Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: tGSPpRYCjtQ+76KtYJhPlHTpbEHL7oY2cYaJ76DwTjs=
Subject key identifier: 5A:91:2D:9E:07:A8:60:53:7D:D2:8A:C3:89:AC:E4:E0:43:4E:0C:3A
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0194C4637253C860F3124C846F6D210C4233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 02:00:39 +0000
Manifest this update: Sun 02 Feb 2025 02:00:39 +0000
Manifest next update: Mon 03 Feb 2025 02:00:39 +0000
Files and hashes: 1: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: xxBB+vS3tmTrLsJCelSHs4P0Z83TV0eDGacnKFYY+oE=)
2: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
3: zLAtB_XUh2RgBcOqYFSC3nkEPvs.roa (hash: J/EQLsSRdti9PSX43YyMwUnwNWj4OyzAjeXQoWkVFcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:72:53:c8:60:f3:12:4c:84:6f:6d:21:0c:42:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : Feb 3 02:00:39 2025 GMT
Subject: CN=5a912d9e07a860537dd28ac389ace4e0434e0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:99:91:83:62:34:00:af:6e:75:7a:f9:62:
bf:ea:63:51:75:1f:f5:f7:63:b3:a1:fd:68:ac:93:
83:61:39:71:fc:a1:99:34:42:2b:a2:b4:01:74:25:
d4:64:29:92:22:d8:94:b3:56:90:fb:7e:42:28:05:
f1:35:0d:f6:34:fb:84:c0:2c:97:47:04:ad:b9:d2:
11:1a:2a:19:9d:6b:34:8d:2c:42:91:45:8c:15:7b:
13:17:0e:1a:10:49:37:fe:09:a2:30:bc:b1:43:99:
ac:84:2a:75:30:20:82:60:76:81:9d:d1:08:17:8c:
17:9a:2d:99:1b:3e:75:2d:d4:32:54:31:de:3f:5d:
e2:7c:0d:cb:67:93:d6:99:36:b3:9c:f3:8f:73:d8:
e8:b0:7e:85:22:69:88:9b:0d:2a:2a:d2:cc:2c:4a:
5e:67:9b:72:8d:0d:1d:52:34:bb:ff:ef:6f:7a:09:
e0:4f:fb:61:e9:a4:a5:07:ab:bd:00:94:08:07:84:
03:22:79:84:f4:0c:7a:19:12:30:18:63:5c:20:c8:
a2:7a:ea:95:c3:25:c4:6c:03:53:0f:12:b6:3c:5a:
4d:d0:f2:d5:a9:22:1f:ee:8d:0f:1c:34:b5:6f:0a:
59:b7:4c:08:62:f0:d9:88:48:86:7e:23:e2:87:7f:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:2D:9E:07:A8:60:53:7D:D2:8A:C3:89:AC:E4:E0:43:4E:0C:3A
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:93:62:a0:02:df:cb:05:3a:4f:96:c2:17:a3:a2:fe:97:98:
63:5f:1c:b2:49:fd:dd:04:80:65:1c:4b:30:00:af:9a:da:27:
88:67:0f:96:0d:9d:ac:52:e2:49:f5:f4:d9:09:2c:1d:28:aa:
4d:aa:3a:b1:08:bd:b1:aa:07:40:f4:e6:52:cd:2f:0a:92:81:
4b:0b:a4:d0:8e:46:fc:07:65:cc:3e:5b:37:63:e8:9f:a3:cd:
04:c5:61:3f:4b:e1:3b:6d:e9:26:cb:e0:0d:ad:26:90:97:9e:
9a:86:30:79:8f:37:da:d2:36:ac:c6:a2:b7:bb:7c:c4:48:93:
15:fe:8d:5a:dd:1f:ef:6a:c8:bf:e4:62:15:ce:b5:0e:ae:8a:
64:73:27:10:b5:a4:0b:82:ad:91:5e:97:6c:13:69:ec:4a:6b:
61:ed:65:c3:f6:fe:67:5c:1f:43:db:f1:8c:e4:df:08:f0:30:
5a:f6:9b:7d:92:71:2c:27:71:ac:2f:16:3f:16:44:65:cd:54:
b2:4a:e2:c6:02:99:cb:bb:52:74:35:41:c5:ad:f1:01:9f:06:
7c:ba:04:87:0b:8f:5f:28:f4:4f:25:32:71:25:93:e6:be:32:
b1:63:1e:e9:49:a2:ae:ef:a7:da:71:92:6a:3e:6a:2f:c8:b0:
16:0c:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:59 2025 by rpki-client