Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: MdybWimAj/BA1o65/22gt0Ly9QQSWcSsPLG3QT7Znos=
Subject key identifier: DB:8C:82:B1:88:ED:22:A4:7A:9A:7A:0E:CA:F9:2F:92:33:A8:40:6F
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 0194BB9748D7593E4A09DC07D0770C03386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: KeFMm5XPgTkZvIPveHoBf3kwc+TyBqtBm0KVhZ+lPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:48:d7:59:3e:4a:09:dc:07:d0:77:0c:03:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=db8c82b188ed22a47a9a7a0ecaf92f9233a8406f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:02:5d:d0:06:cd:93:30:e9:de:60:58:7b:
c5:05:82:63:4f:89:65:27:e0:b8:11:58:6f:40:d4:
39:9d:11:d2:7b:4d:3a:de:8e:12:d2:04:42:43:90:
43:21:e4:a3:3d:2c:6d:9a:5f:dc:6d:71:c8:41:42:
ac:fe:54:01:ad:71:c1:ef:55:7d:64:0a:f8:15:c1:
82:5a:49:29:79:4c:88:eb:7c:4c:a3:09:f0:06:68:
61:db:ad:88:b3:9e:fc:3a:94:e2:c9:9e:2d:6d:26:
af:87:e9:7b:65:55:c1:a1:fc:e1:9b:89:74:ec:ca:
e8:83:01:6d:92:de:73:ec:3f:31:d8:dc:aa:bd:42:
14:ab:0b:a4:53:6a:bd:0a:27:85:82:86:f6:0e:1c:
0e:52:d5:86:32:21:ac:11:7b:3a:f8:24:18:35:ab:
0b:f9:cd:19:a9:5d:27:34:21:7a:d2:e7:2e:bb:a5:
10:69:1b:8b:8e:3a:23:60:c0:1a:86:80:0d:d3:55:
66:c0:61:06:b4:df:8f:b1:51:6a:80:7f:e4:d8:97:
71:07:6f:c4:92:40:51:8f:19:97:e7:cf:2c:0d:57:
88:35:9a:7f:66:7c:df:54:1b:4c:99:19:10:bb:de:
89:43:81:fe:a4:57:ee:69:13:05:37:e1:26:b6:c7:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:82:B1:88:ED:22:A4:7A:9A:7A:0E:CA:F9:2F:92:33:A8:40:6F
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:dc:74:e1:88:95:01:62:47:48:ca:db:07:bc:e3:ac:4d:
89:2e:d0:1e:a0:7d:e7:e2:8f:46:5e:bf:1f:55:27:79:12:8d:
3d:39:e4:2c:8d:b3:bb:d2:93:5a:68:42:23:0b:6d:cd:d5:8d:
d0:7c:42:02:0b:1a:cb:65:69:54:f4:22:db:5b:d0:f8:ae:3a:
40:9d:7c:ec:91:c8:dd:24:af:3d:82:c7:06:34:ff:27:a9:71:
e2:24:09:5b:00:0f:37:e5:b8:6f:cb:cb:3c:f5:37:df:9e:df:
b7:de:bb:5b:ed:6c:49:e3:5a:e4:53:f4:e4:c5:1d:21:b9:1f:
05:b6:ad:c4:33:f2:58:c0:cf:c3:bc:80:07:1c:b1:d3:f1:dd:
19:53:f5:4a:73:90:bb:85:6b:66:60:3f:15:6e:44:9b:91:16:
cc:0c:74:22:ba:e0:07:1c:60:43:3e:b6:3c:6e:3a:70:2d:17:
29:4a:3a:c2:aa:3d:52:ce:57:a5:f8:08:5b:43:39:1a:a2:ea:
f6:18:60:cf:1f:7d:f6:58:c7:fa:a4:a9:8b:de:e7:b5:23:55:
0a:df:b2:b8:0d:7d:e7:eb:5a:37:a4:fa:4d:47:e1:90:53:77:
4d:96:cd:49:1b:41:d7:6a:62:60:b8:28:07:03:95:52:c5:28:
52:12:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:17 2025 by rpki-client on console-fra.rpki-client.org