Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: 0DGdupy//fx3hY/xwCNsjjFWXRGfNIw3ucVLCZkNftw=
Subject key identifier: 84:EA:10:0E:B2:AC:27:DD:3B:3A:10:2D:C2:0E:7A:AD:D8:5F:FB:AA
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 0194BA84A04718D52446F729AE390F67864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 04:00:41 +0000
Manifest this update: Fri 31 Jan 2025 04:00:41 +0000
Manifest next update: Sat 01 Feb 2025 04:00:41 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: esxv4Yhraw3mHqCoYx22+jcMVyl0BBojTDeQSOPVJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a0:47:18:d5:24:46:f7:29:ae:39:0f:67:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jan 31 04:00:41 2025 GMT
Not After : Feb 1 04:00:41 2025 GMT
Subject: CN=84ea100eb2ac27dd3b3a102dc20e7aadd85ffbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:c0:2f:16:c2:79:8f:9d:db:19:03:e0:c4:
1d:f2:0e:fa:3d:bf:6b:54:0a:ca:aa:bb:ea:30:8a:
26:48:40:ec:7a:57:9a:fd:c7:18:a3:a6:1d:72:c1:
b1:ca:cd:3a:97:bf:4b:7f:ea:f6:30:6f:a3:93:47:
7c:1f:9f:6a:07:cc:26:b8:f8:ab:f1:64:71:65:9b:
e4:5e:6a:f4:90:fd:4f:35:86:02:0f:56:f3:81:ac:
18:70:92:07:b0:83:e3:3d:de:d6:3a:60:14:e3:75:
7a:3f:4a:87:ab:65:38:c5:b0:1f:08:98:a6:89:ee:
70:1b:91:f1:6f:98:0d:43:5e:cf:04:91:58:9d:8e:
c4:a5:3b:96:87:38:fd:31:bf:6e:b6:0c:98:7f:2e:
f9:08:0d:4f:10:45:aa:23:6e:80:8d:85:f9:31:e1:
d5:14:90:3f:8c:e0:06:1f:63:96:88:6b:f7:e4:34:
08:3f:45:bc:b6:14:d6:95:e7:f8:2f:df:7a:be:f2:
40:06:ae:2c:e9:ce:ae:2d:20:83:93:8f:e5:06:33:
f9:17:6b:f0:12:10:69:2c:ff:2a:05:cd:f8:90:51:
ca:74:0b:1a:c4:1d:2b:56:d9:68:fe:23:1c:97:b1:
3a:c1:5a:54:64:59:48:21:7e:50:fb:03:e6:f0:4d:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:10:0E:B2:AC:27:DD:3B:3A:10:2D:C2:0E:7A:AD:D8:5F:FB:AA
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6c:5e:53:69:8b:0f:fb:44:19:e2:a7:58:a3:55:ea:f8:76:
ae:c2:99:ca:6b:a1:3c:1f:e3:56:27:a0:3c:e1:76:c3:32:7a:
4e:64:7a:c3:cc:cb:29:01:3d:fe:0a:14:c5:35:71:42:c4:ca:
5e:98:60:39:f5:5e:73:7e:28:0e:60:ff:f5:3c:f3:c9:32:0a:
d2:9d:ac:37:7a:ab:10:f6:97:ee:2f:33:f5:c3:18:74:2b:3c:
59:18:2b:ab:67:4d:02:ad:fc:c5:7b:bc:e3:4e:ba:1d:c1:3e:
82:22:ef:03:cd:e6:2d:e5:d7:2e:a6:00:71:73:09:4f:e4:a7:
10:df:a4:06:57:2d:ed:ff:44:d1:51:5e:d8:cd:a2:0a:2b:33:
35:30:71:58:d5:ac:80:b5:8f:dc:74:8c:54:d4:b4:8e:26:35:
28:78:b2:32:82:d5:43:c5:cd:30:36:b9:c6:63:89:62:33:25:
d5:47:cc:7e:63:f3:9d:c0:40:4e:57:14:a5:07:71:2e:da:aa:
43:23:77:6a:a0:e4:6e:a0:7d:d2:d9:87:33:2a:13:b4:c6:32:
30:be:2b:bf:7b:12:9d:df:6c:50:d8:e8:27:32:4c:77:7a:74:
fa:fa:16:62:53:b5:a1:61:89:a1:99:35:7d:dc:66:d9:e7:1c:
d3:41:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:34 2025 by rpki-client on console-fra.rpki-client.org