Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier: 1CZdeH9dHjZE0wgt97dU8vMY/VYzY7lZkzPnqlp5yJU=
Subject key identifier: D1:30:5F:F1:67:00:A5:E8:51:85:D2:1E:E3:B1:B0:80:4B:B5:11:37
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer: /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial: 0194BA841C0B4C024709DDA222CD9378AAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number: 083A
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: ml6loTid6jNi+XUqJvaPyl3HowncFxGym3UjcYfp7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1c:0b:4c:02:47:09:dd:a2:22:cd:93:78:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=d1305ff16700a5e85185d21ee3b1b0804bb51137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:4f:bb:69:ca:c4:46:36:c3:94:30:b6:7c:
43:ed:77:00:04:0b:0d:04:c5:70:6c:bf:fe:f1:26:
b7:cb:9b:27:12:af:04:fc:23:44:d3:39:a6:e9:24:
25:6e:62:79:e9:5c:83:80:a0:22:53:8e:32:58:de:
5c:31:7a:87:77:84:9a:ed:85:97:b0:14:a1:ba:66:
f0:4b:80:d4:2e:f5:f0:78:9d:29:77:a3:2a:fa:d1:
7a:ce:a9:28:b3:79:7e:78:75:76:52:44:13:81:b2:
81:7c:01:89:7a:b2:f5:b5:46:3c:12:b4:99:dc:6c:
da:e1:a3:85:61:bc:0d:84:b2:00:a4:54:9f:9f:d1:
04:a5:89:6a:24:4a:da:49:4e:00:94:2c:0c:ae:74:
e4:b8:c3:97:8e:a9:08:56:89:47:94:67:a1:5c:05:
a0:1a:9a:0a:e0:35:70:67:e7:78:b9:8e:c4:ff:66:
40:ef:d8:78:84:6f:20:fc:b9:11:9e:ab:91:8d:ad:
33:65:ec:95:76:aa:f6:fe:b5:dc:28:db:45:67:6d:
44:29:26:fb:47:00:48:c1:ae:54:c2:0b:a2:7c:b7:
7c:5f:26:1a:28:e0:7d:33:d4:9f:3b:6a:60:ce:d0:
72:a1:e4:fe:0d:e5:75:15:67:80:9b:e8:2d:9c:8a:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:5F:F1:67:00:A5:E8:51:85:D2:1E:E3:B1:B0:80:4B:B5:11:37
X509v3 Authority Key Identifier:
keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:bc:a8:0e:3e:ed:55:e3:88:a3:9a:4d:82:06:5b:6f:3c:
ff:b1:f2:e9:d0:2e:79:37:83:d1:18:0d:63:52:33:0c:cf:2b:
f1:91:d3:f6:d2:ce:fe:55:7a:fd:b9:60:1a:79:67:bf:a4:7d:
44:7a:b0:2c:b1:06:10:28:aa:83:94:b5:98:2f:91:33:ad:36:
ba:00:a3:21:f2:60:69:8b:a9:69:da:63:a3:2e:e0:2f:57:40:
7c:bf:35:c4:0f:66:db:b1:91:e3:55:82:50:e8:e5:33:12:36:
2d:00:3e:ea:5f:06:90:a4:0c:23:13:ee:df:a6:c6:f9:4d:a5:
af:36:6c:be:f1:01:13:30:bf:e0:51:c5:b0:4e:eb:52:77:a0:
3a:42:7e:28:99:e3:e1:f6:9d:6d:19:ea:47:dd:d8:5d:2c:e0:
6a:2d:14:26:99:13:84:d2:38:4a:f6:a5:f0:78:df:c5:6d:0a:
ce:2d:39:02:91:88:01:b5:c4:58:bc:28:d0:cd:a7:a3:33:65:
5d:63:70:e5:d1:6b:52:09:0c:8e:f3:41:e1:a4:5f:23:10:1e:
56:50:a0:ea:e7:21:e8:22:0f:1b:c4:d7:ee:e3:7b:ab:80:19:
28:3a:07:b0:dd:e9:f3:96:a0:1b:f3:d4:66:a8:21:92:fc:e0:
60:2a:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:11 2025 by rpki-client on console-fra.rpki-client.org