Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File: p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier: lnV1hVs3lqyyp+cyufZ1JXQJWYXCLSZLBe/qrN9Zzak=
Subject key identifier: AE:F3:C8:5F:D1:44:C5:73:C3:CC:5F:91:C9:BA:45:F4:25:17:2E:1F
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer: /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial: 0194C3F5CCB0A480A6F22AFBEB39F6E38EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number: 08D1
Signing time: Sun 02 Feb 2025 00:00:53 +0000
Manifest this update: Sun 02 Feb 2025 00:00:53 +0000
Manifest next update: Mon 03 Feb 2025 00:00:53 +0000
Files and hashes: 1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: Ak6BBJaV1MoZ9k/hppMNI2aXSzTXRemn0ublw6UfTho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:cc:b0:a4:80:a6:f2:2a:fb:eb:39:f6:e3:8e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
Validity
Not Before: Feb 2 00:00:53 2025 GMT
Not After : Feb 3 00:00:53 2025 GMT
Subject: CN=aef3c85fd144c573c3cc5f91c9ba45f425172e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:f5:4d:6e:0f:f3:72:ba:87:00:f9:3b:17:
09:58:89:b7:87:ae:9c:ff:68:43:dd:97:8d:60:77:
4e:e8:47:bd:5f:24:3e:a8:7c:69:11:0c:f2:c5:d6:
0f:7b:8c:35:7e:01:62:36:7e:bb:2b:1c:6e:f3:a0:
47:e1:9e:78:3c:59:f8:ea:38:b7:e4:0a:fa:87:f1:
13:d2:f1:82:13:41:28:eb:f2:97:26:e8:60:f0:68:
c3:7b:b2:53:46:8f:bc:a0:c5:59:b5:2f:4b:5f:84:
01:dc:f2:ea:6e:80:53:95:ca:3c:47:66:ae:c0:25:
e1:47:23:e0:dd:8a:d0:96:19:05:cc:13:e4:95:9e:
c5:b5:d4:13:86:27:b6:a7:fb:28:07:a8:54:5e:67:
41:03:e0:13:d6:eb:ed:ad:8a:f4:28:c9:cd:27:82:
f6:34:15:c0:56:02:db:72:74:e5:8d:95:3f:a9:9a:
a2:45:b9:5a:2a:79:d7:c8:0e:25:38:f8:81:82:dd:
02:37:06:6a:f9:51:5a:55:a4:54:7d:c8:76:65:78:
9c:b2:2c:2a:32:e3:47:d7:75:2d:f8:22:b9:19:fa:
69:e0:db:ca:5b:23:da:be:f4:b6:20:7a:4d:8c:d8:
2a:83:51:ff:b5:aa:dc:4f:53:74:e1:17:8f:70:de:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:C8:5F:D1:44:C5:73:C3:CC:5F:91:C9:BA:45:F4:25:17:2E:1F
X509v3 Authority Key Identifier:
keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:8e:6b:7d:37:58:c4:e4:e0:bc:7a:51:45:0a:69:34:44:
ca:f8:3c:c8:65:77:21:5a:9b:c2:99:35:66:36:0d:8c:ea:2f:
2e:9a:60:de:04:1f:83:e1:48:1d:6d:a8:b9:5a:a2:e2:40:ea:
07:3c:17:37:f2:e8:ae:ab:f6:bb:3e:c6:2d:2c:89:63:f3:40:
76:a8:bd:81:2e:18:13:a5:c8:10:22:e6:38:b7:13:94:43:40:
dc:fb:d0:50:fc:52:24:20:9f:0f:39:1f:a3:33:d8:c3:cb:67:
ac:38:ff:02:68:c1:98:ce:84:8f:11:41:fa:f2:04:ee:3d:e6:
a1:02:77:2b:e4:1d:c1:41:ea:61:3a:8e:e8:a4:bd:33:de:7d:
c0:e8:54:4c:79:9a:5d:69:80:d3:f6:80:c6:bc:83:49:f4:bd:
68:cb:c0:47:18:c2:80:85:cf:ab:1c:b4:4e:6e:51:48:58:89:
8d:cb:b9:58:26:93:5b:35:ad:e0:d9:83:e7:02:38:e8:00:bf:
79:aa:44:a1:21:f4:4a:f9:bd:c7:98:ce:ba:07:1f:31:e8:90:
1b:5c:cb:bb:45:27:d2:4a:26:1f:96:b2:61:53:f4:ad:dd:69:
e7:8a:80:27:dc:3c:d3:e2:60:b8:80:92:37:1e:23:4c:50:e9:
78:3c:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:22 2025 by rpki-client