Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: vqRBLBo8+/H/4+alvH6KPBjqSARiXu9bWFjfr0qdkdA=
Subject key identifier: 9D:5F:7A:A6:E1:E1:98:2F:3A:F7:8D:56:F8:10:5B:A4:F0:B7:47:02
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0194BAF23CB112DEED36ABA894C00F19FB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 05AD
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: 3HhudxR4ykhYd2+l2Rc9LFIDPfyvtVORJnCo3+PR0/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3c:b1:12:de:ed:36:ab:a8:94:c0:0f:19:fb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=9d5f7aa6e1e1982f3af78d56f8105ba4f0b74702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:1d:5a:d9:de:90:44:e1:1d:6e:c4:e2:5a:
11:39:9f:27:b2:81:a9:39:a3:af:0d:2d:23:7b:f7:
13:56:ac:62:48:7a:19:eb:0c:bf:87:18:65:22:a0:
c2:a0:32:e0:ac:e1:07:a8:d8:2d:32:74:9e:98:5c:
78:74:94:52:63:1a:be:6b:f0:34:85:a6:f2:81:a6:
4c:34:ee:8f:c1:44:44:7c:06:49:72:e5:82:35:c2:
78:6a:06:ef:ec:68:7c:29:d0:b8:a4:c8:cb:5c:f5:
e1:17:47:ce:3d:04:71:f9:ea:cb:14:a1:81:91:50:
93:2e:9d:2c:4c:72:79:16:04:0b:89:b4:31:01:82:
3e:2e:50:76:ee:ef:34:6c:ce:a1:d4:98:b5:f6:8a:
2a:b7:d3:2f:a5:10:87:c3:b7:c0:d7:fa:93:27:be:
04:f9:ea:84:e9:58:d3:03:a3:1d:95:51:34:f3:28:
32:d7:cc:57:48:f3:87:c7:7b:35:23:34:dc:e9:8c:
e5:fa:ab:87:8b:3f:cf:54:65:a2:d6:0c:fe:04:fa:
99:9c:43:fc:f5:f8:21:82:97:b2:c3:00:88:8e:56:
a2:40:33:33:da:45:95:81:b3:fe:2a:71:e6:94:aa:
bc:05:b8:5e:26:27:9b:75:88:8b:ce:54:ef:ab:fe:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:7A:A6:E1:E1:98:2F:3A:F7:8D:56:F8:10:5B:A4:F0:B7:47:02
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:ac:7f:bc:72:c1:a4:21:74:34:11:df:b1:c7:36:f4:cd:
76:45:b9:1e:ad:90:02:46:14:66:61:07:42:57:7d:f2:8c:49:
ac:05:46:ad:45:ea:e7:50:6a:c5:d0:44:b4:2e:4e:60:90:5f:
92:f4:f4:13:4f:a2:80:06:90:6f:c7:03:f1:f3:e8:16:56:24:
f3:76:5e:2d:55:dd:59:6c:c0:13:2f:e8:ae:b1:b8:df:e1:67:
6d:42:ec:64:15:96:e3:ee:5a:ab:27:46:af:4b:9e:7f:09:d6:
d5:ec:a7:6e:ec:41:1f:c2:7c:a2:6b:4a:2c:3e:1a:61:71:f8:
29:a3:71:4c:60:de:6b:93:7c:73:ce:88:1c:57:e6:de:df:ab:
da:19:a1:81:24:bc:ce:27:9e:57:ef:9f:7d:fa:51:92:34:37:
5d:86:2d:37:35:fe:1f:38:84:83:2d:7d:e9:75:94:4f:4c:ce:
93:46:16:b0:76:17:31:18:60:4a:0f:e3:98:9f:a4:df:83:e2:
f9:37:0d:b7:12:ec:31:db:74:e1:41:ed:fa:df:8e:41:d6:88:
c7:95:83:98:d3:10:05:e0:aa:06:82:12:eb:ac:7c:e4:c0:4c:
27:84:5d:01:40:a3:34:a0:b3:66:29:8f:b8:fd:84:88:f7:05:
92:4c:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:50 2025 by rpki-client on console-fra.rpki-client.org