Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: AokSHeMNtUhGa+s8iBoKmbSOc6eOrRwD7Fki/pkiArE=
Subject key identifier: E3:EB:0C:91:20:B4:A0:9D:E7:96:76:1C:CA:1D:10:F7:8D:AE:32:F7
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0194C3F63E4AF194F6C86C41C754FE401F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 00:01:22 +0000
Manifest this update: Sun 02 Feb 2025 00:01:22 +0000
Manifest next update: Mon 03 Feb 2025 00:01:22 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: HAh+jIJw2dmlQIOxUcBXhPLXFGgxhIdMxOM24U3hJo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:3e:4a:f1:94:f6:c8:6c:41:c7:54:fe:40:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Feb 2 00:01:22 2025 GMT
Not After : Feb 3 00:01:22 2025 GMT
Subject: CN=e3eb0c9120b4a09de796761cca1d10f78dae32f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:96:b7:3f:2a:d7:b8:93:89:7d:b2:1c:38:
16:f6:8c:3f:b4:8f:97:ea:33:f6:7e:76:c6:21:a0:
22:98:0c:e9:36:3d:06:be:f5:2d:18:ad:3d:4e:b9:
f6:e2:48:b3:21:35:14:aa:c1:8a:49:f3:f8:7a:18:
72:fa:c4:78:a2:5e:80:11:12:11:41:72:f4:8a:65:
54:4e:bb:10:53:f4:52:e7:08:f6:2d:e3:aa:66:ab:
ae:51:7c:0f:b3:ff:e9:3f:85:a9:bc:b3:01:f4:59:
ca:ea:94:11:f5:62:f0:3c:48:55:3e:99:25:97:4a:
c7:8d:d4:20:3e:69:ab:d6:5f:c7:06:92:87:60:90:
ea:7c:94:f3:02:4f:cd:cb:be:8a:7d:bb:df:09:08:
36:e9:d9:ee:db:c4:e7:86:f2:3f:92:ce:0e:32:55:
43:c5:c8:10:27:74:5a:4f:ce:ad:a8:09:65:cb:3e:
58:f9:c1:ea:62:a8:17:eb:19:7c:f1:44:36:65:cf:
01:cd:de:7a:a8:a1:8f:fe:ef:33:fd:bc:e6:72:16:
10:dc:e2:7e:3c:06:cb:d9:68:a8:4b:80:2d:04:32:
52:25:ad:01:da:8f:23:a8:34:fe:81:4c:59:45:87:
7b:97:9d:8d:e6:8a:5c:56:8e:5a:35:89:1c:a7:ab:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:0C:91:20:B4:A0:9D:E7:96:76:1C:CA:1D:10:F7:8D:AE:32:F7
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:86:04:10:c0:da:83:e7:9c:da:cc:f4:f2:31:5a:d7:a4:81:
be:02:34:33:ef:2e:8d:44:47:94:4c:c3:99:c4:b9:43:c1:22:
bd:13:42:c2:92:ef:e0:58:98:ee:e4:18:72:af:4a:b6:86:fc:
a1:8a:06:eb:5f:31:5b:fd:ef:9d:6d:86:9c:2f:7e:0d:09:47:
ae:6c:1d:5b:cd:0d:da:e6:f3:8c:dd:c2:c2:af:03:64:48:43:
75:cd:d0:4c:04:dc:0a:19:d0:ad:d6:d7:f1:3f:6c:49:03:e6:
3c:74:de:cf:07:4b:31:a0:30:39:62:2b:16:31:bc:f9:7f:63:
f9:e1:ed:b8:88:e2:ff:80:6c:95:59:66:bb:aa:53:1d:df:5d:
aa:12:07:04:08:09:dd:67:0f:a0:16:e8:d6:f9:7a:10:4b:f1:
90:5f:81:8a:f3:5f:4b:08:1f:69:27:21:de:d1:5c:e5:e7:0e:
7d:41:80:3d:06:de:59:20:e0:c8:ae:a3:eb:42:85:0f:99:5f:
19:5e:60:28:ba:2e:09:e4:95:c0:22:51:7f:4a:78:a2:ec:cf:
d1:43:a2:20:5b:6d:40:c0:91:96:35:59:61:66:f9:d1:55:7b:
51:f4:01:e4:35:c6:98:ea:c6:f3:b9:b7:24:02:69:07:83:c4:
40:e2:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:40 2025 by rpki-client