Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: bdr1T3oy21RrgsDlMMxqEMHCwo3Uz6FOxSSJvMCwOhI=
Subject key identifier: C2:7D:80:6B:69:87:3D:AD:79:A6:44:F7:88:6B:43:0E:FA:BC:CC:01
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0194BB29B6AB3561085D2702538711185945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 08FA
Signing time: Fri 31 Jan 2025 07:01:00 +0000
Manifest this update: Fri 31 Jan 2025 07:01:00 +0000
Manifest next update: Sat 01 Feb 2025 07:01:00 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: unLtlmN+QPT8EOlKOMKaJj9xuqVM7cgl3LiyvuivI3E=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:b6:ab:35:61:08:5d:27:02:53:87:11:18:59:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jan 31 07:01:00 2025 GMT
Not After : Feb 1 07:01:00 2025 GMT
Subject: CN=c27d806b69873dad79a644f7886b430efabccc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:3a:a4:ca:4a:94:60:31:06:6f:f8:50:5a:
76:26:f8:11:0d:48:2f:19:f4:63:7d:87:8c:6d:e9:
05:b8:c4:1d:86:07:ca:5a:ff:6f:99:c4:8e:b4:2c:
90:34:d1:91:cb:47:8f:00:58:7c:5d:bb:7c:fd:ff:
02:f7:78:0e:fc:8e:53:4e:5e:e0:57:eb:92:83:ab:
28:76:b3:bc:70:70:06:4d:0c:29:f5:5f:c4:92:9d:
e9:8f:54:90:54:5d:45:17:e1:50:51:85:6a:33:e9:
58:1c:1b:4b:ea:b5:9a:c7:a0:92:c6:fa:7e:b8:e3:
93:cc:79:37:30:8a:7b:99:8f:18:04:c7:58:cb:7b:
6a:4f:4d:db:e0:c8:9f:bf:83:7b:74:46:68:d1:8b:
19:8f:8f:fa:b9:17:6d:e6:7f:6d:ed:19:9c:6e:d7:
aa:40:0f:45:f2:02:d5:42:c0:1c:91:fc:84:b5:e6:
1c:50:d8:33:c0:d4:2b:f3:af:9b:e7:17:a6:48:b3:
0f:6f:c1:29:e5:3e:66:e1:2f:57:a5:2a:b2:46:29:
4c:69:7b:05:80:bb:57:77:5c:15:10:b2:35:22:f9:
2e:6c:0c:47:bf:7d:98:d4:8d:fd:98:ee:96:47:19:
79:d5:8a:73:c0:af:b5:00:92:ac:89:37:ec:a0:b6:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:80:6B:69:87:3D:AD:79:A6:44:F7:88:6B:43:0E:FA:BC:CC:01
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bb:f5:2a:e2:a7:73:4d:fd:44:18:b2:29:57:9c:52:71:aa:
b7:53:b8:26:e4:a8:9b:7f:01:98:20:92:f8:47:d1:01:6e:e5:
f0:26:3e:a7:eb:1f:dd:a6:a0:73:63:c4:dc:3f:c4:7b:c6:0c:
c1:b3:2a:3f:93:dd:db:be:21:7e:20:e2:cb:8a:99:f7:11:d3:
4d:05:fe:ef:a5:63:3c:cb:ee:9f:a6:56:89:fe:3b:69:48:45:
9c:a6:b3:e3:b5:3a:0c:e8:cc:86:de:b1:24:d0:d1:f2:8c:3f:
a3:48:ff:d5:7a:be:52:c7:c1:f5:c4:8f:e5:0b:b8:2e:39:92:
7e:de:08:a9:a8:84:54:bc:e0:32:8b:29:a7:9a:44:42:48:98:
d0:a6:9b:ce:ff:ec:31:2d:0a:06:19:35:17:02:36:9a:9b:48:
aa:64:83:38:c3:c7:bd:cb:42:a6:98:86:06:47:1e:9b:a3:05:
bc:50:f7:3c:1a:bb:9e:e4:60:de:ac:f9:51:2e:6a:d0:5c:2e:
99:b7:67:7a:3f:7d:99:2b:a1:e6:49:69:18:74:58:fa:7a:a5:
cd:d3:72:82:c1:73:f2:a6:68:a5:5b:e3:67:ce:4d:eb:49:c8:
8b:9e:3f:56:7b:e2:5d:a7:c5:c5:3c:14:f2:22:59:b1:84:5d:
69:5c:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:10 2025 by rpki-client on console-fra.rpki-client.org