Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: +ae4WXCdglKNhBmcFlnNfSZ9DAQEcK0FTxY3KP3DX78=
Subject key identifier: E8:B5:21:05:58:F2:0F:62:B7:72:A1:47:E2:2C:69:87:AE:BA:CA:62
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 0194C463B65C83B6421D2B4C18B0251123AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 11A0
Signing time: Sun 02 Feb 2025 02:00:56 +0000
Manifest this update: Sun 02 Feb 2025 02:00:56 +0000
Manifest next update: Mon 03 Feb 2025 02:00:56 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: Fgq7rO67kl4g2JA9MHiTHx1kcNUFsmC0KqvOjc+rBDw=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b6:5c:83:b6:42:1d:2b:4c:18:b0:25:11:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Feb 2 02:00:56 2025 GMT
Not After : Feb 3 02:00:56 2025 GMT
Subject: CN=e8b5210558f20f62b772a147e22c6987aebaca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:eb:9c:85:2d:a2:71:c6:a8:48:00:60:76:
1f:65:18:e5:de:8f:f3:7b:01:74:cc:86:47:83:c9:
20:e5:02:bc:c7:97:53:74:86:11:e3:60:3f:50:0e:
44:15:70:f0:43:38:9c:21:fa:e4:25:5a:e9:92:51:
2e:3b:7d:24:57:03:2b:84:63:1e:26:f2:f6:2e:b9:
f4:b6:19:36:6c:53:db:2a:96:56:21:8b:5f:13:95:
bb:86:d4:95:47:b9:4a:b0:b9:07:3c:52:80:ba:4f:
77:9b:8d:d8:06:b5:23:9d:57:ef:b5:b8:57:ce:b0:
80:1b:db:1c:f7:39:e9:b5:6a:b7:64:f3:84:dd:d3:
3c:58:25:eb:df:ac:85:f7:02:31:6a:e7:90:40:32:
5b:de:f0:fe:ae:ba:1b:b5:27:f5:15:25:61:a7:03:
3a:aa:a2:06:de:a3:55:5d:d6:7e:83:30:41:8c:78:
f5:4e:de:39:2f:42:c3:67:bd:e4:9b:6b:3e:77:21:
94:21:3c:c9:61:d6:79:ac:c6:f6:90:4e:07:d3:d2:
e9:2c:ab:20:16:37:8a:e6:e5:96:ef:b1:61:27:1b:
0f:ee:bf:d3:5e:ec:f9:69:e2:72:63:0c:92:e6:5d:
67:2f:63:bb:f4:c1:e3:2f:b8:36:d6:b0:1e:3f:37:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:21:05:58:F2:0F:62:B7:72:A1:47:E2:2C:69:87:AE:BA:CA:62
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6c:88:46:57:41:bf:f7:cb:bb:c9:4d:00:2f:d2:3f:c8:b4:
b8:62:b5:69:03:7c:b2:5f:98:be:01:a6:92:f9:d2:33:0a:38:
7d:f9:b9:a2:81:a1:c9:a6:18:76:1f:58:09:e2:ba:ae:b5:bf:
76:04:6c:e4:fe:f7:bc:67:50:e8:ab:38:51:d1:18:e8:17:07:
98:21:1e:c1:2b:78:8b:fe:58:7e:b4:fd:61:98:cc:74:c9:63:
0e:52:2a:41:87:82:ce:b2:c6:78:e2:c8:9c:4c:c8:13:12:83:
24:ab:9e:52:65:aa:0d:37:4e:82:4e:44:58:07:ff:b7:b3:df:
5d:db:34:cf:7b:71:25:f0:42:de:a4:8f:19:da:06:a2:b8:6c:
08:ea:15:2f:4b:7c:1e:66:a7:33:dd:3f:20:fa:23:1f:f9:a9:
6b:d1:54:e4:c2:eb:df:71:d3:d9:bf:3b:bc:ce:9c:80:10:50:
f5:c2:04:22:87:b6:0e:aa:89:61:1d:bf:8d:6a:43:43:80:95:
82:67:1e:10:b6:13:f9:af:63:b8:6c:6d:6d:a9:47:16:84:6f:
a8:6d:d6:1d:90:aa:75:82:e4:03:5e:ec:2d:16:bd:b3:c6:f3:
0d:10:b4:fa:71:14:53:83:c8:6f:53:f7:b3:98:c6:22:07:57:
5f:47:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:34 2025 by rpki-client