Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier: c8wOBHTYzEFQ4sKmCEFeUJkMS410v0xB898yQNtsVLI=
Subject key identifier: DD:DF:9A:F7:8B:F4:20:0D:AE:C8:F8:0B:3F:89:27:D1:3D:6E:97:87
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer: /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial: 0194BB970C858F2194A688EAA482621A621C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number: 0875
Signing time: Fri 31 Jan 2025 09:00:25 +0000
Manifest this update: Fri 31 Jan 2025 09:00:25 +0000
Manifest next update: Sat 01 Feb 2025 09:00:25 +0000
Files and hashes: 1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: AoiKmlJzAXV8fJbaYkqC2BwKe1H3aAfsrbfcPfy5CF0=)
2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0c:85:8f:21:94:a6:88:ea:a4:82:62:1a:62:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Validity
Not Before: Jan 31 09:00:25 2025 GMT
Not After : Feb 1 09:00:25 2025 GMT
Subject: CN=dddf9af78bf4200daec8f80b3f8927d13d6e9787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:ff:9d:25:21:d5:fa:c2:10:a9:36:78:38:
9d:a9:a2:0c:05:0f:20:0b:0e:b9:fe:f1:f4:33:d4:
25:75:ba:cc:96:ed:72:d7:a8:b3:c8:5e:df:2e:ad:
bb:70:b5:28:8d:fc:02:d5:37:59:63:54:63:86:0d:
7c:34:5f:58:f1:8e:21:66:da:f1:cd:4f:cb:99:a6:
df:df:54:61:53:9d:75:3c:fe:70:0d:96:eb:12:34:
c6:07:ff:d1:da:c9:6b:8f:5b:a7:4c:42:d1:45:db:
7b:1c:2c:c2:8f:bb:94:c7:44:c0:99:ad:fd:d2:1b:
ee:cd:a3:3e:85:69:9d:fb:af:33:f7:91:52:25:cc:
c6:a2:ce:c3:87:55:11:32:e0:58:1d:34:61:69:f4:
d4:80:f0:56:bb:1d:98:97:76:3a:ab:18:a4:ad:98:
8c:30:46:cb:a3:07:8c:1a:6a:f1:89:fd:04:1b:4e:
2a:8c:c9:f0:71:6e:96:c0:c3:bc:43:45:1c:ff:d3:
5b:0c:49:14:fc:81:c9:e8:7b:44:cd:f5:93:78:f6:
41:90:78:5b:92:18:fe:72:fd:3a:00:a7:77:18:35:
7e:fd:c0:b7:6e:a8:6c:a2:0f:e9:57:83:0d:28:b2:
47:cb:7d:e1:2b:27:42:c8:48:a0:bc:a6:bf:7d:6c:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DF:9A:F7:8B:F4:20:0D:AE:C8:F8:0B:3F:89:27:D1:3D:6E:97:87
X509v3 Authority Key Identifier:
keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e5:5c:39:b9:f8:a7:ce:ed:ed:e9:f4:48:16:2e:65:dd:79:
53:08:c1:4d:a7:cf:c8:7c:72:b8:ca:5d:76:c3:c8:22:b9:92:
bc:08:57:70:20:0d:55:ed:60:53:04:c4:1e:33:d3:a6:82:2c:
79:b1:0f:9f:f3:49:b2:6b:59:0c:9e:ad:db:a7:1c:5d:ce:56:
8d:7c:63:d0:68:4d:c6:8e:2b:75:c5:29:3d:a1:63:0a:7c:8e:
ce:97:d4:29:30:b4:ab:37:eb:95:cd:64:d7:3a:50:db:04:d1:
3e:3c:d1:ac:a1:91:8c:b2:d7:26:5d:fe:90:b4:13:4d:97:d2:
de:83:17:4a:bd:a9:32:13:99:ba:99:77:85:a3:98:00:02:26:
5a:c1:6e:54:b3:07:c4:58:b5:eb:7f:5f:e2:7b:df:38:42:ce:
f0:87:46:6c:1f:43:bf:bb:25:45:cb:93:78:2f:3c:96:6b:db:
8d:d9:89:9d:73:61:58:f9:ee:42:36:e4:c8:36:dd:56:06:24:
04:0f:a7:80:6d:1a:5d:0c:05:99:86:0d:b2:77:3c:4a:0f:28:
99:33:f5:c1:a8:47:9b:fc:71:37:a1:16:f2:a6:2d:89:11:7b:
45:06:37:f6:3c:a6:3f:0e:0c:ae:71:f1:7c:05:38:03:42:3b:
d3:9b:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:48 2025 by rpki-client on console-fra.rpki-client.org