Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: ixDNsyh1hiFMR/y/1zT/9YsVPSMPZPHGdXRlT1ZEXQU=
Subject key identifier: 48:E7:1A:82:D1:76:22:DB:15:D6:98:3D:BF:0A:96:0A:B3:1C:97:CA
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0194BAF24F0F221D3931E67FCDEC0094226A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: Q6EN3nrYXOPHPjBfwH+ljq7OIqPfzgBpx8r8Wanoptg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4f:0f:22:1d:39:31:e6:7f:cd:ec:00:94:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=48e71a82d17622db15d6983dbf0a960ab31c97ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:0c:ff:00:cb:17:1a:cb:7a:fe:4e:00:02:
81:ce:f5:ff:96:81:d1:94:b1:70:59:16:86:bd:38:
ec:d6:f2:b3:17:4c:9f:90:0e:45:fb:f7:09:95:89:
e3:b8:02:29:75:06:3d:6b:43:b3:a1:c5:3f:60:a9:
75:97:ce:68:82:e1:d8:fb:02:f1:55:76:90:35:d9:
8f:b8:60:5f:5e:6e:9f:6d:9b:44:7a:8d:6b:bf:b1:
aa:90:e0:39:86:d6:3b:a7:67:11:5b:4a:29:11:a1:
f9:41:2a:cb:26:05:7d:14:d5:70:c5:09:fe:63:07:
bd:1e:3c:a9:a6:c5:39:d9:58:00:ec:4a:55:c4:8b:
b9:de:92:a6:91:b3:65:11:14:83:a7:0c:58:50:ba:
b0:18:f8:64:13:d2:3b:49:3b:16:da:35:ad:7f:d8:
f2:2a:b5:cc:cd:30:39:38:80:2e:35:ef:13:5e:14:
90:c1:0a:4d:38:0a:44:91:b9:d0:55:fe:da:f2:1a:
9f:2c:d8:cb:4a:78:6a:22:3f:58:c1:4f:69:44:b0:
b0:d1:4d:b4:47:4c:9c:89:20:8b:94:09:39:b6:fa:
6a:f6:79:6c:c9:9b:0c:ad:59:0e:c8:d3:fe:c4:a0:
95:e5:a9:8a:01:71:56:b7:a7:68:03:aa:b2:54:f7:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:1A:82:D1:76:22:DB:15:D6:98:3D:BF:0A:96:0A:B3:1C:97:CA
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a8:9f:c2:76:ce:ec:3d:84:71:9e:28:d4:c8:47:ad:71:89:
e1:e1:80:a5:ad:dd:ca:db:04:84:2c:6a:70:c4:88:b2:36:aa:
64:89:49:d7:b0:21:55:8d:43:ca:b7:ad:84:17:f3:3b:b0:4b:
3e:cc:ea:27:4a:a3:b4:9a:08:46:ec:64:99:9d:f7:4b:ad:c5:
bf:cf:99:cb:0e:65:a6:f9:fe:90:14:ef:c8:dc:95:9b:c3:c3:
33:5f:2f:66:21:7b:c4:0c:c5:09:06:b8:d8:7b:5f:62:3e:2e:
a2:20:fa:b8:f7:c4:ff:62:50:a1:d6:36:54:38:78:5a:63:b0:
2b:43:ac:7f:82:eb:f8:fb:60:64:cb:2a:da:5d:38:e1:3b:1a:
c8:b1:5f:d4:4f:7b:7f:13:55:68:b1:62:a7:08:5a:77:b9:f6:
25:74:d3:32:9e:0a:27:e7:0a:fc:02:5e:c3:bc:0b:1b:12:28:
99:c5:e0:a5:ac:3f:0a:28:f0:3d:48:1a:6d:fb:c9:f7:6f:11:
36:86:b1:d8:c7:c7:f2:1f:2e:41:98:2f:cb:37:7b:21:c7:1e:
65:2c:ba:66:31:ff:83:6a:01:e2:58:aa:a3:22:33:f2:fe:3d:
d5:20:11:0e:05:06:81:2a:f9:50:6a:75:97:73:9b:94:8d:76:
8b:b5:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:12 2025 by rpki-client on console-fra.rpki-client.org