Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: Bhduw/Qt3oMhAGIOgKKwlNMmjZmB6muSMaonEVznM88=
Subject key identifier: 76:BF:AE:F8:12:C6:0F:4B:92:FF:77:19:5C:68:B1:CD:CD:BA:50:E8
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 0194BB29374C7C17DFD6FC7A5E8E133AF58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 01B2
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: vYQzVm5vLdKlW7tYW3QBvZCGiIfBGYnT8NzmWcXv298=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:37:4c:7c:17:df:d6:fc:7a:5e:8e:13:3a:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=76bfaef812c60f4b92ff77195c68b1cdcdba50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:20:33:ca:0f:15:37:25:52:0c:fe:9f:f0:
31:85:82:12:f6:89:94:19:34:dc:5f:94:dd:c1:e8:
52:39:ef:da:51:52:1a:bd:77:e0:0d:6b:53:bd:92:
a6:70:1c:d9:51:6f:b2:86:14:34:91:4d:a9:60:a9:
b3:0e:f0:52:b1:c0:ed:96:d0:2c:cc:42:7b:a0:c7:
7e:4e:dc:ef:66:35:1e:a7:13:8c:62:8a:b1:3a:86:
3d:46:62:40:df:63:4f:a8:1b:53:c0:e7:89:b1:5b:
4d:c5:4c:2c:88:e1:e7:47:7f:5c:e4:70:53:50:62:
4d:5a:f3:d6:b2:d3:82:f4:1a:4d:08:ef:8e:60:0b:
2d:c8:f6:0f:48:78:e2:c9:38:f5:62:f0:68:89:b4:
c6:c8:11:02:bc:b2:d7:ba:a4:11:57:48:3b:ca:ab:
dd:b4:fa:21:cb:0d:b5:9d:08:2e:b2:27:ab:fc:5f:
88:15:3d:06:ef:b9:89:8b:ae:59:0d:78:37:17:19:
19:00:bc:76:eb:36:92:1e:42:f0:75:1e:01:48:e5:
e2:e9:c4:0d:0f:6f:40:e1:23:99:a3:5f:02:10:2c:
ad:2a:d1:04:d0:09:8c:9f:f0:ab:3a:70:ae:6a:dd:
cb:b5:a7:c0:0a:f9:2f:bf:78:7d:97:8a:3f:39:8f:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:AE:F8:12:C6:0F:4B:92:FF:77:19:5C:68:B1:CD:CD:BA:50:E8
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:63:59:92:d5:3c:cc:40:b9:e1:87:22:55:41:c1:ea:3e:
ba:1f:c5:b3:a6:96:f2:6e:9a:ec:28:29:a8:4c:2e:3a:38:ef:
9b:fe:98:35:b9:e7:76:d3:7a:2d:bd:f5:fd:63:39:6f:a5:c1:
8c:e8:d5:c5:29:25:3a:2b:7f:59:2a:00:23:02:36:02:9c:66:
85:2b:92:ed:c2:4a:2e:4a:8b:2d:30:90:7d:4b:61:6c:fd:d4:
2d:32:36:6c:8f:3d:e5:87:0e:b2:55:cd:c9:66:6f:27:9e:4d:
e6:e2:bd:ca:66:3e:9a:80:5c:67:84:91:a0:88:f5:a3:57:71:
4c:f9:5a:f0:60:e7:36:16:67:5a:d3:17:70:3d:40:6c:f9:0f:
53:f7:75:b0:ca:f6:ad:95:4a:65:f3:cd:0e:c6:32:82:f3:2b:
f1:85:b8:3f:16:81:0a:04:d8:4a:46:d4:29:31:cb:34:34:7f:
fd:7a:40:e4:27:46:59:64:17:bd:2e:1c:42:9d:3b:5a:fb:01:
c5:14:05:8d:66:ec:64:c1:40:c3:b8:75:4b:8c:67:00:a1:3b:
9f:8e:e3:82:c6:e2:8d:f2:4c:35:cc:f3:72:a9:23:0e:ee:2d:
5d:2a:a5:b3:0b:c2:82:c6:cc:b4:0e:94:be:ba:89:0e:89:2a:
d8:71:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:16 2025 by rpki-client on console-fra.rpki-client.org