Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
File: aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft (raw, json)
Hash identifier: /25dcMq01WRknvN6jeZxNTmLB0kMUSmVS5iuSTQAKb0=
Subject key identifier: 75:7A:F1:58:A2:D9:84:CC:C8:D2:18:56:B8:D9:0D:0C:F0:03:F9:59
Authority key identifier: 69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
Certificate issuer: /CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Certificate serial: 0194BABBAD23CD3D4B8C5FB15C7DEEA0105E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl (hash: IL8g8xnoH/q0oAgGb2hTyb02huN2UsmsSN49DfdH1Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ad:23:cd:3d:4b:8c:5f:b1:5c:7d:ee:a0:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=757af158a2d984ccc8d21856b8d90d0cf003f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:c6:fb:92:eb:dd:b8:10:a5:a2:f4:98:4e:
3e:df:52:29:2d:6d:02:8f:02:e7:5b:3e:e8:b6:6c:
e6:dd:76:5f:65:a3:23:80:25:c8:84:6f:42:ee:01:
9c:3d:e2:2b:0d:7a:01:d1:2a:27:b4:a5:2d:a5:97:
4e:33:77:91:ae:c3:7d:d7:ab:37:f4:0c:20:35:ac:
a0:b5:2f:1a:ce:f4:53:bf:ae:ae:e8:f1:1a:4d:b4:
4d:9b:ac:5a:d1:9f:f6:f9:fb:6d:16:18:09:a9:bb:
69:1c:73:09:86:f8:f4:84:7f:c6:ab:02:4b:10:6a:
5c:71:b3:ce:85:a8:ab:03:b7:22:8b:df:c1:5b:1e:
83:95:77:6a:0a:ad:9e:6e:10:33:1e:1c:19:1a:53:
1d:58:e7:04:d1:33:6e:a7:43:10:e6:25:ff:87:15:
f5:90:b0:0a:99:b0:21:fc:c4:a6:a4:e5:47:85:b4:
d5:ea:81:ec:42:dd:2f:9f:9b:31:4d:db:9e:3e:eb:
9e:b4:be:7c:1e:57:8c:8b:e4:f3:7c:c7:06:24:41:
0c:43:5b:ad:ed:17:13:3d:d5:00:24:d8:98:41:4a:
33:a6:24:ec:41:f2:fd:05:49:c6:55:4b:25:fe:23:
bd:63:1c:9b:b0:fd:14:24:43:56:8f:fa:68:13:f7:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7A:F1:58:A2:D9:84:CC:C8:D2:18:56:B8:D9:0D:0C:F0:03:F9:59
X509v3 Authority Key Identifier:
keyid:69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:37:4e:8b:70:71:1c:99:97:01:80:c7:f6:79:fd:58:d8:04:
f5:e2:4e:45:6d:92:16:7f:bc:40:b7:0d:ae:84:28:24:48:43:
a7:c1:46:96:5a:9c:bd:62:62:d8:93:a8:b0:88:53:32:27:aa:
33:25:e2:15:f8:83:f6:6b:99:f2:bf:54:8b:d3:aa:30:4a:4c:
9d:da:9e:fd:fc:4c:00:38:10:e6:82:ab:ba:44:6f:99:9c:ed:
5b:79:d1:4d:89:a6:08:52:d0:05:88:9d:13:73:b8:0a:83:82:
0f:87:a5:8a:a4:fb:76:ae:5c:c3:86:a0:77:96:8f:0d:72:41:
7b:f3:b8:19:51:ef:51:97:e4:30:17:ac:c6:fc:dc:82:56:47:
a4:21:f4:6e:6a:a4:02:6e:d8:39:ea:4a:2d:8d:08:f5:b0:a5:
67:bb:6d:f6:a7:11:31:11:2a:e2:97:55:be:c3:6b:97:3a:16:
6a:8d:01:3f:18:b7:e4:90:9c:f0:7c:a1:ee:08:25:97:ab:53:
16:b3:5d:a5:e6:fa:de:7c:18:e5:94:a1:fd:02:bc:98:e9:12:
36:d4:2a:ed:0f:84:bd:c7:81:c2:a6:5e:68:ff:2f:48:0f:e7:
5a:08:a2:64:f4:62:b7:ec:95:90:f7:2d:d6:2f:59:9b:40:c0:
9a:ec:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:37 2025 by rpki-client on console-fra.rpki-client.org