Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: 0PsW97P9jTT+gHFKh8cjdqzu4jMdEZ1QIqNe2csIZtc=
Subject key identifier: EA:0D:0A:FC:81:62:10:81:07:45:70:C2:58:FE:60:92:99:76:80:33
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0194BABB5DE41FB8B2060A18D1AF387C2CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: uyU7XVwCflnYTK+t+gcRB62vkUBNOJtSezHgkyB78g4=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5d:e4:1f:b8:b2:06:0a:18:d1:af:38:7c:2c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=ea0d0afc81621081074570c258fe609299768033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:00:6c:a7:e8:a5:3c:15:c9:f4:32:da:4f:
55:e6:ae:37:ef:26:92:98:6e:e9:80:c4:58:3b:03:
d0:dd:31:14:af:f6:d0:f8:41:9d:73:a3:6c:c5:a5:
57:9b:6c:fe:6a:4f:68:de:87:28:b7:1a:55:9a:6a:
b1:18:6d:4a:80:9f:28:2a:de:73:26:d1:86:3e:2b:
63:6e:a7:ca:09:03:d3:57:4b:82:3b:46:5b:64:43:
b4:16:26:a8:10:60:e9:b5:af:04:d4:07:ce:f9:a2:
21:89:90:cf:5f:fa:41:bb:da:ac:55:27:34:75:3f:
84:72:16:0b:b4:b1:dc:3e:2c:ef:03:c7:0d:e5:b3:
3f:3b:a1:9a:94:c5:9f:55:db:a4:4d:ca:6b:66:7c:
6d:ad:7d:00:f8:45:65:75:8b:1d:08:9b:12:ca:cc:
b7:5c:03:0e:a1:f3:bb:da:d9:1a:f8:bd:0a:10:1e:
01:3f:5b:5a:29:45:dd:f2:6c:be:e5:f2:0f:4b:8b:
36:5d:3c:ef:6f:46:17:32:93:36:99:36:b5:f5:86:
82:77:6c:ec:8c:6b:85:41:0a:c3:44:53:0f:74:ad:
d3:a5:65:06:88:99:d4:2f:2b:6b:ae:34:0b:ba:b7:
b7:ed:75:4d:ce:fa:f0:d8:5d:21:fb:67:5d:21:38:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:0A:FC:81:62:10:81:07:45:70:C2:58:FE:60:92:99:76:80:33
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:72:99:3f:36:36:b7:ac:87:c8:fb:c2:f4:96:28:f2:dd:
41:3b:8b:81:36:53:cc:c8:a6:60:3e:41:56:c3:ed:15:72:7d:
fb:6d:ba:7a:3f:d6:4e:dc:91:fc:ad:a5:3c:91:ae:88:24:8e:
8f:0e:7d:25:e4:7d:eb:fc:70:f6:10:cf:6c:d6:79:d8:d5:69:
9b:ec:92:6d:ac:e5:6d:f2:bd:5a:41:3d:08:82:33:bd:a1:8f:
5e:fa:95:45:77:70:c6:58:b1:36:d0:4e:c8:1b:fc:23:fa:da:
fe:22:91:e8:f8:24:76:f5:52:f7:cf:08:04:1b:ad:72:03:01:
1c:0f:7e:dd:c0:3e:e8:f8:1d:01:4d:da:35:fd:3d:b0:01:33:
8d:35:76:de:39:a9:3a:88:29:c0:b4:a9:66:a1:23:7f:4a:2e:
ba:6f:05:de:0e:15:d2:1c:46:51:ba:53:dd:8f:f6:d7:b7:ed:
66:29:e2:27:4a:8c:38:38:4a:2e:e9:a2:f8:49:5f:ad:3c:c1:
79:d0:4d:9b:17:48:20:15:b4:33:8b:5d:53:4b:54:3f:e6:7e:
2e:70:c9:b4:d6:6b:59:87:fe:3c:64:f7:ce:22:ad:7a:e8:25:
fb:2a:e1:31:84:b9:41:88:2e:69:1a:e0:ef:40:97:04:f3:df:
8b:c7:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:29 2025 by rpki-client on console-fra.rpki-client.org