Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
File: Eo8JYL8vv3DExJrhAd_y7MOYde0.mft (raw, json)
Hash identifier: QxUBcZt78QyZZBYrxC8DwT62hQJoYpWYxrkI/LQsU38=
Subject key identifier: ED:62:C9:66:EB:FA:F9:4C:0D:F8:08:48:22:A0:C2:65:0D:5F:58:3D
Authority key identifier: 12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
Certificate issuer: /CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Certificate serial: 0194BABB99C2B591E0C00CAB3986B3FA742C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:44 +0000
Manifest this update: Fri 31 Jan 2025 05:00:44 +0000
Manifest next update: Sat 01 Feb 2025 05:00:44 +0000
Files and hashes: 1: Eo8JYL8vv3DExJrhAd_y7MOYde0.crl (hash: zon2jwQ6vgcJAcgrBIdpZurtMdSu424VbCge7KFEYf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:99:c2:b5:91:e0:c0:0c:ab:39:86:b3:fa:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Validity
Not Before: Jan 31 05:00:44 2025 GMT
Not After : Feb 1 05:00:44 2025 GMT
Subject: CN=ed62c966ebfaf94c0df8084822a0c2650d5f583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:6e:f9:e3:c8:b3:7b:64:73:9e:f2:98:af:
64:fa:b8:90:8e:55:4c:f9:6e:b7:96:06:a9:35:7f:
3d:3e:cf:12:1c:26:1f:61:d4:22:d5:a5:0e:84:d5:
25:4d:8e:ee:c9:60:be:2e:12:55:fb:30:40:a4:ae:
70:e7:29:ff:1a:34:f1:6a:74:ff:19:75:41:8b:19:
01:14:85:ac:5c:ce:f3:99:22:f2:57:ec:62:79:74:
61:59:ef:01:c1:3b:52:d6:13:fd:66:ae:54:9d:c1:
ad:e8:a2:9b:9f:70:79:7a:a4:c6:ee:92:e1:1b:b6:
8d:2c:ef:e2:1f:33:66:84:81:95:bf:a1:32:2f:0c:
1b:30:e5:52:27:18:ce:f1:6f:cc:84:d0:58:e5:ac:
ed:74:af:01:10:e7:8b:17:de:fb:d9:56:1d:21:b4:
cd:22:45:92:c0:53:81:9f:d1:cb:2b:c4:31:3b:6f:
23:f9:e1:df:cc:1e:f0:99:81:85:49:6f:07:88:4a:
2b:b5:22:6e:00:40:a3:29:6f:98:28:85:5a:19:d2:
06:c3:fa:c5:e6:13:69:2d:1a:ef:97:d3:37:d9:a2:
19:0e:65:6a:97:8e:64:da:03:27:3e:26:2c:1a:2c:
4e:ec:47:27:d9:56:2d:bd:2a:8b:42:e0:d3:07:4a:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:C9:66:EB:FA:F9:4C:0D:F8:08:48:22:A0:C2:65:0D:5F:58:3D
X509v3 Authority Key Identifier:
keyid:12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:11:fb:d2:d4:4f:d1:0a:ca:cd:0e:37:14:7a:7c:54:95:
a1:d3:10:4a:1f:67:9b:f3:64:82:84:09:74:73:37:c8:52:e6:
28:92:a1:1b:4f:9d:e3:ea:13:3c:eb:b9:80:5e:7d:dc:44:d3:
3c:5b:c7:e8:b7:ef:40:7a:c8:da:9a:11:7c:dd:7a:08:17:5e:
6e:40:64:a7:cd:35:19:ac:bc:02:25:4e:a8:8b:f4:d9:83:c7:
c4:41:cb:9b:d3:9b:dc:bb:eb:de:25:90:87:35:b5:06:47:44:
91:bd:c2:5c:5a:ea:15:f5:66:f4:5b:ce:9d:4b:4f:1a:2e:2e:
80:2e:bd:40:65:4d:93:3c:3c:93:e9:69:f7:f5:85:c1:89:63:
0e:7e:58:ec:ff:9c:97:14:da:56:43:51:c4:9e:f0:22:14:a0:
59:ce:77:d1:c7:a3:ce:13:f1:39:0e:71:54:15:0f:a5:7a:1a:
3f:ca:00:28:e0:09:d0:f4:4c:59:c3:43:ac:d5:3f:f1:ec:51:
f8:cb:61:a7:50:7e:fb:09:86:41:ee:e7:15:9f:42:0f:27:7f:
d7:67:9c:20:43:a1:4d:cd:12:03:2e:72:ea:a4:cb:07:83:f2:
59:ca:41:d2:a9:39:0d:e4:63:85:d4:92:61:62:31:5c:18:72:
3d:78:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:38 2025 by rpki-client on console-fra.rpki-client.org