Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: myFA66zxtVIQEI13r8WN9askaSzwuX7A/eroTqcTyA8=
Subject key identifier: 8D:6D:19:01:72:FF:81:CF:4A:9C:9F:11:21:94:86:15:0C:D2:8D:BB
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 0194BB971403A7CB15DC3F3609EE29D5FBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: Jm2ZtO9hkCSvVCa5sgO5USJSzDN+kteFQRvzxfLh1Tc=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:14:03:a7:cb:15:dc:3f:36:09:ee:29:d5:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=8d6d190172ff81cf4a9c9f11219486150cd28dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:13:20:3d:9f:f0:43:8c:ec:f7:c3:4e:a2:
8e:ba:c3:57:00:fd:05:67:1a:a9:10:0a:8a:80:e7:
2b:a5:b7:2f:62:79:19:0b:9b:bf:75:4b:d7:bf:e8:
c3:00:07:99:29:5e:1f:af:ab:b9:d8:23:8f:6e:75:
ce:ea:48:f4:ed:17:85:35:8a:9e:d6:f6:60:af:be:
d7:2c:05:e7:84:4a:b8:7f:c8:98:70:37:1b:77:9e:
ba:fd:57:69:b2:41:7a:f2:af:e8:3d:55:31:5f:cd:
9f:e3:9b:0c:e4:03:6c:ab:c4:dd:3f:bc:a0:f4:a7:
f2:e1:ec:aa:f3:10:33:09:12:82:67:73:f8:d0:60:
63:61:eb:b5:26:c4:83:6a:99:fd:aa:31:12:67:1d:
a0:b7:50:35:3a:3a:33:a5:ec:7f:b5:6a:81:ae:0d:
8f:e0:b3:7c:bf:52:d3:02:46:82:1c:8d:ef:9b:e8:
75:b3:0a:7a:3b:bb:3a:e0:bf:4e:9d:2a:9a:43:b3:
cd:16:62:60:37:03:85:85:4f:65:39:a1:f7:b3:1e:
da:91:c1:e7:ed:e6:13:3f:93:19:4e:b3:1f:e5:2c:
b8:77:fc:6c:66:87:29:8d:56:e8:4a:e1:51:14:84:
fe:c2:69:ca:37:87:27:04:78:de:29:4f:22:7c:b8:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:19:01:72:FF:81:CF:4A:9C:9F:11:21:94:86:15:0C:D2:8D:BB
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:38:05:54:ab:5b:26:ca:6e:a0:2c:eb:0b:86:75:ae:fd:
e9:8f:14:3b:42:9c:4d:5f:4b:70:d8:e0:73:8d:e5:23:5d:68:
8c:bf:5c:64:e5:08:42:d8:4a:00:ee:fd:c9:c9:32:bf:9e:39:
fa:c6:af:d7:34:cb:26:5e:2a:21:f1:9b:3a:00:d0:7e:39:3d:
f9:12:a6:15:d7:b2:99:78:4a:f3:3f:65:96:38:37:6a:67:9b:
93:c1:79:e1:52:ae:ff:65:8f:a9:ea:f9:69:06:fe:b6:fd:df:
bf:d4:15:60:8c:7d:bf:d0:bf:fc:b5:ce:a2:43:84:18:45:aa:
54:5e:af:83:82:1d:e7:a3:dc:96:94:fb:c5:b3:b5:ce:77:5e:
6a:00:81:16:49:cc:57:1e:e9:8c:6c:d8:c9:16:1d:c1:17:76:
7b:09:29:99:26:8d:ca:e2:64:a4:02:ea:81:0d:36:72:cf:6c:
f5:13:81:e4:97:f0:07:46:9c:c2:f2:5b:1a:19:83:ab:90:8f:
a5:28:dc:18:c0:b9:e3:e2:19:eb:e8:24:3d:68:fe:31:af:14:
ae:ac:3f:7a:a0:9a:4b:60:63:0b:06:9d:6f:fc:ff:ca:3d:76:
1a:cf:f5:df:59:ce:ef:c6:29:17:53:71:90:7e:dc:bb:58:24:
cb:70:13:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:20 2025 by rpki-client on console-fra.rpki-client.org