Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: gK1DI4XKBaX4S+OAAnHgjTK7dOgmz+Vdf6Rvw4pAvGA=
Subject key identifier: F2:99:F0:BB:25:48:76:A1:76:46:F1:8C:94:0C:95:04:2C:EC:8E:05
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0194BA84938A07F85439772851D26202F859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 0325
Signing time: Fri 31 Jan 2025 04:00:38 +0000
Manifest this update: Fri 31 Jan 2025 04:00:38 +0000
Manifest next update: Sat 01 Feb 2025 04:00:38 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: uB3CJAKOrCGSAEBHdWLRPAGCFD1fUUiLUgI0e9iR3ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:93:8a:07:f8:54:39:77:28:51:d2:62:02:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Jan 31 04:00:38 2025 GMT
Not After : Feb 1 04:00:38 2025 GMT
Subject: CN=f299f0bb254876a17646f18c940c95042cec8e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:7c:01:35:01:e2:50:bc:22:e6:8d:99:c2:
7e:6f:73:33:86:bf:d6:b3:f4:85:9d:01:d2:80:fa:
b5:e9:26:14:50:a9:ca:ee:e6:82:a3:36:6c:87:80:
aa:5a:74:a3:d4:2f:33:20:55:56:42:2c:8c:14:15:
13:37:b7:06:c9:bb:e8:24:d8:1e:5d:16:1c:26:ba:
de:24:9f:31:cc:04:d8:e1:35:d1:ff:0f:53:d1:91:
64:6a:e0:c1:f9:a1:d3:f9:c3:a8:d9:6f:f9:0f:da:
97:b8:56:3a:6f:1b:83:2c:53:6d:0a:3f:c9:f8:1b:
f5:3a:89:af:aa:36:7d:d3:7a:e0:3c:1b:ae:8c:f7:
b8:73:df:18:be:0b:fd:3b:5d:c9:48:ff:59:84:8c:
f4:0e:dc:04:e2:b8:4d:5f:62:f1:f5:82:a7:45:2d:
40:83:48:1a:5b:43:ff:fc:1b:d4:70:8f:21:d8:47:
6f:15:40:4c:3d:dd:01:42:67:56:08:34:60:cc:4e:
73:ac:c2:cb:5f:f9:1f:dc:cf:ea:4d:30:14:49:6b:
19:c2:53:5d:ed:e2:20:8e:58:80:2a:77:48:d2:85:
f7:44:41:db:ac:4f:4a:b0:f4:9a:55:ac:03:30:9b:
65:53:c1:9f:5e:c8:83:2b:cd:52:6d:69:48:03:68:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:F0:BB:25:48:76:A1:76:46:F1:8C:94:0C:95:04:2C:EC:8E:05
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:6a:13:3e:e9:b6:0e:c9:c7:85:f6:05:57:1f:57:36:c5:
21:b5:5b:aa:84:3f:be:6c:d3:d1:dc:ee:28:af:fb:2b:a0:3c:
33:02:9d:f5:6d:61:15:5c:9e:7c:c4:ff:58:29:e6:65:2d:24:
ff:b6:1c:10:42:0b:71:bf:26:68:f3:f6:4f:0f:8d:7a:e2:19:
be:bc:95:1b:eb:cd:2b:45:bd:b5:b1:ff:6f:a5:f8:58:1c:ce:
ba:62:a9:fa:09:e0:5e:ce:5d:a3:9b:5b:ad:f7:89:95:c3:ff:
cc:b8:ec:ad:6b:d9:ca:11:32:59:ee:1b:65:c0:b5:a9:fc:c5:
2c:6f:5c:10:48:ff:10:8d:d5:57:b0:35:8e:6c:bc:e2:3a:c5:
ed:74:8e:6c:c6:91:29:1d:01:cd:04:1b:6f:a9:cd:76:59:68:
22:a3:70:aa:73:ae:ae:ab:ab:df:6d:02:c1:f1:f3:67:3c:e6:
a3:fe:7a:e6:72:f8:62:c6:20:90:41:be:db:db:a4:64:05:14:
67:78:7e:3f:f7:e8:b5:aa:dc:a6:92:8b:2d:b3:4e:ff:8f:a7:
9c:49:e5:41:cb:aa:4c:33:fa:b7:16:c8:97:01:c0:5a:4c:68:
91:75:07:77:83:d6:62:10:0a:36:22:00:d1:b8:e5:47:c2:cd:
c0:6b:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:37 2025 by rpki-client on console-fra.rpki-client.org