Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier: OvKl99+6OuAgwSjGw3Fj4uBtUPICfVgroqwZ6ezHXBA=
Subject key identifier: 27:65:5F:18:81:E5:E4:69:12:8C:01:09:83:81:56:BD:B5:00:BE:8A
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 0194BB973C0DCF2A400567DECE6CD973D5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 09:00:38 +0000
Manifest this update: Fri 31 Jan 2025 09:00:38 +0000
Manifest next update: Sat 01 Feb 2025 09:00:38 +0000
Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: vAln954mtn7BtlvU6/W1ZNkmSWgvXcuWN91+3ulw6bs=)
2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3c:0d:cf:2a:40:05:67:de:ce:6c:d9:73:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: Jan 31 09:00:38 2025 GMT
Not After : Feb 1 09:00:38 2025 GMT
Subject: CN=27655f1881e5e469128c0109838156bdb500be8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:ca:0b:f7:bc:a6:9e:4d:c2:1f:d6:be:c6:
dc:12:f9:a3:15:30:3f:12:3d:a4:7d:11:1e:05:e0:
b3:86:0d:1b:6c:ef:55:e4:b4:d0:89:20:d6:48:65:
d7:6b:ab:87:2c:af:27:3b:b6:a3:63:75:e9:c8:26:
c2:94:3b:c5:cb:76:3a:54:ba:b9:bb:e7:29:39:92:
87:6c:ae:8c:9a:1d:26:28:40:55:58:b8:c0:3f:9d:
96:90:8f:6b:a7:2b:62:1b:52:30:1a:f9:68:bd:9d:
57:4c:19:6c:6d:ee:b0:96:12:b6:77:f7:2c:fa:2e:
f9:8d:51:c2:46:e4:b4:60:1f:36:10:94:88:88:5d:
e2:da:ad:00:9b:cc:80:97:c9:9e:b9:81:b5:c7:82:
9a:22:d4:20:6c:d1:1f:07:7e:da:af:17:fb:86:e4:
f5:a5:57:7e:f3:c3:21:28:a9:d8:bd:04:f8:70:24:
d1:1c:13:20:2c:9f:df:52:ac:22:26:dd:a9:b9:99:
08:59:e4:fa:0a:92:f9:df:07:43:99:c8:42:d0:ad:
cb:24:44:63:64:6a:7f:a1:51:a2:b9:9a:2a:38:2e:
4c:60:a2:4e:c0:53:69:bf:ee:24:b7:9f:f0:2d:b1:
0b:86:e2:46:37:4d:dd:54:2d:7f:1c:6b:da:c0:de:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:5F:18:81:E5:E4:69:12:8C:01:09:83:81:56:BD:B5:00:BE:8A
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:83:b7:76:e8:83:b5:32:7c:a3:c6:15:60:4e:8c:73:5e:
9d:43:68:6b:11:1f:ff:94:f5:1b:e7:13:bc:b1:b7:df:5d:88:
7c:89:88:70:b8:c9:cc:c4:91:36:b1:47:e6:6f:e6:ba:54:3b:
e5:53:40:cb:86:8b:85:2b:66:7a:be:a5:b9:4f:f7:a1:6a:e0:
a8:64:db:54:01:98:73:3f:65:98:75:23:5d:83:fa:97:72:30:
29:7b:fe:ac:ad:7b:80:c3:03:a0:2b:32:93:00:e6:ce:ef:c6:
5b:f1:63:8d:52:bf:fd:ba:f7:df:74:12:47:3e:54:17:a3:48:
84:36:c7:a2:cf:4e:9d:eb:fd:0d:37:3f:91:4f:cf:86:03:46:
8e:41:dd:6c:e2:e4:d8:0b:e6:6e:f3:fd:c1:b1:53:d9:58:96:
c0:d6:1c:3c:1f:21:4e:af:2c:bc:d3:e7:8f:36:3b:b9:7f:e9:
3d:a1:60:c1:67:59:0b:48:a7:9a:00:d0:86:51:7b:7b:d0:8a:
94:2c:09:62:28:eb:c7:9f:7c:2c:33:14:d3:28:c6:f3:ed:78:
69:17:d4:38:0b:01:0a:e4:9a:40:3c:90:59:f9:98:12:00:2c:
ed:b0:71:80:22:32:56:58:d9:f4:dc:84:7c:fe:0d:a1:91:46:
65:e2:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:14 2025 by rpki-client on console-fra.rpki-client.org