Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: SVjc+mhGP0p+NdmRA7P46dxioBa51+O7i+1j4UmRTME=
Subject key identifier: 82:50:3A:07:EB:BA:89:D2:C6:6B:96:84:88:AF:7E:D2:0A:ED:DB:F7
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 0194BABB323C84CCFB8F1C3C0336FBD638A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: kTC07j3HJfTaXu/eEiEwcudiXNXVrAFVwbB41rFaLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:32:3c:84:cc:fb:8f:1c:3c:03:36:fb:d6:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=82503a07ebba89d2c66b968488af7ed20aeddbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:f2:3c:f3:8e:3a:9d:df:4e:b6:10:0c:17:
c7:70:8d:31:a1:8a:24:99:3f:b3:c5:7d:6a:7d:6b:
c5:01:ec:17:d5:83:7e:5a:03:eb:d0:de:50:86:37:
4f:89:4f:54:15:e8:d4:66:5c:e0:44:56:c3:8d:d4:
cc:c3:a6:26:4a:77:b9:52:0f:17:78:07:f2:36:57:
e7:9e:c3:6d:71:93:fd:39:d6:42:ab:c8:80:03:3c:
59:e9:95:3b:49:0d:5e:06:07:85:a0:2e:57:80:c2:
e1:e9:59:9e:22:59:59:7a:00:2f:bc:d3:d8:ad:b5:
41:5a:41:7b:30:58:a2:24:4d:af:fd:bc:55:4b:55:
ad:04:2d:fd:77:49:83:55:b1:b4:d8:c2:ee:bc:d1:
6e:14:77:af:8c:4b:42:fc:14:9d:0c:fc:37:4a:e5:
57:91:b6:20:89:3c:90:e4:8c:d1:a0:ce:7c:85:e9:
c7:ea:69:9c:f5:d8:64:02:21:d9:be:db:df:e8:f9:
4c:78:49:45:ec:a9:90:58:d6:c3:c1:8c:3c:08:4a:
7a:26:72:6c:df:b3:80:4b:e3:a5:fc:39:2d:9f:75:
d0:fb:80:6d:89:ac:cd:4f:f6:3d:8b:4f:75:3f:ea:
fc:bc:a3:b1:40:a8:7d:a3:aa:a7:1e:35:b9:ff:ac:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:3A:07:EB:BA:89:D2:C6:6B:96:84:88:AF:7E:D2:0A:ED:DB:F7
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e5:4c:0c:b6:11:7e:4b:bb:50:a6:ca:6d:94:4b:da:77:d6:
20:30:1e:82:5c:e8:73:89:99:bd:e0:de:43:00:92:0b:b1:67:
cd:bd:97:b8:ed:01:bc:5c:91:06:2d:bf:cc:b9:ff:08:f4:62:
e2:99:7b:d4:7d:c5:ea:b0:08:20:4d:bc:75:a7:f1:e8:b5:e0:
fe:13:39:58:dd:ac:ba:82:ef:5c:a5:61:c4:56:00:b1:ed:85:
f3:26:e0:16:58:a6:83:23:47:22:c9:fc:2f:04:56:d9:e7:68:
7e:6c:7d:a2:82:5c:8a:92:86:2b:ee:0b:5c:29:28:7f:91:53:
8e:a4:2a:25:18:9c:2f:55:0b:45:1f:fa:6f:b9:81:6a:8b:a3:
63:dd:eb:0c:a4:e7:6f:5d:b0:b6:c9:e3:b9:09:3d:af:c0:42:
b1:61:97:3b:c8:1f:00:87:b7:1b:4e:f2:c1:34:90:02:4e:44:
5e:f7:81:5a:fa:16:0c:d2:9c:43:7d:0f:89:8f:04:07:76:38:
48:6a:4e:58:63:f7:a1:36:2e:36:e5:7a:64:8e:fb:f4:32:d8:
05:77:46:40:0b:48:f6:6f:2d:be:a8:3b:a0:68:16:78:43:aa:
d0:2f:58:1e:78:59:c3:8d:c5:9f:ab:6d:6a:4c:43:81:f3:91:
ed:b8:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:30 2025 by rpki-client on console-fra.rpki-client.org