Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: 0e0Bva//pmcH9WEyNuU1+eqDDOnogym2YVpsXGQ40wQ=
Subject key identifier: E4:8D:DC:70:FC:CD:37:4D:E6:3E:9B:29:41:CA:42:DF:D7:84:B3:B8
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0194BB602BE6ADEDB64BC6D76DCC3687D9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 089E
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: PtCMNyDJj5Jd8Hm6TIvZzpKu/MzFzdcpKNzrur1cpIU=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2b:e6:ad:ed:b6:4b:c6:d7:6d:cc:36:87:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=e48ddc70fccd374de63e9b2941ca42dfd784b3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:11:c3:4d:c4:27:03:c6:9a:52:c8:22:bc:
f6:c7:f3:87:1a:92:c0:df:e9:81:12:cb:76:f9:ff:
e4:eb:4e:3b:33:38:f8:f6:c4:1c:6d:55:a6:2e:27:
e0:13:56:08:8d:d7:b0:8f:5b:a1:17:d3:10:b7:29:
9f:9c:82:74:85:48:1f:e4:1c:ea:cd:98:94:49:11:
fa:d7:cd:b1:09:9a:1d:fd:d2:e6:69:c4:9d:78:b4:
5e:3b:16:03:30:b7:ff:be:50:cc:2a:c4:34:37:c3:
07:e9:e2:66:e0:65:6e:4e:a4:c2:06:aa:b1:2f:d7:
76:b3:77:a8:98:d3:9f:61:1a:3d:92:d6:ca:39:8c:
62:a1:8a:81:92:9e:e0:d9:cc:d3:51:80:c2:78:27:
2a:96:12:4f:1f:b6:c4:76:41:32:99:b3:15:c2:78:
f2:04:de:18:7f:b1:25:76:62:7e:2c:5d:b2:81:19:
93:aa:81:82:79:68:18:13:37:26:46:d8:ee:e5:88:
f9:64:f4:41:09:5d:1b:f7:89:ff:ad:96:e7:a2:80:
77:1e:d7:98:23:c0:d9:11:6f:b3:7e:7f:b3:f6:c0:
25:93:33:29:98:62:eb:3a:15:5b:29:01:27:06:9d:
74:f6:df:60:59:df:59:0b:9d:6a:5d:20:f8:c4:bb:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:DC:70:FC:CD:37:4D:E6:3E:9B:29:41:CA:42:DF:D7:84:B3:B8
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:86:ef:e8:17:f3:d7:a3:22:fb:42:dd:bc:46:4d:1f:36:
94:80:8d:4a:30:c0:58:25:fb:d7:d2:60:c1:cc:79:08:ef:b3:
9e:2d:36:4f:b1:4d:7d:43:b6:fe:db:4a:b5:4d:68:77:70:b1:
22:fb:27:ff:2c:93:32:a1:c3:25:b3:04:f4:7c:46:30:b9:20:
4f:5d:1b:72:5b:1b:34:bc:9c:85:b2:41:b8:f1:cd:ee:d1:89:
11:91:f9:6c:5c:5f:3f:79:16:e3:be:29:77:46:f1:71:61:2b:
65:3c:6d:63:6e:b4:19:36:51:06:87:cf:07:98:26:5f:08:fd:
f6:72:04:51:40:6f:72:3e:f1:db:b1:e0:f4:8d:52:fc:af:e5:
89:82:b0:a2:ab:d2:77:ce:25:22:02:ab:6b:af:fa:ba:0c:2b:
6a:ea:ee:dc:3a:8c:b7:62:10:a9:d0:3b:6e:2d:18:43:f0:82:
56:8d:5e:7f:7c:6b:3a:10:e5:7e:f6:2d:88:b9:78:05:dd:e4:
12:3c:95:26:f5:f8:3f:aa:1d:87:24:10:40:e9:b6:30:4a:74:
5b:d8:0d:22:3e:a0:24:a3:5d:aa:96:fc:e8:10:ff:09:d0:71:
ea:ad:df:40:dc:1a:fb:54:e6:1e:b9:d3:e7:0a:ab:ff:7c:db:
65:8b:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:06 2025 by rpki-client on console-fra.rpki-client.org