Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
File: U3XfISulmO4KW_aAsh9QxPx9aOE.mft (raw, json)
Hash identifier: ScT4FrcRzlj/gaweqcWYLRP/ZfG4v9jSFoK+AZZLZ9s=
Subject key identifier: 72:51:7F:E6:CF:C9:3D:C0:25:07:58:3C:62:73:60:BE:41:2F:98:EB
Authority key identifier: 53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
Certificate issuer: /CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Certificate serial: 0194C3F5C3A3DFC7B21101E46976FAED3BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
Manifest number: 0BC8
Signing time: Sun 02 Feb 2025 00:00:50 +0000
Manifest this update: Sun 02 Feb 2025 00:00:50 +0000
Manifest next update: Mon 03 Feb 2025 00:00:50 +0000
Files and hashes: 1: U3XfISulmO4KW_aAsh9QxPx9aOE.crl (hash: F7uf/laW00cSqZ4WneUNV0hRn2nEUKJ/q4aP5SVs5rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:c3:a3:df:c7:b2:11:01:e4:69:76:fa:ed:3b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Validity
Not Before: Feb 2 00:00:50 2025 GMT
Not After : Feb 3 00:00:50 2025 GMT
Subject: CN=72517fe6cfc93dc02507583c627360be412f98eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ef:75:d4:3f:51:17:aa:8f:88:e2:d6:f0:69:
bf:fa:65:10:b5:5c:46:a7:37:8b:63:0e:4f:5a:90:
66:74:5a:aa:6b:5e:79:59:b5:01:cd:fb:9c:b3:2b:
0a:ba:d6:ef:44:64:da:8f:96:07:43:3a:61:36:db:
a9:a6:6f:b8:3d:62:08:c4:8e:af:c2:08:e7:2c:a0:
4b:30:1a:28:ee:70:d0:ba:dd:cd:5d:21:e1:d3:6e:
df:9b:c3:32:d9:87:e9:fb:92:e2:06:ba:67:46:1d:
88:6c:be:16:a2:60:75:16:ab:3b:18:fa:6e:60:22:
1f:11:de:19:30:a5:c2:4e:cc:0d:b9:c0:be:9d:87:
58:71:f8:73:c8:8b:57:55:e8:78:9a:56:5b:df:72:
e2:9b:8a:83:87:ca:4e:dd:cf:6f:2b:e6:14:96:31:
94:ac:28:b7:d2:e4:0d:c6:3e:a6:eb:4b:f9:c4:de:
3f:da:2c:a5:61:62:82:5a:b1:61:40:e0:f8:75:85:
e8:e2:7f:5d:ab:2f:6d:d9:93:d7:1f:a6:6e:77:c5:
ed:ac:72:bb:bd:39:85:19:55:02:60:e0:e1:a7:f0:
5a:7b:b0:09:e3:ac:fa:4a:92:91:3e:2d:0c:f6:16:
12:f4:12:6c:46:be:5a:2b:7e:2a:2f:e5:e9:ea:fa:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:7F:E6:CF:C9:3D:C0:25:07:58:3C:62:73:60:BE:41:2F:98:EB
X509v3 Authority Key Identifier:
keyid:53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:18:ec:ae:62:49:9c:77:5d:3a:5e:cf:87:39:f6:05:d3:
61:21:50:b8:60:20:1e:74:a2:e0:ff:e1:5d:af:c7:8e:b7:bb:
16:af:50:c5:d3:61:2a:2a:25:80:34:bf:2f:7f:19:31:03:9c:
a0:21:9f:9a:f3:96:dc:c4:99:75:dd:67:c5:7e:40:ed:40:e0:
f9:86:27:12:0a:d7:39:f0:ad:05:b8:12:b7:fa:9c:4b:4b:e1:
d5:12:33:79:20:36:9b:6c:00:75:7e:94:bd:d8:01:cf:08:b3:
ca:84:8f:73:81:03:a6:57:44:a0:e5:28:cd:13:66:5f:64:4d:
8f:41:e8:20:64:46:b6:3f:f7:b1:6a:c0:88:b1:f4:27:4f:1a:
df:e4:db:8b:b5:47:17:57:13:74:53:68:e5:b4:18:b3:21:5f:
8b:88:92:47:58:f0:33:bc:62:b9:98:c3:73:0d:dd:da:1f:f4:
52:cd:1b:aa:88:91:90:86:b8:e7:1c:1b:de:13:07:32:cc:2b:
5d:c3:a8:15:b7:97:44:a4:54:bc:1c:28:62:f5:a6:81:57:f2:
d2:25:29:6d:f5:87:a6:86:b9:13:db:7c:dd:33:f3:bb:eb:ee:
03:0a:7f:8d:53:02:3e:e1:bf:69:8e:c1:43:9c:e1:31:b3:4b:
9c:6a:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:58 2025 by rpki-client