
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: g5SNpyuBStlIsl8otwJm86YB4St4rJiIW3sSjEcJ08k=
Subject key identifier: E5:CB:47:46:D0:A2:F7:40:C1:2E:8B:4C:FF:08:D7:84:47:C3:A6:08
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 0194BABB7D68F7D97C0549710924C00A2429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0C9C
Signing time: Fri 31 Jan 2025 05:00:36 +0000
Manifest this update: Fri 31 Jan 2025 05:00:36 +0000
Manifest next update: Sat 01 Feb 2025 05:00:36 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: bcRSvC6UPa0N1bSdMBMiasS9sqv6Dhz+/KfJMlIdBC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:7d:68:f7:d9:7c:05:49:71:09:24:c0:0a:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jan 31 05:00:36 2025 GMT
Not After : Feb 1 05:00:36 2025 GMT
Subject: CN=e5cb4746d0a2f740c12e8b4cff08d78447c3a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:5f:16:ee:ee:70:dd:2d:63:1e:d2:16:bc:
b7:99:68:fa:df:c3:e6:12:c6:b7:99:8f:c2:02:5b:
a3:2b:53:77:f2:00:d6:34:34:10:fc:82:fa:8e:65:
8f:89:6c:0e:d4:1a:2a:9f:26:6e:b0:6d:56:1e:00:
ab:38:bb:4f:6c:91:41:74:9e:85:08:5b:12:01:e9:
0b:0a:52:e0:01:d5:02:b0:35:09:37:6b:da:7d:f8:
34:4d:7f:ee:b4:63:68:90:7e:28:06:f8:0a:07:b6:
6c:a5:29:ac:c7:d5:b8:db:e1:5d:64:28:63:93:e7:
3e:fb:79:c4:f2:61:ae:4e:4d:b9:ba:5f:b7:f2:f3:
db:5a:e6:78:2c:f6:b6:a5:c5:5f:3b:7e:18:74:92:
62:a5:67:0a:30:5c:6c:c6:5c:4d:3e:fc:84:fe:78:
2c:b6:6b:44:18:89:61:33:08:7f:df:88:be:07:77:
37:db:19:f6:0c:55:c8:17:42:26:67:bf:b1:0f:c1:
e9:40:6e:02:46:1f:70:5e:f5:98:23:e4:ba:ea:5f:
02:7a:3e:9d:09:12:1b:bd:68:62:84:bc:26:25:52:
d3:66:0f:b2:02:e1:de:02:70:3d:bf:7b:f4:6c:da:
ff:8d:f0:02:bc:30:a4:77:e6:5e:00:f6:71:11:4a:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:47:46:D0:A2:F7:40:C1:2E:8B:4C:FF:08:D7:84:47:C3:A6:08
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:28:8b:8c:4d:63:67:82:45:b7:fe:c3:fc:72:7c:14:cb:e7:
17:27:b1:7c:57:51:59:06:68:ad:6c:4c:09:92:7e:ba:ac:cf:
7f:ea:e1:9f:87:47:3a:1b:5b:ef:d9:bc:b1:59:cc:c1:3b:3e:
11:2d:21:d9:f5:91:7d:26:d2:0b:0d:28:c6:f3:86:8e:50:12:
dc:26:27:e2:ca:75:4e:f2:42:0c:f0:42:18:de:a2:6c:8d:20:
6b:2d:6e:3d:f4:16:66:85:90:92:67:55:a3:17:22:00:cb:3a:
0b:09:41:ef:98:b4:52:50:70:b2:2a:1b:86:74:af:06:01:c5:
85:df:47:cb:79:9a:7e:f0:5e:7d:f7:0e:cc:84:fa:54:d2:88:
41:88:a3:87:ab:8d:c2:7e:74:2e:05:b6:b3:bb:29:a9:c2:ef:
b6:ff:a9:f2:e5:b4:be:7f:bf:35:96:3f:f3:49:c4:99:1c:07:
5f:af:df:c5:0b:89:ae:59:0a:b5:36:05:bb:e8:fc:76:24:29:
1c:52:96:6a:c4:75:32:e6:13:f2:61:f0:52:2b:e8:70:b3:c7:
55:97:02:93:9f:8c:7b:9a:57:c8:7e:ac:6e:c8:63:c8:f3:d7:
03:5a:9b:70:44:3a:58:af:9b:fa:22:b0:7c:07:6e:e9:3c:af:
85:03:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:59 2025 by rpki-client on console-fra.rpki-client.org