Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File: v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier: r6XQjIHY9ztDgbbMedt+JAvOxMXHMwJp/p0PhU+KV7A=
Subject key identifier: 86:35:17:47:A0:5A:EB:C1:38:07:80:E5:8F:B5:66:22:82:EC:D0:71
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer: /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial: 0194BB5FE6BD36FCE756457492FA70AD787A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number: 011B
Signing time: Fri 31 Jan 2025 08:00:11 +0000
Manifest this update: Fri 31 Jan 2025 08:00:11 +0000
Manifest next update: Sat 01 Feb 2025 08:00:11 +0000
Files and hashes: 1: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: QUi1OkVjQCl7dwBkTnqJnG6wFOHsg+3YHVUWB/q3KWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e6:bd:36:fc:e7:56:45:74:92:fa:70:ad:78:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Validity
Not Before: Jan 31 08:00:11 2025 GMT
Not After : Feb 1 08:00:11 2025 GMT
Subject: CN=86351747a05aebc1380780e58fb5662282ecd071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:cc:0c:13:06:f3:6c:71:37:9a:be:d2:b3:
50:93:ac:e5:c8:63:6b:0a:f5:cf:95:88:64:07:74:
99:98:8c:06:4b:e0:5a:fe:05:17:f5:86:94:d5:98:
1e:d2:3c:b2:00:d9:06:b7:73:2a:9a:56:e9:90:db:
84:d6:9c:c1:38:44:22:57:00:46:0c:eb:0b:0e:0b:
29:ea:f7:d7:89:23:2b:93:19:86:fe:c3:81:de:e7:
42:f2:7e:45:a3:ef:b3:c2:cf:72:b8:23:93:85:05:
2f:69:b9:cb:b0:89:59:84:34:20:ab:d5:56:8e:a0:
11:57:22:51:53:96:19:30:f9:cd:74:87:90:b1:fb:
2c:0e:54:cf:c1:76:1f:af:59:b6:3b:25:1d:78:33:
19:ff:56:06:18:10:2f:30:b9:15:70:1b:ed:c8:48:
ce:9b:d8:11:d9:6f:2e:eb:c0:e7:6b:22:4a:5d:1b:
31:77:e0:8b:ef:14:5b:ee:ff:24:aa:af:3e:ae:bd:
58:a9:a5:bd:e8:3c:d4:96:d5:8e:f1:3d:08:c4:57:
dc:92:b7:13:1f:4d:62:25:48:94:5a:ef:4d:b6:8c:
0d:fb:ba:2f:16:f1:b7:42:0d:ac:e6:f9:5c:97:fa:
4a:3d:a7:a3:5e:1f:e6:3f:6e:21:e2:98:6e:9d:eb:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:17:47:A0:5A:EB:C1:38:07:80:E5:8F:B5:66:22:82:EC:D0:71
X509v3 Authority Key Identifier:
keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:dd:83:fc:8b:93:5e:05:0b:eb:0a:df:fc:cb:6c:08:71:
df:82:da:1a:97:ad:34:68:81:9c:c8:41:1d:69:55:82:20:b2:
b5:02:53:04:0f:ec:0c:0c:eb:d3:70:a3:1e:7b:9b:28:1b:9f:
ea:9d:24:80:94:9c:36:9d:e9:2d:94:a5:c3:72:35:d5:37:55:
34:91:5c:37:3e:d4:fa:1a:31:d2:8c:16:8a:ef:26:89:2f:bc:
e8:c7:71:b7:77:d4:fb:ec:36:d0:55:88:c3:aa:d3:14:4b:7e:
dd:e4:9b:c9:33:ff:8a:db:64:aa:74:32:63:c9:ce:42:f3:bd:
56:f3:46:9d:1f:fd:d2:84:64:db:e0:38:49:37:96:1f:ea:c4:
c6:ea:b7:10:9a:7f:0c:27:15:a6:9f:37:d3:ed:47:54:5d:6a:
60:ee:7f:56:4e:76:d4:2b:e5:cf:90:03:ad:eb:2e:ec:eb:22:
c1:af:20:17:aa:16:40:10:ac:f4:37:4c:0a:32:71:cd:56:b6:
1f:80:33:e5:c6:9c:c6:d2:50:ca:bc:64:03:6e:9b:0c:ac:d3:
52:a8:34:20:9e:f8:c7:24:fe:31:0e:52:8d:47:66:19:fe:18:
a5:d5:da:e6:a7:70:e4:c7:65:e0:d0:75:81:03:e3:ef:af:3c:
5d:c5:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:39 2025 by rpki-client on console-fra.rpki-client.org