Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: kLE/WfRbyWEGEGClSipcCCQKRHt1VUa5poSZ7V35jok=
Subject key identifier: C3:08:91:FF:53:B9:C8:24:6E:75:93:00:FF:06:39:81:D7:4D:2D:3D
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019511A3051B462C3DE6D41DB0B8B833AE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 10F0
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: YmyeOhaoOU08JBrckErBWeSjDJTP3XFdoBN48vORRxA=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:05:1b:46:2c:3d:e6:d4:1d:b0:b8:b8:33:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=c30891ff53b9c8246e759300ff063981d74d2d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:34:73:63:57:2c:30:69:9e:a5:a2:99:40:
8c:3c:34:56:54:fc:c6:df:63:ff:25:e2:46:94:7c:
32:b3:99:9b:2b:4c:c1:23:aa:76:02:37:32:2d:24:
6f:e5:c4:90:bd:1a:d4:63:86:d4:34:52:35:5f:46:
00:68:2c:da:16:0c:bf:57:84:9f:17:1c:2a:e6:60:
b4:fe:07:2f:03:3d:24:04:f1:5a:e1:8d:9a:e6:3d:
57:a1:61:c5:af:e3:6c:df:09:63:af:fc:3e:74:cc:
18:2c:2e:03:9a:00:7d:41:2f:0d:b1:15:58:76:1b:
e3:a2:c2:af:b2:52:99:69:03:f3:2a:28:62:2f:9c:
45:33:ce:ee:60:ad:bc:c0:09:b8:97:7a:e1:4a:b6:
5d:38:3b:aa:c1:24:60:c8:6e:91:23:f5:15:71:a4:
d3:9e:90:5f:91:82:f6:6d:ee:26:98:41:72:7f:89:
f6:ef:30:0f:9b:1e:4e:32:aa:cf:85:91:0d:ee:1f:
f4:6e:19:9f:a9:c2:83:6f:24:8b:c7:85:63:ea:93:
2e:6a:80:31:b4:a0:16:8f:d0:b1:26:0a:cc:76:7f:
9b:9d:8e:73:34:54:e1:72:51:78:0f:c5:ad:84:59:
ba:10:7f:90:d9:88:c7:7e:cf:16:b0:fd:9d:a1:e6:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:91:FF:53:B9:C8:24:6E:75:93:00:FF:06:39:81:D7:4D:2D:3D
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:61:80:eb:e3:f4:f4:e8:2d:f7:b8:fb:d4:2c:75:21:a3:cd:
bc:7e:49:14:45:8f:ec:34:24:20:84:f6:1e:9f:aa:8b:15:c3:
f2:61:48:f9:af:42:2c:61:df:1a:6b:b6:42:bd:53:c4:92:3a:
4a:a9:43:8e:bd:1a:48:52:e1:2e:31:5f:cf:2e:54:cd:f3:13:
ed:4a:0f:e9:9f:03:c6:1e:80:d6:5c:11:54:d9:f2:41:d2:aa:
3e:da:b4:c9:d6:2a:a6:9c:7b:60:11:63:e1:be:8b:63:c2:9e:
0b:21:62:fe:ae:bc:76:fb:57:a1:ea:32:1c:b2:75:55:ba:8e:
df:d7:14:9c:aa:7c:a5:36:a2:37:9e:d6:7f:93:6a:37:19:b0:
19:7e:bc:a7:1d:fb:c5:d2:84:50:28:77:e1:49:90:6c:8c:91:
30:fd:80:ac:28:c3:1f:2f:22:a0:23:49:42:fa:ee:31:21:55:
36:f2:ce:5e:fc:63:ea:fe:90:dd:4f:8d:e8:d6:27:22:58:88:
35:b8:f5:47:61:85:38:72:57:26:fe:c9:e7:e4:c5:e6:32:8a:
c0:11:36:12:80:50:56:33:1f:93:90:ea:45:8f:e2:d6:ba:11:
d3:bd:6d:9a:3d:d7:7e:12:67:71:35:14:66:69:89:a7:de:2f:
4b:13:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:03 2025 by rpki-client