Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: 56eqSefBNA9nH6PBntBUDQ2xHj/Mko8ghbXP6fqdPGY=
Subject key identifier: 09:10:25:0A:EE:D2:57:A2:E3:E2:0F:7B:48:A6:CC:5F:99:C8:63:27
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 0194BB29863CC6AFC77BD1E5F32D1D87B50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0C9A
Signing time: Fri 31 Jan 2025 07:00:48 +0000
Manifest this update: Fri 31 Jan 2025 07:00:48 +0000
Manifest next update: Sat 01 Feb 2025 07:00:48 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: 2BzP7UBEDDi5urGgpyp+ZxN4xGJEXUAcO+9p5UnqOHo=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:86:3c:c6:af:c7:7b:d1:e5:f3:2d:1d:87:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: Jan 31 07:00:48 2025 GMT
Not After : Feb 1 07:00:48 2025 GMT
Subject: CN=0910250aeed257a2e3e20f7b48a6cc5f99c86327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:6e:9b:78:2c:b6:6a:bd:0d:0e:0a:f7:b9:
cd:06:cf:bf:cc:cb:da:32:5c:36:13:81:93:5a:e8:
18:c3:f3:4f:d2:3b:60:6d:ce:42:12:51:cf:4d:b9:
b9:81:94:d5:e7:e2:cf:d3:73:3c:63:5a:0a:ff:e5:
7a:0f:4c:9c:23:46:f8:12:d8:9f:59:7b:12:f9:f3:
88:8a:46:8b:b0:ed:0c:de:54:95:0a:14:a4:d9:f1:
a0:7f:a5:6a:be:36:84:b8:b7:af:af:d3:fb:fb:33:
cd:da:2c:db:97:bc:a1:fb:ee:6e:2d:ed:51:f6:a4:
25:20:e4:6e:a0:d2:47:95:fb:f2:fb:45:d9:d0:98:
2c:b5:1a:eb:e2:e4:d5:70:93:76:56:1c:73:bb:18:
5d:eb:65:da:75:69:ba:eb:b0:0a:f5:37:36:14:31:
b5:f4:85:8a:79:23:af:bb:84:fd:d5:9d:33:ee:ba:
8d:82:f2:03:e2:98:61:38:2d:f9:3d:45:04:c4:86:
dd:0f:7b:15:23:e5:e6:cb:fb:70:ad:ac:92:e9:26:
14:cd:62:bb:dd:9e:dd:0b:f8:d0:2a:54:8f:7f:02:
8b:bf:42:f2:03:08:97:f0:97:42:fe:30:8c:59:ec:
5f:8e:64:e5:4b:e4:a0:c5:39:33:4a:60:96:75:9a:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:25:0A:EE:D2:57:A2:E3:E2:0F:7B:48:A6:CC:5F:99:C8:63:27
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:e3:1f:4f:e3:79:d2:27:c0:4c:82:bc:46:9a:81:aa:b0:
46:bd:5e:e6:26:3d:aa:e6:de:91:85:cf:67:c0:bc:2f:30:67:
3e:05:e4:6f:0f:93:ac:b4:e4:09:e6:c8:de:3b:fa:6d:1b:68:
ab:ee:f1:cd:59:39:42:28:f2:3b:5b:9d:58:fc:ce:b1:57:ba:
31:69:a2:c8:a4:eb:2f:42:32:ea:71:b0:66:53:ab:98:f9:a7:
d0:31:65:4b:d9:e1:fe:e0:31:8f:c9:2f:71:24:c2:ca:b8:b2:
db:1c:d6:09:40:55:7c:24:ac:2e:39:09:29:32:d7:90:43:69:
af:fe:25:4f:6b:d5:d1:54:c3:e0:09:a3:5e:66:25:95:37:ed:
95:82:8e:10:22:a6:02:fe:67:2a:84:10:96:3b:8a:c4:53:b0:
34:a2:61:57:2e:b3:3c:82:18:db:87:b4:5a:3d:71:87:49:28:
e7:32:90:a6:97:0e:3f:ca:52:06:1e:af:0d:b6:17:d1:9e:28:
50:f1:b3:73:d2:51:ea:18:fa:6a:e8:f2:37:3a:31:ce:48:fe:
a7:bc:85:46:18:15:28:40:db:c5:87:30:47:e3:30:4d:05:9f:
03:02:f5:a7:a1:9c:f8:1c:b3:98:ed:5c:27:61:dc:3f:16:b7:
fa:18:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:57 2025 by rpki-client on console-fra.rpki-client.org