9:a5:07:9d:
d1:53:e4:a3:3e:a2:3d:b6:47:62:40:9b:08:00:03:
f4:10:ea:e9:02:7c:19:87:de:ef:c9:f5:2e:b8:6f:
c4:8f:31:2e:16:58:eb:da:76:d8:fb:f8:39:41:66:
01:76:d3:0b:33:0d:3f:67:fe:b4:d8:46:0a:f8:f0:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:4C:06:F4:E2:A3:01:B0:31:5A:A9:75:32:C4:C1:02:E0:E4:90
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:02:40:c0:41:1b:94:42:1f:d4:f7:2e:4e:69:86:8e:82:
17:5c:dd:f2:a0:fd:5d:b2:d1:90:47:97:7f:40:cc:9c:59:49:
62:be:19:f0:4a:b0:4e:ee:64:2b:58:ff:20:d5:e3:aa:60:2c:
1a:b0:40:73:8b:df:b3:95:22:3f:14:3d:4d:09:d1:d4:1c:47:
25:da:ba:17:90:36:bd:ba:3c:5a:e3:6b:c1:8f:4d:95:0a:36:
64:bb:a0:86:89:71:d7:a7:d2:a3:1d:fd:c7:96:6c:a0:ef:3f:
5c:ff:d1:ef:9d:b4:8c:8f:be:69:ca:d8:a2:cf:c9:9c:5b:36:
ab:cd:2a:11:23:d0:47:32:bb:79:ee:f1:1b:40:5e:c0:8d:83:
3c:a2:36:c1:44:34:73:c8:83:0c:7f:19:09:f6:88:2a:0a:4c:
d5:0b:3c:49:48:ba:3e:3b:6f:00:49:50:cd:6f:d1:a5:2c:a7:
08:4b:56:dd:13:f5:dd:9e:e5:aa:45:2d:47:9b:35:54:8e:7b:
f3:43:43:47:83:0e:8c:67:d7:a0:55:27:e6:6b:8a:4b:3b:a0:
36:7d:34:af:d3:78:5f:bf:b6:92:fb:c5:4d:62:1e:0a:ff:f8:
a0:05:20:4e:8c:7e:0f:69:ec:ca:55:f6:f9:75:1b:e6:f0:82:
7b:36:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:21 2025 by rpki-client