Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: yYQD0GzfzsgeHoOT3zVz5mGJnjzJgOXfHzuuAJsb4Pw=
Subject key identifier: CA:C8:EA:97:65:DC:13:42:A4:C3:EA:F0:77:04:0F:01:CA:DA:A2:A9
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 0194BB292376998AD59878FC90CF4C210BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: VtCRy1KE8OnDF1MV9U+iL7mtd+vh6CUQv0CqjUbBCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:23:76:99:8a:d5:98:78:fc:90:cf:4c:21:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=cac8ea9765dc1342a4c3eaf077040f01cadaa2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:76:f9:9d:54:44:61:84:2b:aa:53:86:1e:
63:e9:88:cf:33:77:d5:d0:50:64:e6:5d:5e:ad:83:
c9:8f:65:f3:79:e9:33:09:a5:b1:c3:86:76:50:f4:
3a:b3:ba:92:c2:1d:bd:54:52:1b:1d:d7:ca:9c:a0:
84:91:ad:77:60:c1:24:30:02:09:69:a3:f8:f9:57:
0e:7c:db:13:33:aa:46:a1:71:17:c7:17:3a:6c:86:
06:c1:9c:dd:45:da:0f:b3:f6:b1:f7:43:b4:c7:4f:
eb:78:7d:2a:09:b3:35:e3:62:9c:0e:1c:8b:ed:3b:
ef:0e:30:27:9e:95:3b:26:1f:4b:1a:3a:0a:8a:83:
10:63:fb:bb:b6:47:b5:78:11:c7:9e:d4:0b:15:fd:
b6:a1:31:a1:c9:db:bd:9d:d6:74:9a:07:58:8f:06:
f8:3e:bf:3b:47:b9:d8:ef:5c:9f:38:2a:f7:9d:91:
eb:68:64:46:64:8f:ba:e4:ec:84:97:af:a4:3b:a1:
e0:d1:dc:db:5d:11:b8:ad:eb:6d:9e:a6:fe:14:47:
12:db:69:39:3c:ff:b3:39:bf:ee:d1:22:6a:c6:9e:
b3:92:4f:7a:02:37:cc:d4:b8:63:7a:08:98:4f:24:
bf:7a:75:1f:f2:ec:01:95:de:11:4c:4f:78:96:b3:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C8:EA:97:65:DC:13:42:A4:C3:EA:F0:77:04:0F:01:CA:DA:A2:A9
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:33:46:5c:f7:99:85:2e:00:a0:27:e0:c5:4f:86:d3:b1:
c2:b8:f2:98:cb:66:da:8c:80:16:d3:02:98:c8:b5:de:29:49:
4c:56:5d:f8:e7:69:9e:0a:1b:de:c0:18:d4:3d:d4:c4:86:f6:
4c:c1:8b:ab:dc:3f:f9:56:a7:66:a9:ff:12:a7:5f:cb:96:69:
23:99:a2:cd:e3:78:72:0f:ea:06:79:cd:89:76:01:00:46:73:
7e:0b:6a:6c:cf:d8:1e:65:e2:b1:31:52:97:80:39:29:5e:d6:
cf:4d:8f:54:de:8a:b2:53:a2:04:42:94:90:41:d4:b4:9d:d9:
91:19:26:9c:90:f6:03:1e:df:23:55:95:1e:c9:49:d0:af:3b:
20:94:77:77:ff:6a:f6:03:e8:69:22:f8:5c:c9:67:69:20:7a:
6b:e0:5e:13:47:e1:41:64:5f:90:e2:bb:81:d0:02:1e:c2:15:
bb:06:35:f7:73:df:eb:d3:ce:af:2a:a4:7a:ff:e4:e2:bc:56:
9f:1c:f6:b9:f8:61:56:26:1c:b7:64:6c:7a:27:7d:47:d3:6b:
c0:75:8b:1f:30:f2:63:a9:04:4b:3d:12:58:b2:4d:9c:6f:5e:
78:1f:c1:a3:2a:ce:d4:31:b5:a7:09:b3:71:f1:f0:bd:6f:01:
76:83:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:03 2025 by rpki-client on console-fra.rpki-client.org