Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: lcsA7S61xg5/o0lFxRwTBRo06g/1FWd879rFHstNN3g=
Subject key identifier: 24:A2:02:E6:1F:E2:AB:4E:44:73:E1:E3:AD:84:8F:5E:7C:B0:A1:71
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0194BABB5D9E24EBA643FEAD1D4CF3720118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: tfmUVkj5ZjRLweEly7FLy4kw9V+kmiH6+Fqf7yRokd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5d:9e:24:eb:a6:43:fe:ad:1d:4c:f3:72:01:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=24a202e61fe2ab4e4473e1e3ad848f5e7cb0a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:41:75:b0:50:6a:ee:ff:ca:a2:18:93:e3:
47:40:db:15:f6:ce:dc:62:0b:57:b0:86:66:63:71:
e7:4e:7d:2e:0a:65:38:f2:b5:b2:8c:a2:e0:2f:82:
61:94:19:71:88:14:a0:17:fe:91:5c:aa:57:f4:1a:
3b:9a:5b:57:e6:66:05:9e:b9:b2:1e:33:50:21:fa:
24:6a:93:d9:c0:fd:5e:a8:be:47:44:cf:60:ba:38:
db:8a:6e:f7:89:00:b9:21:d5:db:42:fa:c7:7c:51:
1a:66:70:52:4f:2c:94:21:da:43:30:5e:f0:91:7f:
d0:57:3a:55:a3:93:61:25:55:ae:c1:77:d4:0c:ad:
08:15:b3:63:a8:4d:7b:70:fb:03:3e:9d:b6:ab:4c:
01:57:22:dd:15:07:a5:30:09:cc:a1:22:20:0c:4a:
99:ed:2b:05:19:d6:55:11:27:50:f8:a1:42:97:b9:
b5:49:2d:36:80:ea:94:95:da:38:91:f0:76:df:c9:
a0:c7:ce:a9:0f:e9:28:cb:3f:a0:9d:15:c9:26:8d:
07:e4:47:f9:1a:c8:4a:ba:eb:95:26:56:e2:b8:1d:
ee:fe:5b:a2:eb:8d:93:9f:2a:a2:9b:4d:8e:4d:f1:
a4:21:ae:12:0e:e0:5d:61:65:00:11:c7:05:f3:11:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:02:E6:1F:E2:AB:4E:44:73:E1:E3:AD:84:8F:5E:7C:B0:A1:71
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8f:bf:e8:f2:76:93:ac:11:26:bb:af:a1:0a:04:af:4f:cf:
11:27:f7:06:23:48:f9:7b:49:6e:e0:22:b0:5f:ea:29:ff:b1:
9f:61:05:43:6e:74:71:3d:53:dc:c6:6d:f5:ff:fb:0a:eb:5e:
2a:e9:fd:f9:5c:9e:73:d9:7e:e3:e8:f4:5d:3d:c0:85:0c:e4:
88:70:95:df:b6:55:1a:0d:b3:bc:c4:7c:32:17:d7:f0:a4:d7:
4f:db:6c:50:0b:e7:a1:cb:5a:ca:8e:e2:15:51:a8:54:36:2c:
d2:06:29:62:2c:a6:f6:78:2c:ef:ef:68:88:f4:96:92:c8:b6:
36:dd:43:a7:f1:00:cc:82:89:53:2c:34:0b:50:98:41:1d:67:
6e:c9:63:a9:a2:71:4a:e2:b4:34:a9:90:ab:ea:54:46:17:5c:
03:21:ab:b7:00:9e:43:c7:76:19:ed:2a:5e:be:21:78:1c:2f:
7c:53:96:98:c4:30:e5:d8:91:40:3d:e1:4e:60:c7:ac:f7:65:
51:3a:93:5b:68:39:18:07:1e:b2:aa:16:d5:1f:a5:37:58:f9:
71:7d:5e:14:d5:27:95:03:9e:f7:04:37:fa:98:64:72:13:95:
7a:6e:b7:ef:f0:09:62:99:34:5c:18:5f:79:c5:40:b4:9d:0f:
85:03:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:54 2025 by rpki-client on console-fra.rpki-client.org