Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: nkPel8KWsSDmuo+JFtudZhxA/E+goKdi46EJdPKZ3ok=
Subject key identifier: 59:E8:26:5D:3B:DC:9C:94:AC:F8:FE:40:78:0B:F6:08:42:90:87:13
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 01951210384C2C0B9D953A4C2B5C6575B62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 0EDE
Signing time: Mon 17 Feb 2025 04:00:07 +0000
Manifest this update: Mon 17 Feb 2025 04:00:07 +0000
Manifest next update: Tue 18 Feb 2025 04:00:07 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: VC/cfb1QWabbfuhv5ESRrM67IINMSXUn1cFHpzMCmO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:38:4c:2c:0b:9d:95:3a:4c:2b:5c:65:75:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Feb 17 04:00:07 2025 GMT
Not After : Feb 18 04:00:07 2025 GMT
Subject: CN=59e8265d3bdc9c94acf8fe40780bf60842908713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:66:9f:85:4c:0d:fa:84:63:d3:62:6b:1f:
ef:6f:72:07:d0:bc:6b:52:c7:d5:85:80:da:2e:6b:
15:76:1a:d4:de:90:55:ed:4a:d5:66:7a:29:06:74:
39:b8:49:f3:2b:bd:b6:8b:69:ec:92:25:21:43:07:
0c:e0:4c:a2:80:47:44:38:a3:25:64:1d:1c:d3:b8:
a3:f1:2e:0c:d3:29:5e:b0:f6:0e:80:34:fe:f4:44:
f1:28:46:a2:f0:dc:86:26:f0:be:5a:de:7d:ef:eb:
df:32:85:a3:34:42:c5:5a:d2:9a:e7:31:18:7d:4c:
28:32:b8:12:5a:b3:f0:9d:61:7d:76:0e:af:49:9e:
fd:9f:7e:b2:50:10:51:60:94:a8:81:50:ac:d9:33:
99:ae:90:78:93:cf:35:5d:57:aa:cf:a4:f5:36:88:
18:3a:46:b0:e2:12:9a:fd:79:35:cb:63:b5:3c:1e:
0d:ef:89:ca:44:ec:89:f0:b7:9e:ce:a7:76:55:1d:
b9:47:90:35:f4:e1:3f:4d:0a:32:bb:31:4b:54:33:
8c:a7:db:30:f8:dc:b8:97:84:7b:ce:45:eb:e2:88:
ca:18:73:cd:1b:42:71:78:53:ca:6c:2b:a4:28:6f:
4c:6b:05:f7:90:69:55:b6:4d:a4:e1:dd:82:f3:74:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:26:5D:3B:DC:9C:94:AC:F8:FE:40:78:0B:F6:08:42:90:87:13
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:0b:6d:91:cf:d0:9b:45:6c:0c:3b:cb:08:77:8a:c4:0c:
35:d1:a0:16:6f:4d:69:2f:a4:9f:46:58:1c:04:0d:28:84:c4:
63:1e:a9:7d:16:d9:df:7d:91:1e:6e:37:28:c4:54:38:0d:98:
8c:0b:f7:03:b5:da:32:d6:3d:9c:70:cf:ce:3a:a0:b1:d7:04:
77:ef:ce:9c:8a:70:82:c9:3d:bc:5a:8e:81:1b:6c:ce:21:6f:
86:03:43:15:d3:49:ae:56:0b:31:1f:e6:c3:92:5a:95:1a:1a:
35:64:ef:04:fc:cc:90:e9:41:1e:77:c8:69:a1:49:62:2f:f9:
6e:cd:bf:b2:04:c4:28:3b:79:2b:8f:19:75:3e:a5:92:d4:dc:
04:1d:7a:d7:99:45:9c:bc:1f:03:df:38:dd:90:44:42:ca:e6:
03:b7:e5:e9:27:ae:8c:78:ce:dc:99:f9:8a:98:b5:ab:42:b8:
72:6d:dc:d2:bd:cc:15:4f:14:6f:28:ee:84:17:0d:2b:d4:0c:
69:7f:0d:66:ca:ca:4e:9c:e8:4a:f3:98:61:46:1b:90:de:93:
cb:5e:83:f2:5b:d3:d6:44:98:29:a0:12:34:bf:6f:f1:e2:30:
74:15:da:5b:e5:13:5d:d6:b2:94:21:5f:82:24:d3:e6:e0:c5:
8c:9b:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:40 2025 by rpki-client