Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: tc1kRUTvYKlTnjFqkgq86XOBRg9bjuDmNlpwvCj7cdQ=
Subject key identifier: E2:B3:B7:B1:F5:C7:95:E6:5F:E9:BA:0C:AB:F4:FD:4A:C9:E9:A2:51
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0194BAF233FF9BF56215DA67F12A12C35113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:22 +0000
Manifest this update: Fri 31 Jan 2025 06:00:22 +0000
Manifest next update: Sat 01 Feb 2025 06:00:22 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: nCbiDkdGxwuspZaNcxlkX8kdusJ7jx4/KC1ffCV478w=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:33:ff:9b:f5:62:15:da:67:f1:2a:12:c3:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jan 31 06:00:22 2025 GMT
Not After : Feb 1 06:00:22 2025 GMT
Subject: CN=e2b3b7b1f5c795e65fe9ba0cabf4fd4ac9e9a251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:d3:56:10:ea:96:ce:1c:20:78:46:89:2d:
5d:8c:a0:c1:f5:85:4a:2a:60:19:0b:fb:5b:bd:72:
b1:43:ac:1c:00:06:5d:3d:5b:f2:bc:38:f0:2c:cf:
c1:f8:3c:d9:e1:b2:15:fe:a0:0c:16:b3:42:29:cb:
6e:f4:2a:05:b0:96:40:9f:23:45:f3:92:bd:d1:5e:
b2:3a:a3:b2:04:60:5b:36:ed:0b:c3:d5:4f:fc:ac:
e6:2d:ea:fc:54:7e:3d:4f:dc:a1:8b:9b:88:a6:04:
12:b7:23:64:2b:e0:ab:1c:d9:b1:5d:11:23:db:12:
65:72:26:ff:df:ed:ab:93:67:31:30:fa:d8:68:f9:
a1:e1:38:75:a8:33:3a:92:e6:24:6d:ca:8f:86:bb:
96:cd:ec:b3:9c:56:c8:7b:a0:6a:dc:9c:29:5c:9f:
52:23:23:0e:40:6d:1e:47:35:c2:12:be:5f:f4:bd:
89:0f:b3:5b:5f:ec:6e:43:66:73:5c:bf:80:b4:ae:
07:ac:4d:93:48:a7:58:da:1c:62:83:bd:3c:10:2d:
ad:ac:03:92:3b:71:e2:27:71:04:22:66:b3:e6:8e:
ff:1d:96:1b:88:b2:8f:98:13:03:b6:a9:23:48:1e:
84:a2:11:17:de:5d:b8:e2:3a:a5:1f:9b:a7:3a:ca:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:B7:B1:F5:C7:95:E6:5F:E9:BA:0C:AB:F4:FD:4A:C9:E9:A2:51
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:95:5e:b0:d4:c2:29:7f:59:66:71:96:85:81:b4:8b:21:
43:44:e9:da:80:62:52:4a:29:ae:46:58:c7:51:db:b9:f8:91:
55:cd:a9:7a:a3:ba:68:82:de:9b:19:44:df:29:ff:5b:d7:d2:
11:07:2b:4d:ec:df:1c:5f:51:59:6d:74:aa:4c:3e:a1:dd:7c:
73:38:ce:98:d5:53:18:77:67:a7:d9:cf:ec:d0:a4:06:24:3c:
df:02:ec:f9:73:ed:f9:1b:18:e7:e1:44:3f:83:de:08:18:ac:
d0:73:01:b3:9c:03:23:d6:8c:04:68:0f:70:2f:fc:51:ed:00:
0f:e3:bc:ff:2b:eb:a2:e2:51:3a:0f:57:e7:7c:1d:b5:86:b3:
42:d4:08:b4:82:6d:99:9d:01:16:3e:ff:ec:eb:fa:fd:9f:2d:
d2:38:79:02:f0:90:3e:90:58:93:0b:5f:1c:a0:9a:30:24:cb:
63:0a:19:e7:9e:0b:b9:c9:a5:b9:40:fa:c7:17:e5:ef:26:d1:
2c:74:3b:7e:94:f5:2b:8f:87:53:42:58:e6:ba:c6:95:49:6e:
e4:c4:d7:88:ec:34:38:d5:73:12:d3:ca:47:a9:a4:80:f6:d7:
ef:d1:85:bd:82:87:e9:ba:96:2a:17:a1:74:52:5d:e5:68:e3:
61:ca:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:09 2025 by rpki-client on console-fra.rpki-client.org