Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier: D0jCTOS56Kh7xviHBEINp1w2jJpL/IHGxlLCW4AyC+4=
Subject key identifier: A9:3E:ED:91:09:15:72:7B:24:8B:1F:B1:8A:85:7C:1F:DC:10:22:56
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 0194BB2908EFCBED251FBA2D2F3B17CC6738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:16 +0000
Manifest this update: Fri 31 Jan 2025 07:00:16 +0000
Manifest next update: Sat 01 Feb 2025 07:00:16 +0000
Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: BuND6MsgdeSbF0/tsUwcnco4m2oGj3PbJrzeh/RW8w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:08:ef:cb:ed:25:1f:ba:2d:2f:3b:17:cc:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Jan 31 07:00:16 2025 GMT
Not After : Feb 1 07:00:16 2025 GMT
Subject: CN=a93eed910915727b248b1fb18a857c1fdc102256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:8a:89:3b:a0:37:51:1d:ae:e3:2f:50:27:
aa:62:40:86:b1:57:9d:98:3d:99:0f:52:a8:10:ba:
2c:7c:23:e1:88:4c:1d:08:07:ed:0d:0e:41:2a:00:
23:43:55:6d:0c:d9:85:a3:72:20:da:9e:f7:2f:27:
93:ef:3b:b7:0a:a4:1e:e9:82:94:d0:2f:e4:bd:89:
6e:b5:8d:e6:89:5e:e0:5f:c6:7d:0b:18:3f:89:1e:
a0:51:3b:fb:a7:2d:4f:83:b6:60:5d:41:08:17:0c:
e1:13:ab:ad:ce:d6:a1:d5:bc:bf:90:e7:9c:5c:06:
fb:6b:89:36:23:3d:a5:ee:f4:cc:d3:d5:64:10:2b:
6d:61:51:a0:ff:86:bf:4c:07:57:8d:4f:ce:d1:58:
2b:80:bd:be:e0:a0:23:3b:6b:4c:f4:1c:79:da:1d:
84:16:95:e0:d8:9a:41:c0:48:7a:c9:ab:74:22:e6:
af:c1:53:ba:77:15:31:f6:7d:93:a7:39:38:60:b0:
28:ec:95:97:08:b9:df:a7:e6:e7:66:be:6d:a8:e2:
72:e9:51:91:62:d4:4f:d8:20:e3:21:03:3f:02:a7:
77:ae:1f:be:17:fd:95:ef:41:95:d6:f8:ce:a1:15:
fd:68:86:3e:81:e6:ef:14:b1:bf:d6:46:f9:30:4b:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:ED:91:09:15:72:7B:24:8B:1F:B1:8A:85:7C:1F:DC:10:22:56
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:01:3c:01:37:ad:4a:3e:b5:78:1d:65:b2:2c:20:33:f0:27:
46:df:0f:da:da:75:8f:dc:4f:ba:2a:bb:97:c7:24:4b:ff:26:
48:c6:15:73:32:9b:b8:1d:4e:58:7a:ab:f8:b9:8b:03:56:85:
81:20:0e:84:c9:03:d1:8f:8b:12:12:31:dd:4e:0a:7c:5c:16:
80:3b:66:ac:cd:33:97:2f:24:3f:57:88:42:7c:7a:4b:ed:e5:
1b:16:fb:18:ff:4f:9e:ba:9a:c2:b3:5c:d6:fe:9f:66:4d:80:
a2:ae:99:94:f6:40:78:58:bd:0b:59:34:11:80:29:66:fe:8c:
30:7e:d8:b4:4f:7f:7e:ec:df:9e:54:32:9d:95:70:87:82:37:
2c:42:09:fa:eb:68:7d:5f:cf:0a:6b:87:7f:83:42:0c:6c:58:
41:ed:42:65:3b:e0:b4:4f:0c:03:de:88:d8:7f:ee:7b:3d:fb:
25:cc:60:8e:6f:09:52:73:d8:d8:8b:60:4d:47:e3:92:ac:59:
a3:e8:d3:85:eb:43:33:74:77:51:dd:8f:da:ef:38:a1:7d:b4:
08:c5:5d:f7:10:b9:ab:06:cf:6d:e9:98:9c:5f:6c:25:81:41:
6f:f1:c5:52:a2:f8:d3:51:73:d8:48:6f:0c:7e:00:ce:bb:95:
89:0b:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:48 2025 by rpki-client on console-fra.rpki-client.org