Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File: igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier: z4Wbw+/WU8gLKXA9jWYS1988dAtU5BqqF/qJXKRHJRY=
Subject key identifier: 38:43:62:44:8C:CC:3C:DE:78:D7:DE:37:34:D8:B4:F3:FA:2F:C5:0A
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 0195116C02F18DFF1FCB6F86A3B61125C052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number: 07EE
Signing time: Mon 17 Feb 2025 01:00:46 +0000
Manifest this update: Mon 17 Feb 2025 01:00:46 +0000
Manifest next update: Tue 18 Feb 2025 01:00:46 +0000
Files and hashes: 1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: AxIU0KDsslKK7jdKfyRqquFRY79nr190PpL5NZs8h/g=)
2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:02:f1:8d:ff:1f:cb:6f:86:a3:b6:11:25:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Feb 17 01:00:46 2025 GMT
Not After : Feb 18 01:00:46 2025 GMT
Subject: CN=384362448ccc3cde78d7de3734d8b4f3fa2fc50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:19:42:f2:d5:9b:d1:ee:22:65:89:a4:73:
d9:b4:83:c9:82:f9:a2:eb:64:e6:6d:4d:f2:8c:66:
45:8c:12:b0:be:f0:22:21:e6:dd:14:45:c5:8d:63:
d3:43:1d:47:8d:98:d4:4f:d0:1a:df:83:84:79:30:
ee:8c:b7:50:7f:16:d8:ce:f9:89:c9:ac:e8:ca:7b:
d1:24:0b:8e:f9:35:47:31:d3:e5:2a:c5:bd:59:fa:
0f:1b:65:cb:4c:9d:05:00:87:e4:d5:f8:68:b1:1f:
1b:e1:e9:5e:ee:f0:ba:44:73:f4:6e:7c:90:c6:24:
66:5d:68:2f:a4:a1:9d:7e:16:fd:5a:35:eb:5d:33:
a2:73:b8:89:64:3f:4c:0b:78:87:63:39:98:72:4f:
bd:1c:5d:37:b7:79:40:ea:01:76:70:b8:0d:ad:9c:
80:24:cc:fc:fc:b5:cc:19:d0:d0:cb:30:2f:7d:9d:
29:0b:4d:b5:29:e9:85:05:9d:08:06:36:0b:3d:be:
40:3a:4c:ef:6d:78:a3:19:df:3a:69:04:59:3f:06:
78:a4:c4:f9:00:a4:35:c9:61:cf:39:5a:0d:6a:55:
b0:70:1c:07:64:1f:75:b0:b2:1e:7a:3f:3e:a7:e4:
7e:9d:f8:95:f5:4b:74:94:0c:a7:ac:06:9b:c7:e2:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:62:44:8C:CC:3C:DE:78:D7:DE:37:34:D8:B4:F3:FA:2F:C5:0A
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:b1:3b:bf:cc:65:3b:bc:1e:41:a1:04:bf:4e:31:66:8f:
bb:22:86:1f:d4:8e:41:b2:04:a9:02:79:f3:8f:9b:6e:2a:87:
00:4a:2b:01:f1:db:18:56:9b:17:31:8c:81:49:57:06:fc:ee:
b8:78:a3:01:3e:af:4f:55:e7:0a:8c:0f:9a:da:e4:65:4c:83:
82:3c:8c:a6:98:3f:da:fc:2e:61:60:0b:02:92:96:a7:dc:5b:
09:7e:db:3e:8c:2f:5f:d5:e2:03:00:94:23:50:96:4a:ac:9a:
7e:b3:67:d3:79:52:ce:28:ff:59:52:62:38:0c:81:a3:79:8b:
d2:0a:63:eb:56:d2:f1:d7:c0:e6:0a:ac:48:1d:47:e7:8f:b1:
dd:c8:c4:4d:ac:99:73:21:4b:b1:54:d1:21:9c:f5:1c:44:24:
74:4b:37:3f:2e:e2:c7:57:ca:5f:f2:4e:2d:5c:68:76:8b:e9:
7b:32:a3:7c:2a:e4:b9:a2:ba:71:5c:4f:f1:84:43:69:51:e9:
87:35:06:d3:27:38:60:74:d1:31:71:e7:17:c6:29:90:c7:d7:
9c:bb:3a:cc:39:ba:37:98:6c:d7:6a:e1:c3:80:c8:92:f3:2f:
00:b1:93:bf:d0:95:61:b8:bb:dc:b6:4c:d7:15:a1:62:85:a6:
50:5f:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:44 2025 by rpki-client