Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: g1xNPVtUdhVVO2PDeaPMqoZLWfKaonyXQ5C8KWokwX8=
Subject key identifier: 90:B7:81:6C:5B:74:87:09:5F:A0:F7:45:79:8C:DC:58:26:A4:01:C3
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0194BAF269589FDFF09482EF7559D191877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: FVlyorXFV3sO9liW7rpxnhmv8lVGBWJM/+nk5CSvTmQ=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:69:58:9f:df:f0:94:82:ef:75:59:d1:91:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=90b7816c5b7487095fa0f745798cdc5826a401c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:af:5b:a8:6d:68:fb:6f:70:79:cd:c9:0a:
81:54:0a:bc:1a:24:2a:7a:44:fa:bc:46:35:27:18:
ce:6a:b4:9c:0e:36:b6:e5:2a:90:77:7e:3d:db:59:
75:13:6e:80:db:24:de:69:95:2a:2c:a9:0a:d8:e4:
b9:28:06:c5:14:19:67:c6:5b:21:83:fd:99:f3:8c:
c1:d0:96:db:d7:68:0b:45:6d:83:7c:8e:9e:0c:f3:
d5:14:92:6d:64:cf:03:75:d1:c4:d6:bc:49:7d:32:
33:17:85:4f:14:2d:50:b8:05:d7:8f:f6:ec:52:d7:
82:0a:22:af:42:c8:56:b0:50:8f:a2:db:19:1f:9d:
6b:12:5b:52:6b:ca:b0:b6:e7:a5:f9:d3:14:12:10:
52:a4:70:d2:5b:de:a8:24:74:76:6b:50:40:2b:3f:
7a:95:89:3d:0d:c3:e8:9c:ec:ac:68:ab:cf:e6:cd:
11:ae:a9:f5:72:9d:0e:3d:94:84:e0:3c:ef:df:58:
7b:64:e6:5a:3e:36:d3:ea:24:10:77:69:38:87:1f:
d6:02:c8:0c:1c:d5:42:f4:54:d4:fb:b2:ff:b9:19:
7c:3e:e3:9c:5e:07:7e:fc:0e:1c:5f:dd:00:90:76:
ff:a9:de:7c:d5:38:b7:70:18:6e:3a:80:26:1f:fe:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:81:6C:5B:74:87:09:5F:A0:F7:45:79:8C:DC:58:26:A4:01:C3
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f3:c3:b7:fa:57:0e:48:f2:de:f3:b7:fb:f9:0b:4a:a7:ef:
a7:52:16:ef:1b:68:72:7d:0f:27:67:9b:09:b4:75:e7:a7:85:
67:d6:98:32:a1:fc:e1:ce:e7:9f:88:0e:b1:d7:68:4a:aa:09:
e3:e4:2d:d5:7c:f6:c0:11:28:0f:ba:10:75:16:4a:cb:0a:a6:
69:48:57:68:d3:62:f6:1f:c0:f3:e7:45:47:26:b0:f5:2d:38:
a2:7e:e5:f3:8f:59:01:8c:d2:92:4f:fa:94:50:ed:46:d8:68:
66:d9:80:8d:f2:1c:68:e9:fe:14:c3:66:78:89:7d:57:d9:25:
15:f1:14:22:bb:fc:60:64:3d:ba:41:a4:67:0e:e5:38:d6:00:
88:8f:3e:78:d2:76:df:d5:e7:03:f1:b8:e7:bb:8a:53:51:92:
65:a8:0a:17:ea:76:73:1c:8a:b1:ab:89:8d:c8:30:d9:aa:47:
86:af:b1:a9:3c:fa:44:94:33:ff:ee:74:38:6a:ae:26:0e:33:
6b:b5:3c:cc:ff:af:b4:ab:d5:b5:b7:27:3e:de:1f:af:c9:b2:
24:95:2a:fd:17:8b:a5:a3:ef:a4:c9:16:7f:a7:de:0c:de:95:
ea:69:32:d3:61:3e:8f:e6:a7:83:d5:a1:54:d0:63:db:d0:dd:
4a:e4:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:53 2025 by rpki-client on console-fra.rpki-client.org