Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: 7glCKWBHW4d4dI9U1bFPuKYA0Pj05xznsaS7WDzCSfE=
Subject key identifier: 29:ED:65:4C:CC:2D:96:90:26:BD:94:96:A6:E5:24:63:76:62:B0:0B
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 0194C388830BD195299B4443B920D443EA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 29
Signing time: Sat 01 Feb 2025 22:01:31 +0000
Manifest this update: Sat 01 Feb 2025 22:01:31 +0000
Manifest next update: Sun 02 Feb 2025 22:01:31 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: Sfv5YTMgUXIEcWIdSAC6IH6EVf0ee0GV5hLrne/bBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:83:0b:d1:95:29:9b:44:43:b9:20:d4:43:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Feb 1 22:01:31 2025 GMT
Not After : Feb 2 22:01:31 2025 GMT
Subject: CN=29ed654ccc2d969026bd9496a6e524637662b00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:7d:07:b1:e8:9b:47:59:9c:0e:27:17:2b:
92:cc:36:03:28:b8:68:c1:55:5c:b3:73:99:d1:92:
88:d2:7f:b7:d8:c4:61:f1:98:44:b3:c7:58:85:2e:
01:7f:43:8c:1f:50:1a:ad:e6:92:f7:2d:dc:cb:6e:
99:17:45:1b:9c:4c:6c:1c:f5:b8:fe:92:96:38:8d:
73:c0:4f:a3:92:d6:22:ce:db:9a:4d:a5:3c:82:98:
8e:7c:69:a2:98:5a:5b:2f:ad:24:37:5d:ca:fe:3a:
a2:3f:fe:86:b4:99:28:36:83:9f:01:3b:07:06:aa:
ed:1e:f2:8b:34:51:01:90:d7:ca:9d:8d:71:ee:a0:
05:58:33:3c:00:44:31:9f:09:c7:d3:2f:38:eb:2a:
4f:ff:ef:3b:ba:48:a3:bb:80:b6:30:fa:95:41:45:
67:8b:29:a1:8c:5c:28:40:e6:47:52:55:1d:5e:ab:
78:70:89:da:cf:d0:04:97:eb:d3:2d:a8:76:55:45:
b6:05:25:6d:66:95:95:2e:0d:07:09:47:30:e5:bf:
b0:fd:43:07:44:61:b4:4f:de:73:0d:2e:c2:5c:ff:
37:80:c4:83:0b:44:2e:8f:f1:b9:5a:9f:02:1a:cf:
d3:d0:ec:96:2f:ad:5a:23:ef:76:cb:da:2e:d7:92:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:65:4C:CC:2D:96:90:26:BD:94:96:A6:E5:24:63:76:62:B0:0B
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9b:08:a2:68:08:7b:f7:a1:85:4a:65:4a:bb:7d:8f:90:39:
55:29:50:3e:bc:93:d8:f8:af:4f:7a:3e:f7:b9:e6:65:d0:78:
a1:d3:58:fe:ee:64:ec:90:d1:e9:66:6d:29:ad:34:6b:36:8b:
4f:04:9a:05:3a:4a:8f:22:0d:9c:c4:fd:e7:0c:fa:70:2b:6d:
06:49:37:9b:bc:b5:4b:be:d8:5d:ea:d2:0c:33:3a:31:3b:52:
26:50:52:59:ba:87:3b:f4:e9:3d:b1:21:f2:97:af:3c:6a:21:
4f:d3:dd:a0:44:97:0d:fa:51:0d:6e:96:97:96:99:f2:b0:07:
73:6c:3d:46:c2:3d:99:0d:54:67:61:a3:87:dd:da:a3:ca:fb:
72:80:4a:57:b1:3a:3c:23:f4:8a:9f:62:b5:a0:15:6c:1e:16:
a6:36:79:17:15:54:98:04:9f:fc:6a:d5:9c:3a:42:01:01:f4:
ff:82:aa:50:46:0d:34:4e:2b:1c:46:9d:14:ea:aa:d4:f9:33:
e0:b7:04:95:d7:4d:de:76:56:f0:8e:e2:2e:11:1c:30:cc:f8:
7d:4f:b7:76:fe:5d:86:8b:32:10:60:d6:bc:1b:f1:26:1d:95:
45:9b:7f:5f:07:f0:0a:3b:38:cf:75:cd:5e:8f:02:2d:bf:80:
33:d6:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:22 2025 by rpki-client