Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: /7sok2xekzrHYzAb6Jm6HyTTFakC3DFVBAO/R6TCpbs=
Subject key identifier: CB:14:A9:09:7F:4E:48:53:59:DC:46:60:77:B2:E9:3B:91:E4:44:B6
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 0194C4D183713223421F71D73F67C0E5B092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 02A7
Signing time: Sun 02 Feb 2025 04:00:52 +0000
Manifest this update: Sun 02 Feb 2025 04:00:52 +0000
Manifest next update: Mon 03 Feb 2025 04:00:52 +0000
Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: vcDbsBrlGZ8xYz0bfFDgSPr16wJupgJQ/5jBnkiNOQs=)
2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:83:71:32:23:42:1f:71:d7:3f:67:c0:e5:b0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Feb 2 04:00:52 2025 GMT
Not After : Feb 3 04:00:52 2025 GMT
Subject: CN=cb14a9097f4e485359dc466077b2e93b91e444b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:99:76:98:3b:bc:4c:3d:ae:67:21:3e:7a:
8c:7c:eb:9a:1f:a1:2b:85:55:2b:eb:2a:a6:be:b2:
13:a5:7e:f5:a0:92:1f:24:e1:89:c6:de:d0:97:45:
27:ac:2a:92:31:8a:a9:9a:d6:a2:14:d9:6f:03:4c:
3f:cd:d9:1f:f8:74:21:42:1b:74:35:cf:32:74:1d:
8f:b3:08:dd:56:be:1e:c6:fc:6a:36:f2:0d:8a:8f:
eb:c5:da:87:33:ba:87:db:51:61:c4:ff:a9:86:b7:
58:7f:83:38:fc:88:e3:ea:0a:03:11:8b:04:3b:4f:
77:83:3b:f8:53:b0:5e:53:f7:f6:ba:a3:05:3c:60:
ed:ca:6b:ba:ac:09:e3:19:c7:f0:92:c2:dd:85:2a:
e5:36:b8:4d:29:ab:e5:66:9a:b1:55:bb:8a:87:30:
77:82:04:2a:b9:d5:bb:32:0f:fe:ba:fe:f6:43:ac:
fa:cd:34:68:f9:da:89:6a:18:0a:eb:e4:0f:a9:5a:
56:89:19:1d:da:fe:10:2a:42:2b:59:12:08:e9:25:
c4:6c:46:2d:79:78:49:85:0a:81:5b:55:15:24:7c:
9e:db:36:a0:0f:4b:48:b6:b5:59:1b:1b:f3:d9:b8:
9e:2a:c2:3a:1f:0b:af:c5:18:fd:96:89:03:7e:63:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:A9:09:7F:4E:48:53:59:DC:46:60:77:B2:E9:3B:91:E4:44:B6
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:84:0f:9e:f4:3f:27:6e:67:57:6f:f5:a6:d7:e5:50:c5:d1:
6e:92:3e:14:c2:e0:51:b2:b8:6b:01:11:c3:98:de:52:9b:c2:
89:27:37:77:2c:43:7c:f2:b4:2f:60:72:2d:e8:82:58:ee:0c:
b8:08:fc:20:e0:f8:87:51:6c:26:9e:df:9d:4f:67:e7:9a:41:
85:27:d3:f8:1f:c2:ed:d8:54:02:f4:f4:48:f5:3e:ad:b6:b1:
f9:29:4b:3f:7c:df:49:3d:02:80:27:ff:51:8b:c1:b2:29:7c:
9e:d1:08:ef:3e:32:cb:e9:58:d6:77:a7:f7:bb:20:e6:1b:07:
be:13:da:d2:ff:0c:b2:00:b5:da:49:9c:2e:ac:10:51:91:d1:
c1:c6:bd:ba:bd:f1:a6:e4:e5:b4:83:ff:93:74:2f:e3:2b:27:
ed:25:5e:04:33:d4:4b:a8:1f:88:52:dc:c9:7f:01:87:3d:00:
a5:e0:c8:79:40:4d:17:83:a5:35:37:2e:9a:c5:e4:e6:fa:38:
3a:b1:1d:9d:18:9c:b9:3e:70:79:eb:b4:da:5f:e6:96:7f:4a:
d1:9f:d9:eb:e4:19:f4:03:12:e8:af:19:86:8a:6d:14:6f:da:
dd:02:a2:4e:d5:0c:c6:0d:39:4f:95:63:10:00:96:f2:a3:23:
0b:06:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:45 2025 by rpki-client