Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: DvhCB3P+QYDrJB70OB5er1hpBKPIECr0bup+c3pIXVI=
Subject key identifier: CA:16:2B:18:AE:E3:20:4D:82:BC:29:96:17:E0:E8:06:39:71:7B:D1
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 0194BA84304C1E394931C4A80B10AB1C855D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 06DA
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: LXLEWhc1ZYVwAd1zL+VtsKgaAgVUps1HaAhwgRe1diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:30:4c:1e:39:49:31:c4:a8:0b:10:ab:1c:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=ca162b18aee3204d82bc299617e0e80639717bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:e0:cd:72:ad:20:30:48:04:5b:33:4c:9a:
28:6a:8d:20:56:30:75:0f:9e:3d:d9:4c:7b:39:0f:
05:6d:3c:91:ad:95:26:20:2b:ed:28:ca:87:26:05:
68:e1:5d:59:fc:c5:31:b1:3b:35:b4:32:eb:75:df:
87:fa:ba:3c:25:0d:56:c8:16:7e:49:a3:09:1c:5b:
e0:b6:3d:f8:33:9b:e5:3e:b6:41:53:71:74:ca:83:
93:3c:dd:57:40:a2:2c:f2:83:c7:97:63:e8:6d:a3:
93:ef:2e:bc:23:c6:55:48:d8:7d:26:e6:37:ef:c3:
9f:f0:bf:1f:06:10:a3:1c:a7:72:45:59:7f:cc:e7:
5a:83:70:38:33:a4:ae:ba:06:25:3e:65:35:62:f0:
5c:e5:94:fc:0b:7e:3d:2c:2e:41:77:82:aa:a2:59:
82:d8:80:18:c0:d5:c9:de:58:33:8a:c0:e3:45:08:
1c:a0:f3:b8:42:8f:9a:4f:94:5e:3a:01:fe:61:6f:
2f:ed:bc:51:15:27:f1:41:7a:3e:c1:85:47:28:bd:
c0:b6:c9:66:e2:ec:4b:7e:9a:7d:00:37:b4:44:68:
1d:0a:96:00:41:b3:ce:b2:0e:4a:9f:1c:a3:2a:f8:
65:72:ef:d0:d4:14:c2:27:b7:e7:98:b6:f8:df:46:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:2B:18:AE:E3:20:4D:82:BC:29:96:17:E0:E8:06:39:71:7B:D1
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:0a:86:5b:a5:07:48:bb:e3:dd:84:5b:9f:ed:be:f2:3d:
93:b8:f2:42:6e:b2:0e:f6:ba:17:1c:3a:f5:09:71:4c:f6:9a:
48:66:47:32:53:f3:2b:84:a0:fa:25:1e:d0:c2:31:6c:eb:70:
f0:2d:a6:f1:53:dc:e2:1b:2d:b2:a2:cc:57:36:dc:f9:cd:69:
37:3d:0c:ea:bc:1f:c2:51:60:2c:b3:a5:f5:2d:91:11:53:c5:
82:2b:4c:48:fd:00:5a:1d:51:a8:74:e8:7b:4c:1e:47:02:2a:
45:26:8e:6e:32:86:ec:43:d4:fe:cd:45:91:5d:7c:67:3c:cd:
06:73:7a:2c:cd:9f:75:26:5a:ff:ef:06:02:1e:a2:f4:cc:e6:
67:59:f6:ff:21:96:8d:9b:e8:74:5a:f8:2f:e5:dc:bc:eb:e7:
9a:53:fe:99:74:59:76:23:7c:b5:54:cb:5b:15:4f:d8:3e:48:
19:f4:ed:7b:dc:d8:15:db:43:c9:20:f4:43:0f:18:3c:c3:c1:
e5:8e:b6:36:96:a9:be:d3:2a:ad:94:d3:7e:30:bd:1a:59:a0:
82:fb:f9:a8:ee:68:96:ca:a0:07:c2:6c:b1:58:a5:60:89:4a:
a6:ed:66:f8:8e:64:c8:bf:45:22:c4:8e:d5:69:76:91:18:26:
d7:d1:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:50 2025 by rpki-client on console-fra.rpki-client.org