Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: PIqIPDFSxTnGuOTV8fUpqjcclOKZeuukjUGhKlilI/I=
Subject key identifier: C0:FE:95:B4:67:4C:AA:54:28:3E:2E:1D:54:CE:73:EA:71:50:13:9B
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 0194BA84A8E7CA8524D2D23AFCE40365A9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 08A1
Signing time: Fri 31 Jan 2025 04:00:43 +0000
Manifest this update: Fri 31 Jan 2025 04:00:43 +0000
Manifest next update: Sat 01 Feb 2025 04:00:43 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: dqL5+3gQ2A53kytAaMp+8aOGSEOWhvX1PsyAxO4gghU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a8:e7:ca:85:24:d2:d2:3a:fc:e4:03:65:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Jan 31 04:00:43 2025 GMT
Not After : Feb 1 04:00:43 2025 GMT
Subject: CN=c0fe95b4674caa54283e2e1d54ce73ea7150139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:ca:96:e0:f1:39:e1:97:3c:9e:dc:34:2a:
c9:63:5d:b0:f3:8b:4c:1c:c3:34:4a:b6:e1:14:31:
ad:70:98:f6:3b:ce:29:90:85:d2:cc:48:9c:b4:59:
ab:40:d3:e5:04:8a:c9:96:0f:6d:26:12:45:9e:ac:
81:f9:65:a5:ff:99:0b:15:9e:86:35:bf:ea:b9:a1:
a2:d2:4c:3e:a8:7b:22:50:64:6f:36:65:b0:0c:8d:
cf:51:73:cc:1b:ed:e5:dd:52:be:a9:81:37:5b:4a:
af:55:1a:4b:00:89:d4:cf:82:34:67:1c:53:14:57:
0c:8e:b4:1d:be:75:e2:02:e7:c1:58:6a:a5:7c:7c:
ae:44:a8:3e:ef:0d:56:5f:27:60:3b:d9:5d:0b:2a:
20:ec:77:dd:1d:ac:af:4c:94:43:08:d3:b7:31:27:
bb:e8:9f:37:2b:a9:92:15:24:c1:57:33:b1:c4:99:
60:b7:a1:d5:97:7b:63:d3:c9:cd:ec:96:7b:62:99:
c5:fe:d6:05:85:b8:c3:8d:62:54:21:bb:34:29:0f:
f0:fc:71:2d:88:83:f5:b6:5b:34:e5:73:89:51:22:
5f:23:22:85:5b:a2:70:69:cc:48:2f:b7:f3:24:03:
88:ff:0a:6d:13:d2:2e:d4:3c:2b:25:64:fe:d7:75:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:95:B4:67:4C:AA:54:28:3E:2E:1D:54:CE:73:EA:71:50:13:9B
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:c6:99:76:65:fa:96:56:07:ff:d2:1b:67:90:9f:6f:9f:
7a:5b:ae:5e:3c:ab:f5:a9:e1:84:0a:7d:61:7d:47:bb:84:dc:
24:6d:31:eb:1c:10:e6:96:8d:f7:91:67:78:b5:05:6a:a3:0e:
2a:4e:df:f8:e3:ee:49:0e:25:99:86:e6:3a:0b:7d:22:0d:cb:
6e:ae:16:18:e6:03:58:9e:f7:90:f8:a1:ac:f8:f2:46:1c:22:
25:0a:48:11:90:ce:24:98:a0:e8:a2:b3:61:d0:e0:8b:86:40:
33:f3:af:13:d5:0d:e5:99:18:4f:01:fe:61:10:f9:f0:a6:f4:
17:b0:6b:08:53:b7:90:50:dc:e6:a1:61:b5:d1:73:fb:dc:67:
d3:04:37:82:e1:14:ce:a8:cc:f4:83:f8:36:29:61:dd:ee:1f:
04:5f:11:07:1c:db:b6:56:09:e0:d7:dd:8a:82:18:69:8e:64:
c8:d8:fc:3e:ea:13:3c:f0:39:c6:6e:a8:4a:3a:c3:03:7e:be:
8c:33:e1:cb:0a:61:3c:e4:f8:e0:ae:62:a8:d0:d0:5c:d4:8b:
fc:0d:70:46:c1:03:7a:f2:08:cc:b2:94:68:4e:84:7b:b8:8d:
32:73:c5:c3:f6:fd:6f:4a:50:00:f0:14:a8:89:4d:ad:dd:4c:
24:eb:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:50 2025 by rpki-client on console-fra.rpki-client.org