Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: 0JvCpTKWO77kuFAWQ/A6s+SXySncMivlLUNtFq76WVQ=
Subject key identifier: 70:AA:6F:13:D5:02:00:9C:64:CA:4E:AE:59:CB:5A:4C:27:E7:E1:26
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 0194C387FA51117D0019F468710CF5F0586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 0628
Signing time: Sat 01 Feb 2025 22:00:55 +0000
Manifest this update: Sat 01 Feb 2025 22:00:55 +0000
Manifest next update: Sun 02 Feb 2025 22:00:55 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: q8wBnEAUQZwp56KqFDK/vZurr2fgGuGGU3rL44Ofums=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:fa:51:11:7d:00:19:f4:68:71:0c:f5:f0:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Feb 1 22:00:55 2025 GMT
Not After : Feb 2 22:00:55 2025 GMT
Subject: CN=70aa6f13d502009c64ca4eae59cb5a4c27e7e126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:c7:43:1b:1e:5e:b5:70:83:30:5a:e3:f5:
ae:b2:da:22:5c:38:64:0f:44:19:6d:a7:d2:4a:e7:
22:41:78:23:26:f0:11:8c:b1:9b:9f:9b:12:c8:54:
5a:1b:17:1b:3f:b6:8f:45:19:19:14:39:22:f5:1f:
b8:45:0c:b6:d7:11:b3:6f:47:f7:8b:5e:e1:75:d9:
6d:c6:02:a6:6e:30:2a:c0:06:1b:f2:34:46:af:e4:
af:fa:f8:6c:31:f7:92:ea:2f:cb:97:92:07:4a:73:
21:64:5d:2c:49:7e:12:c4:57:57:df:e5:3a:1e:c8:
a9:df:a4:e5:d8:ca:48:1b:bf:86:0c:8b:ee:8b:0f:
3d:03:eb:e9:37:99:37:e6:12:df:fb:18:56:85:e9:
bb:d7:66:2d:8a:92:ef:43:1f:ea:af:cc:f4:82:83:
ad:1c:73:a2:eb:27:7a:29:57:7c:e5:c3:05:ba:e3:
d6:81:e2:64:1b:a9:96:b8:63:f5:4e:16:ac:0e:ee:
a3:56:79:e0:99:1e:e3:8d:f7:e7:9d:d2:a7:ee:50:
13:c8:8e:7a:37:0d:2b:52:9b:3e:26:f7:2e:97:82:
0b:d3:df:6b:7c:a6:b8:57:b3:fa:e5:7a:58:b2:e3:
62:ef:24:89:f0:aa:80:dc:c7:68:e2:a0:cb:68:e7:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:6F:13:D5:02:00:9C:64:CA:4E:AE:59:CB:5A:4C:27:E7:E1:26
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:03:11:51:eb:f8:b0:ae:8e:09:36:b1:5d:86:fb:02:63:
e2:5d:25:b3:38:88:05:cd:1b:2d:4b:09:d5:92:06:fc:00:aa:
3c:82:32:fe:0d:f9:cb:8f:11:d2:64:52:e3:cc:08:df:33:33:
1b:14:cf:28:f6:e5:5a:0d:49:21:aa:1c:06:76:5b:6d:15:b0:
b8:41:65:70:c9:d2:de:72:0f:c7:7a:61:3b:e5:37:a8:f5:e5:
3d:38:02:a8:be:80:c1:12:69:96:7c:3b:1a:59:1f:b6:14:e4:
f4:bf:5f:92:c2:8a:6c:84:27:be:8e:11:f0:e7:57:e4:9a:83:
8e:ef:f0:e9:b0:4b:64:c0:a7:fe:7a:79:64:1f:7c:6c:b6:ba:
5d:72:e8:95:a7:c4:99:13:0a:da:bb:3f:4a:7e:ab:e3:f0:93:
90:7b:27:cd:79:92:e4:dd:5b:27:36:95:9e:0a:54:ff:10:ed:
c1:34:d6:8a:58:5b:54:a0:ec:1a:fa:38:fd:ee:7a:a0:33:59:
da:13:53:74:a4:81:5f:f6:cb:2e:f9:e5:e2:e6:7f:51:1b:9f:
f1:e0:7d:0d:58:65:c1:0c:c0:e9:c4:0c:22:aa:ea:d5:2a:df:
4c:30:72:bd:d8:be:f8:3e:37:92:a1:48:a6:aa:c7:c3:43:67:
0f:9f:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:05 2025 by rpki-client