Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: XCRuVIPEcv9pOvvLA4Wmapon9W/V/L2VUQzbiO+b8hA=
Subject key identifier: CD:8F:07:FD:8A:2C:F0:D2:B8:0C:70:8C:1E:BF:54:A3:BE:D8:47:D6
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 0194BB971AD08CA1A69A158343F454A45EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 0361
Signing time: Fri 31 Jan 2025 09:00:29 +0000
Manifest this update: Fri 31 Jan 2025 09:00:29 +0000
Manifest next update: Sat 01 Feb 2025 09:00:29 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: J8ImGOqZapGginbyBs6C9xkbn5dDPVHD9iLkyI0QOOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1a:d0:8c:a1:a6:9a:15:83:43:f4:54:a4:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Jan 31 09:00:29 2025 GMT
Not After : Feb 1 09:00:29 2025 GMT
Subject: CN=cd8f07fd8a2cf0d2b80c708c1ebf54a3bed847d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:42:4d:da:80:5f:06:8f:f8:22:87:6d:09:
13:0f:cd:5b:93:d0:e1:4d:95:f2:68:f8:3c:80:9b:
26:c0:2b:8f:13:17:e7:a7:20:e9:cf:ae:ca:27:ba:
cc:40:73:73:b1:31:29:65:a1:04:dc:7c:e9:ee:e0:
0e:9a:e9:14:6b:78:de:ca:1e:e7:7b:1b:23:99:5c:
64:1c:04:63:c6:46:9c:3d:9f:bf:47:7c:42:14:6a:
1a:dc:f3:8c:93:c5:1b:2b:ad:3c:72:74:b3:3b:89:
e9:e3:1c:54:60:67:4f:a9:b9:df:35:d8:dd:71:cf:
66:d6:5e:8e:a5:6c:e8:0e:85:22:63:84:87:1b:1b:
46:07:1a:38:cc:cf:33:1f:74:b8:b1:90:91:71:87:
dc:5d:7a:e5:c5:16:dd:42:27:6a:ce:f2:aa:b4:46:
39:1d:dc:63:d2:07:b1:c6:ba:c7:6d:a6:0d:9e:c4:
3b:84:5f:78:29:ae:3a:0a:04:8a:8e:31:0f:b6:7f:
59:00:f2:6d:60:8a:d5:4c:d4:5a:2b:37:69:78:2a:
ee:e6:e7:5f:c4:f4:b2:99:df:a2:ed:c8:da:13:32:
22:7b:f9:9e:1b:04:f4:ef:93:11:33:48:e3:3b:f0:
c3:21:c8:71:cd:2b:78:24:07:fc:25:3a:6b:6c:3b:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:07:FD:8A:2C:F0:D2:B8:0C:70:8C:1E:BF:54:A3:BE:D8:47:D6
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:f9:e2:bc:ad:0f:7c:87:38:b0:3f:b4:2f:5a:fb:af:74:
8b:ea:a0:78:de:f6:cc:1b:4f:c3:f6:50:b2:e9:41:47:2a:a1:
b6:e5:e1:f1:4d:48:56:d2:8a:38:6f:f3:42:a8:34:85:73:a6:
e2:60:2a:1a:0f:d5:15:fa:0e:9b:03:b2:79:ec:61:79:40:91:
f9:dc:f3:3e:b0:83:75:6e:a9:ce:9f:62:62:02:d7:22:45:1b:
8e:11:87:39:64:59:46:f9:33:ed:14:cf:1c:0a:af:d7:fc:de:
97:a7:d6:8a:59:45:0b:67:38:57:06:c8:92:2e:ae:fb:e5:9f:
af:bb:98:54:90:f7:7c:5e:f8:54:cc:cf:a6:34:94:cb:2c:54:
07:cb:19:2d:51:b0:8f:d8:53:f6:93:31:72:e6:b7:7f:6a:20:
b0:62:d4:ad:ca:f0:67:84:49:eb:3a:37:b0:47:17:b9:1c:ef:
46:8a:e6:cd:0e:31:ba:ce:fa:19:3e:b4:9f:f8:b3:bc:e8:ac:
aa:0c:8c:a7:31:dd:67:a0:a1:9e:fa:09:45:ae:82:1e:5e:2c:
ff:27:63:0b:d7:ec:98:0c:61:ca:a9:bc:f9:cd:af:8f:ca:31:
06:19:9a:03:79:a6:b7:a4:82:15:84:62:d0:7b:8b:8c:7c:13:
d7:1d:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:39 2025 by rpki-client on console-fra.rpki-client.org