Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: 9oxYlHgIGBUS6hNjyUjFUFgXMpu6lQBAXAia26wCzUQ=
Subject key identifier: 42:8A:9B:34:D4:48:A5:83:DB:3C:E0:01:F8:97:F0:B1:71:0C:11:03
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 01951210C60C6618006E407CC43B117ECBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 070C
Signing time: Mon 17 Feb 2025 04:00:43 +0000
Manifest this update: Mon 17 Feb 2025 04:00:43 +0000
Manifest next update: Tue 18 Feb 2025 04:00:43 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: epx0AUcExLjqS2CU9L/g0RYTwFMMlGK8OBJYvxoNcGI=)
2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c6:0c:66:18:00:6e:40:7c:c4:3b:11:7e:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Feb 17 04:00:43 2025 GMT
Not After : Feb 18 04:00:43 2025 GMT
Subject: CN=428a9b34d448a583db3ce001f897f0b1710c1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:96:12:92:b2:23:b4:57:e8:14:69:72:d7:
21:2c:eb:f8:fe:0d:44:3c:d1:1e:3d:3e:46:40:fc:
9d:a1:e2:d0:be:b2:99:d7:0a:2c:b6:0d:8d:18:03:
59:e3:c8:ae:72:61:47:f3:80:0c:ba:5f:e5:47:99:
ef:8b:be:7e:a7:32:6d:f8:54:a8:d6:73:3a:84:c5:
09:77:ff:c2:9f:69:9d:ff:8d:16:f8:bf:80:a8:1a:
05:b0:5c:fc:cc:aa:c7:40:8c:05:38:90:ac:3d:65:
16:20:41:1f:a3:85:65:03:17:e9:f7:47:30:fb:24:
3f:26:c7:0a:60:5c:d6:84:41:63:82:79:2b:02:6d:
69:f3:6b:6c:12:a4:dd:9b:b4:69:e5:d0:8c:84:71:
fb:99:c3:21:7e:9c:d7:f7:b3:68:e5:fd:4e:75:8c:
5a:ef:30:86:21:67:53:41:49:87:63:c9:87:80:e5:
0e:d9:d1:c4:95:69:99:31:79:83:a3:8d:48:72:8e:
7c:d9:6e:5a:9c:5a:11:0b:3c:7d:63:f8:e9:67:e8:
f2:b7:5a:94:12:2b:fb:10:3c:45:50:dd:c3:7d:f4:
fd:c1:e3:dd:83:83:17:49:43:ac:9e:79:cf:a4:63:
cf:81:29:50:27:5d:ee:12:d2:dc:aa:fd:d6:24:bc:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:9B:34:D4:48:A5:83:DB:3C:E0:01:F8:97:F0:B1:71:0C:11:03
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0d:78:2d:cd:47:7e:11:b5:72:9b:9b:14:b8:ff:d8:e2:5e:
90:79:d4:4e:c0:65:4e:ce:6d:a6:58:e0:f0:a7:cc:01:8b:ce:
88:b0:03:79:2f:67:93:59:da:aa:95:ad:9f:ac:8f:c4:b6:02:
f4:84:ef:5d:00:af:64:dc:10:d0:e1:99:e7:16:96:04:7c:fc:
84:e6:41:ea:14:f5:db:5b:fc:76:aa:48:7e:08:1f:57:91:0d:
00:33:e5:6e:a5:08:11:ea:0e:ad:45:2f:2f:5a:02:9e:e4:55:
f2:c8:77:61:ff:f2:f6:fc:18:1e:e5:a1:e0:91:b7:60:8d:fc:
bc:48:91:78:52:d8:f1:f8:69:18:14:97:02:a0:7d:79:2e:53:
20:1c:d7:f6:b0:eb:f1:e7:1b:c7:f4:bb:53:8f:ca:b5:57:1b:
54:7f:d1:54:10:46:76:e8:a9:d2:84:2c:01:7e:fe:c6:25:c5:
6c:86:19:0b:4c:60:ad:6e:50:0f:01:6a:b4:72:8e:03:48:5d:
6b:75:4e:c1:e1:d8:be:46:7d:fd:35:41:4c:c1:91:19:91:5b:
c5:c2:71:16:30:f5:50:a7:f1:a0:89:d0:a1:41:67:fc:a6:0d:
ad:e0:5a:8a:2d:d5:fe:f4:d9:8a:c4:a6:f0:34:c4:24:06:ca:
3e:01:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:13 2025 by rpki-client