Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: yGM5k8CVgH2bwKFWmXDt9m2T4QjDo37LImW9b8ZDyXQ=
Subject key identifier: CC:14:8C:E1:95:5D:C9:A7:D4:37:49:79:D0:A2:98:8B:00:F0:EC:57
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 0194BB97274491F52F33FE35FC7380F9B782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 08B7
Signing time: Fri 31 Jan 2025 09:00:32 +0000
Manifest this update: Fri 31 Jan 2025 09:00:32 +0000
Manifest next update: Sat 01 Feb 2025 09:00:32 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: JoQ4fvV2s81yEydZDzA1FAGIq13hdax85QfbyMxF1Oc=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:27:44:91:f5:2f:33:fe:35:fc:73:80:f9:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Jan 31 09:00:32 2025 GMT
Not After : Feb 1 09:00:32 2025 GMT
Subject: CN=cc148ce1955dc9a7d4374979d0a2988b00f0ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:c8:40:cf:3b:e1:79:c6:18:57:a5:67:1f:
90:d0:a5:64:1a:89:57:77:93:c0:96:28:a2:dd:99:
2d:d3:9d:f5:c4:a8:4b:d3:be:50:b0:f1:d8:de:61:
a4:95:6e:2f:c3:5d:85:f6:29:f4:87:9f:49:04:f0:
a6:f1:6a:15:3f:3e:d0:a9:e5:fe:fd:66:ea:c4:de:
f0:8c:f8:ae:fd:9b:21:41:c9:c1:d2:b5:e8:96:b6:
80:59:0f:13:4e:82:29:f4:c7:54:23:88:47:ec:4c:
b9:c1:f2:2b:d0:c2:0c:b1:e7:03:f2:0a:a5:f4:b5:
1b:fe:b2:a3:77:f6:11:02:52:dc:40:b1:7d:b3:b7:
2f:9e:48:7b:ae:a3:c0:da:64:79:40:fa:28:78:44:
3e:6e:ff:14:60:dd:eb:5a:4c:83:a2:12:1c:36:a7:
30:b2:a4:6c:8f:39:a4:91:9c:ce:25:a0:15:99:27:
b8:23:5b:57:13:5d:9e:8b:bc:0f:8c:c8:72:6a:97:
2f:96:c2:aa:23:49:c9:b3:64:d7:50:2d:41:97:53:
8d:36:52:70:c5:c5:02:b5:eb:7a:4d:3f:f8:72:3d:
56:95:9d:86:df:fb:5b:ab:2e:fb:e9:42:0c:b2:f7:
97:7c:3a:eb:a8:10:0e:84:76:6d:bc:2e:80:b1:b8:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:8C:E1:95:5D:C9:A7:D4:37:49:79:D0:A2:98:8B:00:F0:EC:57
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:b8:dc:d8:9f:e7:c6:cc:f9:15:68:c6:82:d1:7b:44:77:
25:63:fe:5d:76:64:3e:3e:09:e8:ca:aa:3f:c9:a7:80:74:0c:
d0:40:fb:3e:10:d5:07:06:a0:e3:9e:05:08:99:8a:a8:3c:67:
63:14:08:fb:cb:bb:34:92:40:11:a5:fd:39:9f:cf:f4:57:5e:
50:fd:44:b8:cf:e9:ee:af:a9:0a:56:ce:4c:83:f1:2a:7b:4c:
43:de:19:17:24:a6:a3:df:c6:38:92:37:6d:2a:56:0d:31:46:
b4:c9:7b:57:54:be:a2:ff:5e:ad:61:69:4f:f2:44:67:10:04:
c1:e6:57:45:1a:6c:93:cc:15:d3:58:9a:6c:56:42:09:e5:93:
f4:ed:66:eb:f0:64:d6:88:ca:d7:2f:9a:9a:90:4f:32:d9:37:
7c:4f:e3:b0:c2:3b:53:3e:2f:5d:78:77:23:cf:78:15:e4:80:
f7:a4:9b:e9:92:8f:7c:52:6f:69:12:0c:70:e9:ad:dd:e1:12:
74:83:d1:0f:de:e5:08:c5:53:ac:7d:9d:99:1c:40:7b:c4:65:
9d:04:01:99:dd:14:80:42:ea:8d:74:4e:c9:85:34:71:b4:59:
d9:dd:13:d9:d0:25:f5:71:a6:b9:94:94:a3:53:af:fb:2d:34:
ec:ef:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:02 2025 by rpki-client on console-fra.rpki-client.org