Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: STjg3oAbfBFX1HxX8bhvFWeUweJ6icLP8C4ZkA1hb5Y=
Subject key identifier: D7:90:74:50:B4:7D:10:A2:E7:E4:22:A8:FE:55:D7:5C:8E:A6:85:BC
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 0194BABBD2E8B8E0D565A60983AF55B526F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 09A6
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: z2+z33X+gIZSq0744D3sNo9ndYqX7sZISakgOBTTQkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d2:e8:b8:e0:d5:65:a6:09:83:af:55:b5:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=d7907450b47d10a2e7e422a8fe55d75c8ea685bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:b2:ff:71:3b:14:00:eb:6a:2b:0f:17:55:
5a:b8:86:15:61:26:15:cd:50:69:50:51:e5:e6:af:
94:ff:f4:ba:94:52:d3:f9:61:6b:48:03:65:67:5d:
80:47:79:f7:a3:d7:d9:dd:6e:2d:db:9f:a5:5a:1e:
ec:de:e6:29:30:64:b7:7a:0d:6c:43:f1:88:56:c3:
53:cc:f8:a4:72:d4:d1:4b:db:9c:59:a0:86:24:e6:
af:5a:72:a8:be:f3:24:b8:86:bf:60:fd:40:a9:e5:
8e:d9:2d:da:ec:c9:a0:20:9a:b4:d8:0c:15:f1:d4:
ad:c1:4f:2d:24:bc:fd:ac:13:6d:e7:d2:ac:c8:e5:
62:f2:87:0e:a6:85:0f:77:3f:1b:ae:1e:85:b0:7b:
a5:25:ad:f7:30:e3:8f:14:0a:99:61:a6:6d:a4:a9:
35:6e:70:e9:d9:3c:14:8f:77:ed:6d:64:64:74:e1:
7b:6a:e5:48:ed:76:ea:4b:28:66:35:50:b0:18:89:
f2:5c:c5:21:e1:73:44:03:d3:af:f1:db:9d:7c:92:
fd:d1:b9:40:66:dc:79:59:9e:b6:11:00:72:13:85:
18:7c:26:15:91:55:f1:34:fc:7a:19:5d:33:40:6b:
7d:6d:53:da:23:0c:6c:a8:df:16:fa:62:f9:20:da:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:74:50:B4:7D:10:A2:E7:E4:22:A8:FE:55:D7:5C:8E:A6:85:BC
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:24:16:bc:6b:0e:fb:61:b1:81:96:34:ed:bd:d5:83:2b:
68:45:0a:89:28:72:2b:47:04:b0:1d:bc:0c:fb:5e:9a:70:a8:
b2:7e:17:36:a2:f3:b3:77:cc:d4:48:70:4d:4a:bd:00:ac:4e:
30:69:bd:b9:0e:0f:ab:2e:d3:8a:33:b3:a5:20:e6:d6:72:3c:
0c:f1:80:5b:07:a9:e1:a6:e6:c9:f5:65:b4:36:88:6d:4d:92:
ab:56:37:1e:f6:2d:2a:c1:42:e4:7c:af:06:25:1f:90:e7:f0:
22:f6:1c:bc:e8:56:8a:4b:64:1e:af:1c:89:8b:a2:6b:85:c8:
d9:3a:99:fe:f3:5f:6d:4c:28:0b:30:33:c4:99:c0:2c:b5:21:
fd:49:9a:0e:62:90:07:54:57:fe:ae:e6:f7:5a:f7:5f:cd:70:
72:06:0a:b1:9d:c8:a8:28:36:35:6f:fd:d0:bc:5e:7d:02:ed:
f1:e5:f9:d9:d2:a8:a0:70:5d:65:b0:cc:cf:0a:3c:5d:75:cc:
66:4b:0e:1a:1d:74:d3:99:c6:36:75:f4:32:7d:f7:ab:e9:ab:
32:d0:b7:a7:84:71:c6:0a:da:e1:83:3e:42:8d:7d:0c:57:7e:
6a:db:26:af:e1:d5:ff:ef:17:0c:c6:93:c5:bf:6f:b5:00:64:
ee:06:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:54 2025 by rpki-client on console-fra.rpki-client.org