Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft (raw, json)
Hash identifier: eLOJ61LlQel1Wx/Uz+8kzEMgzHle1MD/k2dM0sgOzz4=
Subject key identifier: 4C:34:4C:BC:AB:52:F2:37:6E:61:D0:B8:96:17:9F:85:88:3B:1E:5C
Authority key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Certificate issuer: /CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Certificate serial: 0194BAF21DBEA27F24395850E8D00C6F9D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
Manifest number: 0401
Signing time: Fri 31 Jan 2025 06:00:17 +0000
Manifest this update: Fri 31 Jan 2025 06:00:17 +0000
Manifest next update: Sat 01 Feb 2025 06:00:17 +0000
Files and hashes: 1: iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl (hash: PnG+O0Uyxty9BCIqUe00FBIT9C/vmbo13qSSCLc3OLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:1d:be:a2:7f:24:39:58:50:e8:d0:0c:6f:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Validity
Not Before: Jan 31 06:00:17 2025 GMT
Not After : Feb 1 06:00:17 2025 GMT
Subject: CN=4c344cbcab52f2376e61d0b896179f85883b1e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:4e:3c:4f:08:2d:92:d6:0d:cc:c4:0e:b5:
0e:98:2f:c9:9d:d0:1f:6b:7c:3f:4d:fa:82:47:b1:
59:ab:9e:ad:b7:cb:7c:8d:72:9b:51:bc:b1:b6:ec:
88:21:cb:f6:09:c7:f9:bd:08:28:91:a7:bd:7c:7a:
b5:22:05:cc:5a:6c:6b:0b:fb:ad:14:38:03:3b:f9:
90:9e:58:25:a2:3f:71:b4:0e:aa:b4:8c:9c:88:a1:
b9:26:2c:a9:a9:32:fd:d2:f1:ea:9a:9d:61:d6:a0:
69:9d:52:fb:3b:a5:b0:7f:7f:c4:60:dd:3d:68:25:
f2:e3:c9:4b:65:6d:6b:bf:07:b9:bb:35:63:11:71:
29:3b:7c:69:b7:af:0b:0a:4c:be:a4:16:5c:76:cb:
6c:a9:34:91:11:76:27:45:40:85:07:18:76:8b:5d:
22:4a:2f:d0:f0:43:31:47:ba:fa:fa:9d:d2:b5:c4:
77:b5:e4:f7:12:98:0c:bb:e6:45:66:ca:b4:72:f2:
a5:1e:89:7d:82:7e:9a:2b:ad:e0:02:fd:d7:25:13:
6c:a7:6d:99:a1:ce:fe:a7:c3:ed:b7:5a:ce:0c:8d:
dc:6b:49:45:e9:af:75:35:48:49:42:17:16:c0:d3:
9c:fc:a9:c1:f4:a8:bc:c8:29:03:f4:b1:6e:61:9d:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:4C:BC:AB:52:F2:37:6E:61:D0:B8:96:17:9F:85:88:3B:1E:5C
X509v3 Authority Key Identifier:
keyid:89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ba:bb:de:30:17:d6:a1:c4:4d:b0:d8:0a:62:72:a6:5c:85:
21:d3:9a:04:68:5e:56:07:c4:95:e6:94:9d:41:b8:0a:a2:c7:
6e:0a:0e:47:e6:a8:fb:b7:cb:de:8a:e0:b5:1c:a4:82:41:c6:
87:22:b7:93:57:ab:06:da:1a:ff:0c:49:06:1a:3a:f6:c6:72:
3b:75:1f:3b:f7:61:3f:f4:78:5b:fb:dc:48:e4:f2:7d:38:66:
0e:90:0c:30:6b:71:9e:ee:b7:81:84:e3:40:bc:0e:1b:3e:4c:
d7:b4:49:13:5f:14:53:c7:c9:c2:0e:bf:70:ff:99:ba:3a:b5:
e9:e4:67:89:48:c1:3c:c3:83:98:b6:84:43:42:71:85:50:9b:
a3:1b:e9:80:07:c4:6f:37:f5:2a:6c:b9:d0:35:12:5c:4e:4e:
2b:8b:9f:45:2c:56:2d:89:ce:c1:a3:0c:22:64:67:8e:a3:85:
ea:4b:9d:07:c8:10:cb:84:a2:f0:df:42:1c:ce:0e:01:dd:05:
da:81:a6:ef:9a:de:25:62:4f:1a:9b:19:cc:3a:0e:58:18:4b:
90:32:71:74:5c:06:51:5e:47:7e:e3:b0:00:16:ee:5b:72:4a:
18:08:d3:73:ba:c5:98:fa:c7:a1:9d:61:a6:c9:20:24:12:19:
a9:75:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:09 2025 by rpki-client on console-fra.rpki-client.org