Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: JtVz9cD1oZ/z8Vrs05JV+GUs3SYcC2Qf7SymEdKNiTE=
Subject key identifier: AC:88:7B:D1:93:07:66:C7:FF:E9:B3:BB:FE:86:34:F7:10:8F:B7:E6
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 0194BB6038DF1D249BFA130C9EAEE0982E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 0ED7
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: ERM0DTdcPOp1yiKHsNdQMqf7LmCsmg7Na0Qmxz+s5Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:38:df:1d:24:9b:fa:13:0c:9e:ae:e0:98:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=ac887bd1930766c7ffe9b3bbfe8634f7108fb7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:2c:6b:c7:d4:6d:18:da:48:1e:7e:ef:e8:
bd:b7:3a:33:0a:8a:6c:8d:27:5d:36:00:8c:23:12:
06:f4:92:58:56:9a:53:be:a6:10:b3:03:d8:c5:1f:
27:33:69:23:ab:4e:de:25:d8:cc:cd:37:bb:15:18:
37:7f:1f:ee:e6:96:50:4d:52:6a:0a:5d:2e:ae:33:
d3:5d:90:69:15:df:e2:e2:de:4d:b1:a4:d1:2b:a7:
ac:55:45:19:d6:1c:59:bb:53:47:a1:de:dd:6f:be:
c0:2b:f0:b5:dd:53:ae:1b:6f:fe:0a:5a:0a:94:1f:
53:aa:07:03:ad:e5:5f:bd:37:7b:d5:29:d9:78:d6:
86:b2:40:f9:a7:7b:ff:1f:c5:af:24:19:b0:e8:46:
21:a2:3e:22:e1:67:3f:6e:c2:df:25:fb:5e:d4:29:
29:b6:d3:27:56:c2:2e:d5:dc:9e:13:26:94:5c:92:
3a:f4:77:3e:48:39:13:eb:9a:c7:d6:44:28:a3:78:
b3:b7:33:4e:bd:7d:2d:33:5e:b1:56:bc:47:ae:7e:
30:2e:f1:43:c2:86:dd:1b:f1:c0:00:20:07:94:98:
a5:b6:82:07:ac:a5:b7:09:99:9f:56:cd:db:7f:1a:
fb:59:08:b8:47:97:15:f6:8e:a5:fe:2a:c5:a7:80:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:7B:D1:93:07:66:C7:FF:E9:B3:BB:FE:86:34:F7:10:8F:B7:E6
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:8f:b6:22:f1:eb:20:60:2c:f5:0f:a4:04:42:10:f6:30:
84:e4:eb:a7:26:f8:29:4b:ad:06:9f:2a:ac:e9:75:f2:12:6d:
58:a3:d0:9b:42:af:3f:34:cf:de:53:3d:39:91:15:28:7f:94:
88:0a:79:47:13:fe:ec:02:17:9b:81:b4:d6:e5:91:68:c2:ee:
0d:53:8d:c5:18:b4:a7:c9:be:a7:18:4c:fe:a3:d3:30:4f:da:
7f:f1:59:c7:ca:6d:19:9e:b5:fb:16:6d:c6:0c:28:be:db:d6:
45:40:7d:d8:d1:a0:c4:08:5e:93:6d:15:71:15:c3:0f:85:88:
c5:e9:37:5d:aa:f2:8f:f7:8d:f2:eb:cb:5b:17:48:83:82:0e:
84:1d:71:f0:49:68:ed:09:85:75:69:85:07:27:27:a1:4d:91:
94:78:1d:3e:ec:41:66:cd:f6:5a:78:2c:d7:1e:ad:31:2a:3b:
c6:92:31:26:26:81:19:6d:62:a5:48:d8:90:d0:66:3d:e2:fe:
97:27:90:37:e6:e1:fb:8b:79:c1:a4:34:b6:42:72:7a:68:48:
fc:af:06:15:f7:37:f5:46:e9:ef:64:7f:7b:03:a7:99:63:56:
04:55:ef:8d:23:39:f2:1d:1b:8a:dc:89:56:de:79:87:1e:79:
65:e8:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:52 2025 by rpki-client on console-fra.rpki-client.org