Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: 8QwiYv2wAPI4BOT9TxNAgp3EH5En/SgZnAR221oQAPo=
Subject key identifier: 6C:CD:B1:1E:75:6D:52:DB:E1:FF:1C:68:92:6B:B0:F8:EA:E4:DB:69
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 019510C7B682CC5F4EEC6E1B541B3FE069DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 109B
Signing time: Sun 16 Feb 2025 22:01:18 +0000
Manifest this update: Sun 16 Feb 2025 22:01:18 +0000
Manifest next update: Mon 17 Feb 2025 22:01:18 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: iZ0/+DA2Fo9N9oyXw7zZpYi8+ieu6v9Vb1980z1rkBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b6:82:cc:5f:4e:ec:6e:1b:54:1b:3f:e0:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Feb 16 22:01:18 2025 GMT
Not After : Feb 17 22:01:18 2025 GMT
Subject: CN=6ccdb11e756d52dbe1ff1c68926bb0f8eae4db69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:36:80:da:06:fd:dc:99:10:20:23:29:0a:
bd:b7:43:05:cb:3a:d5:85:53:61:e3:e0:82:45:57:
58:91:4c:4b:a3:79:9b:35:da:b0:77:a3:42:9f:b7:
24:cd:73:94:c1:19:74:42:3e:75:06:94:ee:fd:57:
7d:9c:ac:7e:bc:40:df:ce:5e:29:b3:7e:1b:49:32:
ab:f7:55:61:60:7e:84:61:34:93:9d:a4:e6:a6:98:
a8:31:a7:8c:c3:93:5f:32:f5:51:91:93:0d:5e:77:
29:19:6a:a0:b1:9b:c4:0e:d1:26:93:d1:eb:a3:c6:
f0:87:5d:38:4b:18:1c:cf:b3:4d:28:e2:5e:f3:65:
37:a2:68:58:79:ab:ee:53:82:44:56:cf:d2:d8:36:
78:45:12:c3:c4:df:69:b6:bc:bf:0c:75:bb:b7:5c:
6b:67:18:f5:d8:81:e2:ca:8b:bb:58:da:75:e7:b0:
5a:a2:60:3c:1e:87:47:7b:02:e2:d7:56:52:fb:b4:
6c:93:89:34:6e:e6:da:4e:02:b5:dc:e5:65:53:fc:
f1:0b:61:b1:bd:5f:64:7f:9c:dd:b8:87:57:a2:ed:
9a:56:7a:ec:bf:77:48:9f:5a:0f:aa:3f:ec:f3:0b:
30:9d:f9:e1:a5:47:cd:bc:6c:e2:fd:13:9f:b8:ea:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:B1:1E:75:6D:52:DB:E1:FF:1C:68:92:6B:B0:F8:EA:E4:DB:69
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0e:a6:e1:a4:0e:9c:3e:6c:44:b7:ea:4c:80:ca:04:1a:00:
40:6d:e2:84:14:3a:f9:8b:04:61:2b:ad:44:1e:e7:37:8b:f8:
83:df:ff:bf:7b:86:8a:eb:b6:38:72:5d:1d:96:dc:f4:a6:18:
92:9e:a1:5f:39:35:29:ec:c0:f4:de:c3:02:71:89:a1:5d:97:
26:39:01:a3:8a:6f:9d:a0:4f:8a:24:4c:54:3c:18:33:f6:9c:
0b:26:06:c1:cb:80:33:12:99:9b:e8:6f:b5:fa:a4:c4:6c:b3:
ce:04:88:bf:3e:e3:26:5b:47:42:42:7b:15:45:a5:d8:00:cd:
97:1c:8c:e1:9a:90:44:33:c2:58:83:96:74:2c:02:4c:c5:90:
69:f0:88:6f:2f:76:f6:26:f9:e4:d9:10:b4:13:e3:39:d5:05:
f9:bf:98:09:73:19:14:c0:17:cc:9f:6d:b6:96:b9:1e:5f:a9:
b2:b8:57:6f:41:43:91:51:ac:14:a9:14:e4:3b:eb:e5:40:10:
bc:ba:24:f1:db:85:ff:58:6b:25:7d:6a:78:18:2a:4a:f9:0c:
20:e1:2c:f1:3b:5d:8d:c9:36:1b:64:bc:6f:cb:a8:f0:6f:f2:
dd:64:75:d2:d4:c0:0a:4c:fa:76:ff:21:0c:6a:6c:2e:b6:ab:
e1:18:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:16 2025 by rpki-client