Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: pEk5K4wLG/I1ChOe3yNZEJj5JiMPWTDByAZDEVGBSWw=
Subject key identifier: 20:2A:BC:FF:3A:00:DA:6E:9B:84:27:C7:5C:86:4E:7C:6D:63:EE:9D
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0194C42C4EC3C0C95444FF4B6257C5670C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 31
Signing time: Sun 02 Feb 2025 01:00:25 +0000
Manifest this update: Sun 02 Feb 2025 01:00:25 +0000
Manifest next update: Mon 03 Feb 2025 01:00:25 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: /edR/jcZgZyP7UTBeBfEPuvcDlcr3Gfl+eTRbSj9hDg=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:4e:c3:c0:c9:54:44:ff:4b:62:57:c5:67:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Feb 2 01:00:25 2025 GMT
Not After : Feb 3 01:00:25 2025 GMT
Subject: CN=202abcff3a00da6e9b8427c75c864e7c6d63ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:10:d1:57:9a:ed:39:0e:c3:1c:0b:8b:78:
e1:ee:cc:a1:3f:02:4b:07:5a:96:58:10:96:39:64:
ed:a7:b9:e2:87:09:cd:5f:18:ad:dd:84:4a:19:dd:
30:c6:17:f1:f0:ef:0b:37:e9:b7:dc:d4:fb:f2:79:
24:be:d4:a6:e5:3d:ee:e2:94:85:fa:8c:15:4e:14:
b8:32:ed:0b:26:60:21:92:96:d3:38:22:89:a1:9b:
b6:a7:de:9e:a0:c8:62:cb:0d:03:6a:50:3a:fb:f2:
2f:e8:f4:82:d3:ce:7b:58:aa:2f:a1:d2:25:34:6a:
39:67:44:46:80:0c:88:ad:40:e2:bd:c8:a3:a9:f5:
be:21:88:0f:ba:59:19:c4:45:88:ad:61:5f:af:d4:
01:07:f7:a4:a8:46:26:36:d5:da:10:d1:3c:ed:c4:
fe:ae:a8:63:61:0f:4b:9f:4a:e8:b8:a2:2c:e2:91:
91:47:b9:4b:1a:2c:b3:1d:f3:a5:34:56:db:6a:14:
18:f9:0a:b7:c5:5e:11:6a:b4:76:d2:36:36:87:c1:
d4:ce:1d:b1:2b:e8:35:f3:17:57:ce:b2:98:ba:5d:
14:51:2d:4c:71:dd:ec:47:41:76:b7:08:fa:6d:a8:
09:a7:39:55:66:39:69:e2:97:99:cf:6b:68:e8:ed:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:BC:FF:3A:00:DA:6E:9B:84:27:C7:5C:86:4E:7C:6D:63:EE:9D
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8d:26:fc:47:84:93:38:6a:37:90:05:a9:0f:86:e2:22:d2:
e2:0c:d4:65:92:ef:78:57:56:dd:f5:04:8e:98:dd:43:65:47:
8d:0b:c4:b8:70:e6:28:b7:36:fb:ff:79:07:09:ee:29:18:a6:
20:11:6e:78:8a:00:b2:da:58:b9:8d:d8:9f:4c:c3:2e:0b:47:
dc:d8:0e:a4:3b:27:c3:f2:f6:e6:a5:a9:82:78:0e:61:68:1f:
d1:81:66:df:94:82:72:cf:c5:03:61:ce:6a:06:d7:49:62:a7:
7b:64:af:68:15:67:4c:db:ee:7a:bf:e6:1e:e8:c7:3f:b4:33:
34:ea:31:1f:d5:f6:08:f5:60:77:ec:49:5f:fa:09:db:fd:25:
40:a8:c6:b9:c9:0d:f0:88:12:28:30:f1:5e:e2:ad:ca:da:da:
78:0b:e8:ce:96:a4:15:e8:55:27:af:5d:83:ff:57:a7:d8:05:
1f:a7:38:df:a0:d5:6d:04:42:ed:75:8f:e0:ed:21:16:e9:5d:
e5:f3:c1:72:89:6e:a4:63:a5:c6:df:cb:90:09:e1:db:0d:46:
96:7e:29:dd:b9:39:33:2a:ce:c7:0c:8e:4f:dd:d4:fc:78:16:
b0:15:47:d2:87:98:3a:27:4d:93:d2:92:ca:13:67:e5:fe:db:
29:63:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:39 2025 by rpki-client