Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: BmyB2jE6SEV/qydpSk0J76wSKB4y7jPU96yEGNsvZVw=
Subject key identifier: B1:1B:D1:5D:5A:13:35:70:5B:E0:F2:F5:09:59:DF:4F:85:54:EC:42
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 0195127E7C091585C5AE563E60241286E566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 13EA
Signing time: Mon 17 Feb 2025 06:00:33 +0000
Manifest this update: Mon 17 Feb 2025 06:00:33 +0000
Manifest next update: Tue 18 Feb 2025 06:00:33 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: XqrhjnzYXjzhNvQSOSnRbwjXRDc6l9zjID+9fkEVAXg=)
2: pucl_qoNJsFNHYReBDscEGdx2N0.roa (hash: SiJfUuqs3fjKSI6Mo6WtKDUOtA0gOnKfbqvupwDeWPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:7c:09:15:85:c5:ae:56:3e:60:24:12:86:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Feb 17 06:00:33 2025 GMT
Not After : Feb 18 06:00:33 2025 GMT
Subject: CN=b11bd15d5a1335705be0f2f50959df4f8554ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:ac:c6:cd:61:e3:84:4c:f1:05:62:e6:a7:
98:6e:e9:60:6e:5e:e1:c4:82:1b:96:c5:d5:8e:78:
72:f8:cc:3a:13:81:ae:b8:bd:c4:1c:39:a6:4b:72:
be:86:aa:9e:13:5c:f0:9b:59:6a:84:dc:47:3e:4d:
1c:60:11:3e:7e:05:3e:12:87:a3:72:49:22:7d:20:
9a:a3:4d:df:ab:da:7f:f3:0c:6a:87:a8:d4:4a:ce:
60:6c:1b:1f:fe:01:73:34:66:85:e9:fd:3c:3d:c6:
68:d9:c6:72:4e:d4:b2:14:75:81:a0:37:57:f2:b8:
db:12:85:94:de:cd:85:e0:0b:d8:af:c7:54:bb:41:
34:ab:34:08:54:7f:3c:49:f4:fc:42:12:1b:89:40:
ab:d2:ce:33:44:b9:7b:4d:f3:2c:a9:fe:1b:be:e8:
48:9b:0c:07:ff:3b:a3:99:8a:77:af:b0:bf:a9:b6:
3e:a5:b3:92:28:0e:f9:a2:cd:6f:04:6f:de:07:b5:
75:7f:b3:c8:fe:1b:4d:48:f5:3f:cf:84:ee:a5:b5:
4d:be:1e:3b:28:6d:b3:c7:e0:23:72:23:91:9f:da:
5f:24:f4:a9:3a:81:bc:71:b2:b7:a1:c1:36:2a:dd:
c1:aa:4b:d0:37:fc:a8:e4:07:b7:fc:fc:53:84:3e:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:D1:5D:5A:13:35:70:5B:E0:F2:F5:09:59:DF:4F:85:54:EC:42
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:17:ed:2e:ad:4d:95:2d:aa:42:34:9f:07:83:7b:b5:90:
5e:c1:57:14:68:80:d4:54:6b:18:13:85:f4:80:2b:39:12:5e:
cb:51:84:a2:90:eb:60:66:34:df:f3:40:30:33:b8:62:9e:8f:
11:0d:d2:e9:8c:50:d1:b3:04:51:4f:ef:b5:45:25:5c:fd:6e:
2e:ed:d2:95:89:7f:0c:21:af:fe:8a:69:4b:17:f3:e0:27:67:
6f:6d:fa:bf:58:e9:15:11:1a:ba:fb:d6:a3:f9:5d:35:fa:d6:
0d:59:c5:e4:b2:a7:27:95:68:f3:0e:22:a5:d6:75:a8:32:2b:
a0:1d:e2:4f:7d:b9:6e:e6:4e:85:87:05:9e:c3:4f:fc:ba:8e:
2d:ae:d1:eb:2e:ab:2d:3b:11:1a:b2:44:e2:76:42:f3:9e:93:
89:db:2a:b4:8d:07:8d:6a:3d:67:a9:8e:9d:13:c2:f5:d2:fd:
0d:59:52:b5:a9:f4:f5:f7:e7:a9:7a:00:22:51:ca:9b:25:f2:
fb:55:f6:49:ba:a0:af:ef:bd:ff:4e:ea:ad:d1:22:61:e8:1f:
f4:fd:83:96:b2:9c:96:88:38:d2:4f:d7:c0:6e:31:0b:33:de:
7f:e3:b0:ef:e1:6f:52:d9:75:84:b1:3f:61:37:d3:73:fe:65:
84:23:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:42 2025 by rpki-client