Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: cHNJr5jURcq1T8E7bnF/IXG70D63JNN41pu5Je6K5X4=
Subject key identifier: 45:06:40:96:EF:12:02:5A:6D:80:5A:5C:F2:93:5D:88:C7:4D:06:AF
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0194BABB8AC03F6543D190C1A159260838A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 0E64
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: QlgngB7QATEAStGvsfiZKJvIRLA9jooNrY4eLI2PeZ4=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8a:c0:3f:65:43:d1:90:c1:a1:59:26:08:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=45064096ef12025a6d805a5cf2935d88c74d06af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:2a:69:45:af:a6:70:23:b9:15:3e:86:b0:
ba:e1:41:b4:16:83:3b:ad:cb:1e:f4:f2:81:a5:48:
1a:99:6b:21:b7:b5:3a:ca:e6:1a:71:4c:30:04:d0:
3c:75:8b:78:84:1d:db:9b:dd:35:e0:89:09:c1:6f:
cb:d3:a0:62:a5:73:46:e1:25:59:bf:0d:57:ff:b9:
9a:2b:09:7d:5b:89:16:83:7f:23:5a:84:0f:d8:f7:
5f:c6:c7:c2:d5:53:68:1a:31:a2:32:50:49:4e:37:
10:ed:28:95:f9:b1:5a:56:db:de:1b:c5:8d:c0:17:
0a:92:15:ea:29:4b:d1:02:41:0d:d3:07:7c:59:ae:
4c:52:65:82:17:7f:df:80:94:e3:2e:1f:00:03:2f:
81:43:50:fb:c5:30:9c:9d:a8:75:c2:e9:55:d1:bd:
0b:fe:d6:79:79:63:23:d4:9d:eb:3d:35:b3:25:fb:
37:8f:db:3c:a7:28:4b:9b:43:d9:e4:a6:5e:62:f9:
16:8a:bd:d4:69:f6:a2:7e:99:ae:6c:f0:6c:58:81:
59:62:12:b5:f3:e2:11:a6:14:79:6e:d3:a8:26:df:
3b:13:d6:f1:63:2c:01:e8:4b:86:c1:64:69:9b:51:
cd:41:70:b3:2d:38:0c:81:13:27:9b:c1:97:38:f9:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:40:96:EF:12:02:5A:6D:80:5A:5C:F2:93:5D:88:C7:4D:06:AF
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:71:2a:26:e8:88:a2:80:88:81:d4:41:88:bb:b9:ea:3b:fc:
6c:59:72:c1:41:56:c9:72:5f:45:e3:5d:95:7d:4a:9f:9a:48:
72:32:8b:f9:52:67:f7:78:ef:54:03:f3:5c:48:c6:4b:19:0c:
d2:01:cb:11:1c:0a:ff:df:81:d7:a9:4e:dd:c2:d0:c4:d0:44:
57:a4:11:49:05:42:42:66:4c:0b:b2:24:58:6e:d3:37:03:7d:
80:9d:42:22:78:67:e3:26:b2:4f:2a:5f:ea:c2:13:ee:cb:a2:
6a:90:93:73:c2:87:2e:94:60:d3:d3:63:f2:62:93:75:7e:7c:
bd:6f:13:a8:01:eb:99:9a:8e:f4:26:c0:29:ff:cf:63:68:5b:
95:04:37:cb:b3:bf:7e:0f:de:57:09:1c:b8:09:fe:9f:20:49:
3e:bd:4d:af:dd:98:2a:d4:8b:e2:70:27:bf:ac:a0:d9:82:c3:
f1:79:9d:3a:dd:dc:60:fb:0b:1d:aa:ad:5e:0a:a1:1d:98:f1:
47:68:e8:fa:00:ee:9f:0c:68:eb:fb:45:e5:48:c0:82:f3:2d:
2f:72:06:ec:81:bc:1d:14:f0:b9:0c:54:25:47:a7:6d:e2:15:
1b:be:f6:cd:16:ad:ac:6b:8e:a1:f7:82:4b:c1:dd:e2:b7:bf:
22:60:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:58 2025 by rpki-client on console-fra.rpki-client.org