Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: AxgiWc0/znqrmKfhproBIjm2kkGCcgdiJLz8fWyapc8=
Subject key identifier: 21:E5:19:C2:64:9C:B5:84:3C:D0:59:F2:04:52:35:E9:78:97:BD:32
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 0194BA8456ED7F24EE26DDEE54DEEE7B9962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0635
Signing time: Fri 31 Jan 2025 04:00:22 +0000
Manifest this update: Fri 31 Jan 2025 04:00:22 +0000
Manifest next update: Sat 01 Feb 2025 04:00:22 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: w8fYCVBgFuu056p7wbgu2WD7jRiBipsCuZyohb0ES7I=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:56:ed:7f:24:ee:26:dd:ee:54:de:ee:7b:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jan 31 04:00:22 2025 GMT
Not After : Feb 1 04:00:22 2025 GMT
Subject: CN=21e519c2649cb5843cd059f2045235e97897bd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:19:aa:a5:4d:44:51:ea:e2:d7:ef:02:52:
ac:c2:87:5c:a8:e0:d8:43:b0:f3:5f:82:a7:32:50:
f0:25:30:77:76:87:66:59:1d:99:56:40:93:fb:d8:
2d:9d:e7:42:19:16:41:2a:eb:aa:8a:93:68:e1:7b:
7e:9a:cf:81:fc:77:ae:13:5f:19:ef:75:c0:88:0a:
39:9c:b6:8f:a5:b0:4d:64:9b:3a:da:a2:27:0e:01:
6e:a9:5e:aa:8d:02:82:f5:05:78:5e:f4:e1:e4:a4:
e2:72:a6:0e:80:25:4c:80:24:27:47:00:22:68:66:
c4:b2:f9:50:8e:7f:3c:d4:63:ab:36:79:5f:a8:9a:
b0:99:28:27:65:52:be:57:01:d9:ac:05:ef:15:92:
5c:7d:1f:b2:d0:ae:8a:59:0b:32:25:88:36:2a:4c:
da:04:b3:7d:2a:16:d9:6b:1a:37:65:7c:5f:4d:04:
25:f8:be:ab:14:3b:c2:7f:f6:59:4d:56:6e:18:26:
09:a1:48:13:e3:27:30:06:4c:1b:1a:80:31:23:7a:
a2:23:a5:ba:b0:b8:03:66:e5:2b:96:c1:06:e2:db:
71:0f:ad:d7:fa:42:10:42:d9:40:f8:e2:bb:ce:82:
c9:44:c7:b8:c9:3d:a9:6c:4c:ea:92:ef:99:cf:85:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:19:C2:64:9C:B5:84:3C:D0:59:F2:04:52:35:E9:78:97:BD:32
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:f8:a8:e5:e0:0f:a1:41:26:b1:68:e7:57:c7:2a:71:de:
3d:d7:3a:2c:e8:7d:02:a7:9d:fe:53:bf:fb:de:c0:4c:27:33:
65:4f:b2:ce:6c:65:b5:4e:a1:f9:41:a1:bc:2d:b4:09:39:db:
7e:43:2b:04:5d:f4:e5:1b:27:a4:c0:d7:1e:2a:1a:ca:78:6a:
13:37:98:1a:07:31:a5:74:7f:1d:c7:02:7a:d8:f0:50:c6:ae:
6d:e8:da:98:64:ce:bf:ab:f6:69:db:60:87:fb:f2:91:c7:4d:
84:20:68:33:42:5c:4d:7f:d5:c9:b7:1d:ac:e1:46:c4:07:dc:
7d:4e:ff:cd:17:f3:10:01:f3:d1:c4:ac:8b:5b:cb:47:03:11:
dc:4c:74:7e:88:08:d5:f3:3c:92:20:67:35:6b:23:62:ce:1a:
46:77:3a:30:53:1d:3d:40:b9:9c:e4:98:3e:9b:97:fb:7b:b5:
c3:ec:0e:0c:21:bf:2a:85:52:41:72:eb:a1:b9:fa:83:97:37:
f7:85:00:d9:49:22:a5:ac:8f:06:0d:98:29:d8:10:7e:66:4f:
61:c6:f3:97:99:cd:24:52:22:51:a7:06:a5:b0:83:f4:85:a3:
72:6c:72:5b:03:b5:4a:bc:57:31:cb:e6:b2:3a:3f:16:0f:a6:
69:2b:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:56 2025 by rpki-client on console-fra.rpki-client.org