Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: WeFF0UUohtN2M/i9wic4yw8hnsZh68pqs9p+HgwHH2M=
Subject key identifier: 31:B8:F8:5F:33:B3:F8:DB:51:D8:72:63:9D:4A:3B:7D:2C:4C:C3:7E
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0194C3BE834348C6268C4203A90AE246D2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 1051
Signing time: Sat 01 Feb 2025 23:00:30 +0000
Manifest this update: Sat 01 Feb 2025 23:00:30 +0000
Manifest next update: Sun 02 Feb 2025 23:00:30 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: SoRMSX0yUm0rtHquNs2RUsBAScGmTpVuw3tbgT4AUIA=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:83:43:48:c6:26:8c:42:03:a9:0a:e2:46:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Feb 1 23:00:30 2025 GMT
Not After : Feb 2 23:00:30 2025 GMT
Subject: CN=31b8f85f33b3f8db51d872639d4a3b7d2c4cc37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:98:f8:60:0c:b6:9f:a3:67:b6:51:b3:b1:
eb:6c:c7:55:81:57:fa:c2:dd:7e:6f:57:48:f4:4b:
b6:b7:88:6d:10:3e:53:23:4e:f9:29:1f:c6:40:a1:
1e:3f:95:28:ef:41:6a:f5:f9:2e:14:f3:2c:00:ed:
8b:bc:b0:67:4b:74:96:7d:2e:07:72:57:a4:47:fe:
0a:f8:ab:2b:55:9d:24:e4:b6:98:a9:03:05:a8:5a:
1b:12:49:6c:80:46:56:2f:2d:b3:aa:3d:d7:9f:29:
ac:9c:e4:24:d5:b9:ae:be:5b:d6:fe:12:a2:49:b2:
34:ae:83:4d:0e:91:79:61:30:2d:d1:51:06:f4:18:
bf:2b:55:3b:9b:a6:41:85:c2:43:1a:d5:a4:e3:95:
4e:50:92:6d:88:6f:4f:40:d5:ef:60:30:5c:f6:46:
78:8c:ae:49:c8:68:a5:f2:e3:a0:12:53:d1:6a:8d:
18:3f:2b:02:43:e9:86:8f:38:ab:ba:91:29:27:1d:
f8:4e:8a:8a:28:41:e0:08:53:aa:96:2b:25:66:f1:
7b:02:bd:46:54:49:23:8d:f7:6e:c0:b4:0d:2c:5e:
41:79:5b:63:0a:90:c2:39:2e:ee:78:8e:d9:da:f1:
ae:61:92:95:4b:bf:89:da:6f:d4:0a:51:15:81:f0:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:F8:5F:33:B3:F8:DB:51:D8:72:63:9D:4A:3B:7D:2C:4C:C3:7E
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:aa:0b:89:0f:06:4d:16:bb:ec:61:04:cb:c6:4c:63:0a:
5e:30:ca:19:86:51:93:09:42:f7:5a:9f:a0:80:4c:27:86:d6:
b0:d2:b2:51:63:ea:b7:c8:d9:21:38:b7:a5:da:e0:da:81:e5:
e7:16:08:30:29:79:77:4a:ab:71:f4:c6:13:d4:d2:ed:9f:3e:
f8:8c:f8:bb:ea:f2:2b:f2:96:72:25:c0:42:8b:09:c4:e0:38:
06:4a:5d:d5:25:0e:83:36:7a:15:6e:7d:58:71:79:8a:3d:ec:
fb:e7:49:64:b0:09:d0:ec:59:44:da:0e:f7:1a:57:d3:16:8e:
73:ca:a1:7e:0e:4e:7d:c9:2f:1f:59:21:21:4a:91:ca:af:58:
2f:cb:61:6a:14:f0:58:9b:3e:45:5b:62:4b:73:e0:51:54:be:
7a:3f:29:7d:76:ab:22:75:54:aa:75:a9:cb:dd:e4:2b:df:23:
72:9e:e3:49:48:50:f6:15:1c:30:34:91:36:dc:8f:a2:de:e3:
c3:f8:f3:a1:c9:9c:c8:5f:4f:05:29:86:94:5a:ec:47:5b:36:
2b:43:7b:01:62:97:9a:6d:e4:64:21:0f:06:7d:4f:0d:49:ac:
94:bc:64:91:b6:2d:11:ed:50:99:dc:83:94:95:47:7f:bc:35:
1e:9f:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:51:36 2025 by rpki-client