Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier: cpnzG+T/m3NE2LnUERXO9YZKIYt2IHJ7I9vNV2Xvams=
Subject key identifier: 29:C4:E3:9A:C1:17:3F:F3:0F:33:B3:BB:4D:9F:B2:C4:39:B4:ED:02
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 0194BABB39E01E7A97F6791C7D4554013677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number: 1114
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: JI+tYoki0ry+bdp+7JQYaPV8GXZWzj9ufrGO8bUdcWM=)
2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:39:e0:1e:7a:97:f6:79:1c:7d:45:54:01:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=29c4e39ac1173ff30f33b3bb4d9fb2c439b4ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:71:ad:73:4b:c5:ec:2d:a3:fb:e4:49:f7:
c1:ff:d8:9a:53:d0:7c:94:c2:e4:c3:8f:d7:98:02:
38:79:cb:44:fa:3b:13:c0:a5:8a:7a:6f:9c:80:98:
69:25:b2:3c:de:a1:de:5e:36:87:82:0a:cd:28:f8:
51:d0:3a:bf:ad:f9:a3:e9:7e:4a:d7:31:e8:65:17:
8d:bf:3c:70:3f:64:65:81:ae:64:44:61:19:14:ac:
23:51:87:19:5d:9c:da:d1:0d:69:20:c4:fa:95:5b:
47:8b:16:db:21:3c:b7:62:af:73:f0:94:c7:0b:7b:
60:be:a4:22:29:da:3f:71:43:6f:9b:6d:31:56:4f:
33:9d:49:cd:0c:1a:d9:80:11:d0:44:0f:53:b3:d1:
13:b6:4c:f5:de:c2:d0:b3:be:b9:31:c0:6d:7c:3e:
2c:75:f9:65:82:a3:9c:e7:13:5e:e9:e0:e7:e6:02:
8d:44:f6:7d:2c:a3:75:99:ad:14:18:e3:d5:df:f2:
a9:36:1f:c0:66:c8:02:7d:63:1c:cc:f8:8e:3c:a3:
4a:f0:84:6b:ce:b0:f9:e0:7a:4e:d1:d2:b8:1a:b2:
dd:0e:ee:08:4f:6b:f2:37:68:c3:10:1c:12:15:9d:
32:e6:3d:e8:ef:b9:ce:1b:62:04:c3:af:82:76:dd:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:E3:9A:C1:17:3F:F3:0F:33:B3:BB:4D:9F:B2:C4:39:B4:ED:02
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:1f:b9:cf:4e:61:50:f0:c0:04:a7:45:9e:f3:a5:ca:9d:
0a:a4:70:51:50:b2:59:b8:b9:28:c1:a7:83:b0:72:04:51:3d:
bb:d0:69:b3:0f:f8:de:23:c7:dd:02:84:28:d0:63:46:55:9b:
0b:37:91:b2:70:87:d5:6f:54:7a:d0:2b:80:59:da:a6:5a:80:
31:81:36:df:30:df:8f:72:7a:46:11:df:8e:f1:9a:ad:b7:e6:
81:5d:f8:60:5a:c1:0d:61:20:94:5c:06:cc:18:1f:89:71:30:
87:59:be:47:b1:1a:84:41:c5:f3:64:ad:a0:dc:6e:1c:fb:b2:
92:e8:ba:4d:76:9d:52:7a:6e:ea:60:17:54:af:a2:c8:2a:08:
d2:42:8e:dc:1a:fe:4c:5c:f0:d3:d6:fd:5e:96:2a:6d:b2:28:
d2:63:15:33:97:69:43:ef:39:82:2d:e9:12:18:fc:59:72:a6:
18:ea:54:c9:d1:98:e1:3d:72:7e:da:7b:12:c0:92:dc:17:54:
aa:3f:6a:c2:56:36:5c:37:10:68:1f:5b:b3:52:28:47:74:26:
23:eb:83:01:75:1b:27:81:e3:11:66:b1:71:fb:6a:db:75:e6:
5c:0c:04:c8:70:a5:ba:d8:d3:3b:54:10:41:e4:42:4b:31:fd:
c2:5e:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:08 2025 by rpki-client on console-fra.rpki-client.org