Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: GTyWgJlF78265fJ1pgcsdGZpMgsWyLVZvTre355R1Bk=
Subject key identifier: 6B:2D:86:6E:AB:94:A3:01:F6:CC:81:DA:A8:A1:B1:BE:7F:EB:D7:E8
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0194BABBC1AE9E68BFFDFCA6C8B68AC670B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1171
Signing time: Fri 31 Jan 2025 05:00:54 +0000
Manifest this update: Fri 31 Jan 2025 05:00:54 +0000
Manifest next update: Sat 01 Feb 2025 05:00:54 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: p6Vqod3X0jkMaRf6MUhHzPJGHe503IEZkPhSC0V22Vg=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c1:ae:9e:68:bf:fd:fc:a6:c8:b6:8a:c6:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jan 31 05:00:54 2025 GMT
Not After : Feb 1 05:00:54 2025 GMT
Subject: CN=6b2d866eab94a301f6cc81daa8a1b1be7febd7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:c8:25:77:50:a3:a6:36:b2:1f:35:ef:0b:
78:72:c4:6d:64:57:f6:7d:38:32:f6:19:f6:50:ef:
c1:71:6b:1e:6f:49:60:7e:98:21:7b:bc:6a:70:7f:
d7:71:ef:bf:5b:ae:13:0b:ce:ba:70:8c:49:bb:0d:
eb:81:67:26:3b:90:46:56:3b:02:f0:d8:7e:71:e4:
40:b6:8d:3f:2c:6c:9a:df:d5:36:59:7c:2d:68:d4:
36:e6:cb:ed:df:c4:f8:3b:95:09:6f:77:77:0d:e0:
33:a4:4c:4f:fa:0b:ee:67:c6:c6:5a:f3:e5:9d:b5:
5a:c9:87:2c:9e:6f:b1:a6:bb:f9:5a:dd:d4:4f:bc:
80:da:cc:4c:ed:5f:eb:15:42:e7:3a:13:01:ed:bb:
8b:a2:c1:c3:01:8c:7c:f1:d7:67:b2:31:66:6d:49:
ec:6b:f6:81:3b:6a:b3:0b:86:35:53:9e:30:5d:de:
38:2a:20:af:d4:db:37:8d:5e:fa:3c:1d:e6:04:f5:
4a:4b:a7:e3:82:ec:ef:3f:00:a8:88:0b:4c:56:22:
75:1f:85:39:2b:4b:5f:a3:30:06:72:c4:22:c3:fd:
06:4b:46:fd:c6:99:23:5f:b5:65:e7:32:f2:d2:6b:
4d:6c:1b:19:9f:ae:60:25:e6:22:68:cd:70:d5:53:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:86:6E:AB:94:A3:01:F6:CC:81:DA:A8:A1:B1:BE:7F:EB:D7:E8
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:34:95:b1:fd:33:1d:88:a6:1a:b3:e4:c5:7e:15:b7:f3:
d3:e9:79:de:1c:11:85:7a:90:17:5d:6f:4b:38:c4:ee:67:cd:
3a:87:87:5d:c6:02:6e:e7:66:27:50:f8:3b:9e:38:8b:ec:02:
34:1d:ef:44:b7:ab:89:99:16:92:9c:0b:6a:22:22:e7:9f:95:
65:c0:20:d4:cc:37:75:f6:df:95:77:c0:2c:16:db:e2:b0:06:
e8:06:d2:98:8c:14:3e:4c:f0:4f:18:a9:e1:da:2c:89:8b:e8:
8c:0f:18:3e:23:23:a8:24:2e:d3:6c:68:f4:e1:a7:7d:41:3a:
58:2b:d0:69:bc:9c:5c:0a:1d:2c:81:cc:45:2b:25:49:65:b6:
f0:d8:84:2b:a6:a5:14:9e:e3:8a:87:fc:c7:83:1f:27:87:cf:
de:49:eb:7c:3b:70:46:26:8f:12:cb:90:4a:83:bb:5d:8b:41:
5d:38:19:30:7c:d9:6f:26:aa:1b:eb:67:88:6a:af:69:65:16:
66:3a:a7:f3:84:6a:26:be:d2:f3:03:d3:b8:fc:bc:9f:ce:31:
c3:61:5a:09:66:d2:c9:c3:42:fd:19:4c:f1:7b:ac:c7:2e:4a:
ba:7a:f7:24:fc:3a:d6:e2:d0:ca:a1:23:6d:6e:ff:d3:e1:1e:
b1:32:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:54 2025 by rpki-client on console-fra.rpki-client.org