Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: rffCMHmV6x40H15cHhCdlLoNPVkQXYh1caZfceSPysM=
Subject key identifier: 3A:F6:76:30:8F:3C:AF:F3:B8:00:21:5C:C6:BC:06:BE:23:9E:18:75
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 0194BAF22379AF6D3E0AAF0CE8D583B33F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 10FD
Signing time: Fri 31 Jan 2025 06:00:18 +0000
Manifest this update: Fri 31 Jan 2025 06:00:18 +0000
Manifest next update: Sat 01 Feb 2025 06:00:18 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: B4ghVQtbXbbCUH8Q2Q1IAtP3MSBDwJyyQnKDgYxB2LQ=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:23:79:af:6d:3e:0a:af:0c:e8:d5:83:b3:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Jan 31 06:00:18 2025 GMT
Not After : Feb 1 06:00:18 2025 GMT
Subject: CN=3af676308f3caff3b800215cc6bc06be239e1875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:e8:04:31:f8:d6:6f:71:30:a2:26:f8:c9:
cf:12:74:dd:25:d9:42:07:45:63:12:7e:e9:7f:9b:
95:e2:cf:d8:43:51:1c:c3:ce:5f:80:4d:60:23:ba:
8a:6f:dd:cf:22:c4:60:36:0e:61:4f:a1:6e:84:1e:
ec:ce:59:ca:77:34:17:17:29:e1:cd:d4:79:68:ff:
33:53:36:81:68:5b:58:a0:d8:39:5f:b4:c6:a9:8f:
2c:1c:97:ff:7d:cb:ee:37:a3:fb:c5:77:f5:af:ad:
fc:ec:0f:87:ff:ae:12:62:1f:32:ff:a0:8e:f6:67:
35:88:83:3c:5f:e5:95:4e:9c:fe:0a:c2:b6:bb:b0:
fe:25:70:bb:9f:30:7c:3d:f6:e5:6f:3f:e5:15:5a:
db:41:49:35:d3:83:6a:58:6e:33:af:ad:8b:4e:1f:
30:60:04:63:1f:b1:09:d9:11:74:a2:7d:f1:0e:53:
28:66:60:6c:d6:de:9b:64:b5:1c:b2:5a:c0:f5:f7:
c4:49:09:fd:0f:01:47:32:47:e0:0f:3e:c7:9f:7d:
e3:28:5f:f3:03:c4:44:30:5a:a6:a0:24:9f:fd:88:
84:3e:b8:8d:6a:12:e2:40:de:8d:cf:96:32:99:3b:
5f:17:a1:f2:6c:18:9f:a1:cb:2f:c4:0e:fe:ef:cf:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:76:30:8F:3C:AF:F3:B8:00:21:5C:C6:BC:06:BE:23:9E:18:75
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6a:c4:3b:fb:c0:81:80:3b:02:8c:2e:b9:55:25:cd:ea:92:
e4:f1:14:e3:b0:01:d5:09:b9:96:0c:bd:be:d3:63:c0:32:8d:
54:0b:1b:23:7c:e4:fd:f8:72:45:f9:fa:8f:67:57:4a:64:7f:
27:02:de:17:b1:e3:19:5d:34:ad:78:17:32:ad:f6:6c:05:31:
db:78:54:93:ce:ee:16:4c:41:04:bc:00:54:b1:f3:e5:9c:93:
d6:b2:6e:58:88:f3:10:37:25:5c:b9:e4:01:d7:d2:68:9e:39:
39:75:b1:b0:37:03:56:14:46:b8:61:5e:4d:1c:16:2d:e0:75:
9c:35:e8:35:4d:6a:1b:2d:25:d7:aa:6b:b9:07:30:f2:44:ba:
92:3b:9f:46:8a:37:a7:b3:cd:fc:69:56:4c:a2:36:f9:f6:91:
86:1d:85:66:c7:3c:c2:44:d4:c2:d3:1d:16:3c:b4:2c:0d:67:
2d:83:87:b7:c1:50:0c:64:e3:2e:fb:a3:5a:23:fa:73:d8:8d:
e2:f8:8d:43:12:42:76:29:18:1c:3b:b5:69:f8:98:64:7f:f6:
b3:5d:fa:f1:a1:ae:4c:59:2d:ed:c5:e9:39:91:af:0b:76:bd:
c6:e6:f8:c4:92:91:ee:a0:ab:cf:7a:23:af:52:54:33:8b:e5:
94:0a:7a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:34 2025 by rpki-client on console-fra.rpki-client.org