Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: oMleZeOY9pM5rUznCl5V6PMpTYaE0HgwJZ9BsObGniw=
Subject key identifier: 1B:ED:09:F7:61:9C:1F:BB:0D:5B:35:4C:E7:D6:20:EE:15:31:EC:4C
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019511A2A3EEB9CA9581574F6511CD21E745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 079F
Signing time: Mon 17 Feb 2025 02:00:26 +0000
Manifest this update: Mon 17 Feb 2025 02:00:26 +0000
Manifest next update: Tue 18 Feb 2025 02:00:26 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 4+aJU0rOjEUhORQtbA8YHyW91h46VYQQHvXl8JTyt6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a3:ee:b9:ca:95:81:57:4f:65:11:cd:21:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Feb 17 02:00:26 2025 GMT
Not After : Feb 18 02:00:26 2025 GMT
Subject: CN=1bed09f7619c1fbb0d5b354ce7d620ee1531ec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:2c:2d:e1:19:c4:de:a6:19:d1:dc:6d:24:
df:b0:e8:46:1d:0e:c0:15:c5:4a:6c:a9:5f:8e:60:
55:df:d3:b8:ef:4e:0d:cd:04:09:ff:8f:62:f2:ab:
c2:ee:35:bb:6e:35:01:5d:a7:59:0e:fb:75:31:b4:
7c:6e:e9:0f:d9:31:19:1a:4c:3b:10:35:de:2a:e0:
67:bb:65:ad:68:91:e0:ad:b0:0e:3f:b7:bb:48:f8:
6d:f8:2b:66:af:94:08:32:3c:82:61:56:0d:84:29:
c4:58:84:de:09:45:75:33:a6:0a:7f:fa:53:02:49:
31:a1:d6:cb:da:ac:4b:88:94:e4:fc:ca:57:44:09:
41:4c:f8:92:8c:7c:36:9a:a1:e2:4a:76:72:01:52:
c4:12:b3:36:14:f8:f0:bc:b2:90:13:c2:21:23:ff:
08:9d:7e:86:51:90:a9:49:75:cf:29:60:6b:e8:ed:
5a:25:ba:0a:f7:d9:2f:22:7b:a4:de:05:8b:e6:68:
58:f5:aa:69:0e:f5:4a:31:7b:4f:77:95:42:18:85:
80:72:12:25:01:03:47:3c:69:e7:cb:80:94:ec:0e:
49:ac:cd:f0:20:53:07:6c:1d:b5:ef:0c:42:04:29:
ed:81:49:1d:4c:c1:5c:5e:19:1d:9c:c1:f4:90:da:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:09:F7:61:9C:1F:BB:0D:5B:35:4C:E7:D6:20:EE:15:31:EC:4C
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:ba:81:46:5c:8b:8d:f6:fe:17:ac:23:57:32:87:76:7f:
32:ba:47:11:3e:78:75:15:bb:40:79:01:7f:32:01:36:d2:49:
cb:1e:fb:25:51:51:35:ec:5b:de:4e:96:c0:0a:1c:98:10:1b:
7d:01:f6:4d:f2:a7:f5:7f:e7:ac:db:7e:0a:a0:8e:ea:16:82:
88:d2:72:6d:20:2b:c4:19:a2:ef:09:a9:9c:22:4f:b6:1b:5a:
83:d3:54:ef:ee:e9:c9:ce:53:fa:e2:a5:2b:99:fa:cf:0b:9a:
2d:d6:b8:25:18:b1:3e:19:a5:06:f2:c3:e9:03:40:cb:06:b7:
82:0d:47:d6:b5:fa:16:a3:21:c7:49:f0:8e:73:20:00:5d:57:
3e:c8:0c:4d:64:60:10:35:5b:16:9c:0c:d6:bf:09:55:28:37:
ca:b4:b7:33:46:23:14:07:09:5b:e7:de:9c:82:1d:22:8b:d4:
6d:c0:c7:ec:7d:9e:b3:84:99:22:dd:a9:f7:5a:bf:36:c8:b9:
3e:07:77:a9:98:f7:75:aa:c4:b8:c8:10:36:f3:c0:5d:6f:97:
8f:1d:54:92:87:a9:68:77:d8:31:5f:29:7e:16:03:f1:b9:b1:
63:d3:89:07:a5:74:ca:df:d2:5b:5d:70:3b:f2:94:1a:bf:de:
08:b9:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:46 2025 by rpki-client