Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: 0rlM4N4lA8pfAjMvLLOn+Z2mwsJtaDdh6HyvHIgQ21c=
Subject key identifier: 31:B1:8B:97:35:F2:ED:A3:23:10:5C:40:1A:0E:CB:5A:32:DB:7E:60
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 0194C4D17B1D601AA4A37DFDB101C9C0FB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 35
Signing time: Sun 02 Feb 2025 04:00:50 +0000
Manifest this update: Sun 02 Feb 2025 04:00:50 +0000
Manifest next update: Mon 03 Feb 2025 04:00:50 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: EllHW7cmT3NwkeLvPht6yLlMr1qXzbXHSf1fcyGwfmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:7b:1d:60:1a:a4:a3:7d:fd:b1:01:c9:c0:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Feb 2 04:00:50 2025 GMT
Not After : Feb 3 04:00:50 2025 GMT
Subject: CN=31b18b9735f2eda323105c401a0ecb5a32db7e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:6c:48:8e:f1:b2:44:9f:5f:93:7f:1a:63:
ca:e7:47:f1:b6:79:e9:cc:c2:2d:bb:d7:5c:4f:cf:
a2:68:f6:92:1f:fe:2c:ef:92:32:c8:bd:1b:0a:e8:
e2:82:43:cf:f0:1b:48:dc:d5:61:fb:03:86:44:0a:
59:5b:1d:56:b2:2b:a5:04:10:95:3d:9e:4f:b7:a4:
8a:1a:d7:7a:d5:79:fe:21:95:a5:fa:53:f0:df:3f:
ee:a0:72:d4:6e:5e:8f:04:89:79:64:9b:20:be:cf:
69:78:fc:25:c1:55:8d:65:25:f9:fb:fb:db:be:d1:
74:02:3d:7f:50:85:53:77:32:51:72:13:df:bf:a4:
03:4d:e7:d0:07:18:72:b9:0d:9d:87:d3:88:28:e4:
4c:9b:a5:30:87:02:4e:c6:75:34:2b:1f:5f:2a:b1:
91:d2:fb:6c:b4:b7:5e:b3:f0:b8:ea:fc:ed:34:8b:
28:7f:0e:f0:2b:61:90:24:fb:e2:ea:6b:33:f2:d1:
9b:51:2f:b9:ca:8c:7b:9b:1d:bf:59:c2:16:88:30:
0a:2d:5c:09:d9:c3:31:1d:81:84:58:8d:81:ed:fd:
69:2a:ba:70:62:9a:40:de:25:ce:ca:33:25:24:fa:
f8:71:6e:b1:94:5a:dc:c5:62:03:fb:e9:d7:e9:7e:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:8B:97:35:F2:ED:A3:23:10:5C:40:1A:0E:CB:5A:32:DB:7E:60
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a9:5b:59:a4:7b:44:76:86:5d:64:4b:c2:ae:62:8f:ec:d1:
01:20:8e:c3:21:ae:d8:1c:c6:56:e1:78:df:cb:75:7e:45:46:
dc:1d:bf:c7:5c:04:78:ca:c0:8b:bd:14:6d:39:2c:52:5f:11:
cc:d9:b8:b9:a4:21:0d:7e:33:fc:9b:e6:cd:38:27:c3:25:7a:
89:7a:b7:05:cb:d0:d2:ba:f0:ca:27:83:bb:ed:db:5d:6d:cf:
e0:0f:31:a9:69:c6:63:54:b1:ec:72:5b:5d:ff:59:af:9a:88:
c8:be:8e:7d:17:71:4d:d9:96:3d:08:fd:9e:54:8a:b8:3d:8d:
26:0d:7b:d4:21:a0:d5:62:3e:9b:0d:67:a4:15:63:7a:ae:ce:
05:d1:53:08:f6:e8:89:b7:e0:60:cb:1c:c5:73:ef:53:20:26:
53:1f:39:7c:41:fd:4a:c4:0a:58:11:38:0f:dd:71:be:05:3e:
e7:92:c9:00:16:45:9f:af:02:46:68:93:d3:16:1d:dd:e3:e7:
cd:91:c8:df:34:59:03:41:72:c9:9b:9f:bd:91:3b:75:c7:54:
98:ed:12:24:db:88:a6:5e:85:2e:c0:32:3a:b4:df:f6:9a:92:
83:ee:2a:a2:8b:11:7a:14:8c:76:74:39:e8:90:68:0b:9b:de:
6a:be:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:59 2025 by rpki-client