Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: O+1TYCBRASjM663UFV83bC9TwiTGqJfX4q1K11X1G8s=
Subject key identifier: E3:AC:7A:54:AA:37:8E:50:E3:7D:B5:D2:8B:23:2B:02:65:1B:AA:AB
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0194BB28ED7DA0CE18451D0E7EB5FCBE3C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0D95
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: O7lzOpm6WwTRr9X4Bi4XsoQ8Ro7iSKYhf+36GSQOpl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ed:7d:a0:ce:18:45:1d:0e:7e:b5:fc:be:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=e3ac7a54aa378e50e37db5d28b232b02651baaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:1a:c4:0d:8e:7e:41:32:c6:db:58:fd:79:
cd:bd:6e:54:d9:e7:58:ae:89:31:03:2e:75:8b:ec:
80:39:e1:25:73:3c:83:57:77:2d:10:d3:3e:63:8f:
1c:77:4c:f0:fb:bf:08:8b:fa:c1:43:b9:17:e0:fd:
57:d3:f2:8c:90:40:c0:fd:31:f9:34:d1:09:a3:74:
63:08:cc:e8:d8:e2:8c:e5:24:d4:64:29:e3:06:32:
57:f6:55:9c:ac:b2:2a:e4:d5:09:9c:94:a2:94:44:
dd:42:4a:de:0b:aa:d3:f2:5e:94:eb:d1:0f:7b:fa:
34:12:d1:22:ed:49:4b:ac:3a:e2:62:55:48:c7:c0:
40:5a:ca:f6:13:71:0d:59:13:67:db:c2:3f:95:74:
67:21:2f:f8:cd:8b:f4:f7:f5:8e:a3:1e:83:ec:d5:
9a:90:a0:15:34:25:b1:21:86:c4:75:9a:ee:b0:51:
57:76:0b:2d:40:40:75:60:5a:91:4e:e1:94:54:8b:
1c:b0:ec:01:c3:52:68:94:dd:ca:f9:b3:22:9f:c6:
e2:28:b7:56:8d:aa:54:48:33:9b:e4:d5:b0:11:e5:
91:a2:d6:69:00:70:0b:ab:29:6d:27:d3:07:50:60:
f4:8e:21:3b:11:e8:9f:07:66:75:86:70:ad:f3:83:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:7A:54:AA:37:8E:50:E3:7D:B5:D2:8B:23:2B:02:65:1B:AA:AB
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:90:dd:ca:d2:e0:3b:b8:44:3f:3c:21:e8:8d:60:21:22:d0:
34:40:3a:5f:35:c0:bb:e1:82:12:ea:c9:75:cd:04:12:5f:05:
6c:86:2b:e2:23:ad:ea:1e:41:39:0a:7e:c1:ba:e3:30:94:1d:
95:02:a9:86:e8:42:9d:1a:d6:64:c0:79:8e:51:84:fc:09:63:
9d:fe:81:35:68:dc:70:93:ad:f0:a9:e5:d9:36:b9:2d:5c:3c:
f4:ff:d2:06:5f:ae:2d:f1:e3:90:6e:ff:7a:2a:05:af:19:55:
54:60:6c:0c:28:e9:0e:b2:5f:ed:13:aa:7f:bf:d4:ce:ce:8c:
a2:ee:f6:b4:16:a3:fe:60:81:03:b7:6b:31:31:8a:bf:48:72:
61:c4:81:32:75:83:3c:41:11:d5:e4:1a:38:fb:0f:38:36:9e:
2e:37:01:51:51:37:6d:cf:c0:43:3b:fd:5e:84:bb:ed:e1:72:
32:3d:8a:e1:22:4b:ba:79:ed:31:49:29:2d:6f:e1:b0:ad:17:
81:f5:18:d8:2a:85:60:94:b8:3a:70:2b:c2:c9:c2:32:20:06:
07:5b:fa:69:8f:1e:9a:ab:4a:ac:0d:16:78:8b:a5:c7:2c:8b:
e4:21:99:3a:23:de:7d:ea:bc:58:8a:b5:9e:0e:e8:d0:9b:c2:
c6:9c:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:41 2025 by rpki-client on console-fra.rpki-client.org