Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: WD3tdqwfP+dz9CfbUJaZcIe+3ot4MWU+uESnNdLDkf4=
Subject key identifier: 80:DB:2A:C8:2F:AE:0A:BF:EE:B0:35:25:C5:98:1C:AD:3C:DD:37:90
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0194BA84C85B3334B5295A58A2C9FB0BF999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 04:00:51 +0000
Manifest this update: Fri 31 Jan 2025 04:00:51 +0000
Manifest next update: Sat 01 Feb 2025 04:00:51 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: m1zgvM39pd/PEkg1wHBASgy5fRFHMr0e5CPCMymDDqM=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:c8:5b:33:34:b5:29:5a:58:a2:c9:fb:0b:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Jan 31 04:00:51 2025 GMT
Not After : Feb 1 04:00:51 2025 GMT
Subject: CN=80db2ac82fae0abfeeb03525c5981cad3cdd3790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:3a:72:16:d2:d4:27:44:d1:80:51:2d:1e:
dc:86:b2:8c:2a:b1:40:64:cf:0f:e8:5a:45:1f:6d:
59:7c:8e:5c:97:f3:c9:44:c7:88:6c:ec:ef:0b:4d:
4c:c0:71:3a:1f:79:c1:82:5b:e2:55:80:f0:97:e9:
15:1f:45:86:07:19:ff:56:c3:4b:43:58:38:92:16:
fd:fc:e6:08:a5:28:23:bf:cb:b7:e1:19:22:66:af:
d8:7b:88:b1:89:a7:f2:c4:b0:c2:16:1d:53:b9:8c:
c2:70:e8:d7:ea:d1:14:99:b0:67:8f:87:ea:01:45:
eb:14:6f:1b:12:56:00:b8:df:ec:ea:9c:1b:cf:b1:
13:c1:81:e4:8e:8f:5a:f5:6b:6e:65:3f:74:ed:4c:
e4:8f:39:a7:22:f2:1d:00:0a:6a:c7:d5:c7:7f:04:
fc:46:9f:05:6a:75:76:44:95:80:3f:7d:1e:df:0c:
45:ae:d0:b1:fc:26:76:bd:40:00:d5:15:f6:63:89:
b1:e7:9d:53:3e:89:61:7d:52:bf:bc:36:dc:01:7c:
4a:e3:0b:a0:8f:ea:25:6d:26:65:4f:58:b8:c9:ad:
e0:65:08:eb:9f:f1:62:a9:49:4f:fe:2d:7e:81:80:
9c:b3:05:d1:3a:9e:a7:35:7e:cf:7a:a1:84:ad:ce:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:2A:C8:2F:AE:0A:BF:EE:B0:35:25:C5:98:1C:AD:3C:DD:37:90
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:53:d1:fa:49:00:67:ad:91:2a:25:de:7b:3d:b8:57:b4:
de:a5:4d:bd:8a:d1:55:27:e6:1d:4c:32:78:48:4f:81:8e:64:
57:1f:c6:f8:0b:03:37:2b:43:89:84:10:ba:b5:e6:05:c7:6c:
e1:31:32:63:eb:f2:8b:6a:f1:c9:62:59:ee:c7:f3:b3:59:a2:
cd:3d:56:e1:d9:5c:c8:72:39:ac:b7:ec:11:cd:57:b9:c1:f8:
0e:39:05:cf:39:38:be:77:d9:02:d5:59:7f:2d:0b:f0:b7:ef:
c0:c3:71:4c:64:2f:9a:86:c7:cd:95:25:00:e1:0f:d4:87:31:
46:09:d7:a9:63:d2:10:0f:9b:69:33:3b:36:ad:2d:01:23:fc:
a6:b6:c8:ed:1f:d0:b5:21:5d:00:fb:d1:91:c3:f2:e3:72:6d:
56:c9:f8:56:5e:05:7f:22:df:e3:43:b1:a8:06:0a:fa:1c:32:
ec:d6:1f:c9:59:f4:3d:fb:63:85:1e:8c:26:b5:e1:14:95:93:
cd:8b:28:77:db:bc:f8:e2:83:7d:6c:43:eb:f6:a3:69:6f:b8:
5d:fc:ae:f7:eb:d1:41:c4:4f:97:97:39:a7:a2:f8:7e:21:7b:
df:07:30:09:99:1f:4e:bc:82:68:ec:67:41:27:96:d5:fa:6f:
4c:69:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:09 2025 by rpki-client on console-fra.rpki-client.org