Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: ku+NZ/oPft9/tpa4dSj0d4ZTuiaccN3EkIlK8xpU5Ew=
Subject key identifier: 4C:EC:FE:1C:A8:5C:04:0B:CF:B5:A6:B0:45:C2:7C:6D:9E:6A:A1:D0
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0194C50827369EAC2C932EED6919EF42E7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0276
Signing time: Sun 02 Feb 2025 05:00:33 +0000
Manifest this update: Sun 02 Feb 2025 05:00:33 +0000
Manifest next update: Mon 03 Feb 2025 05:00:33 +0000
Files and hashes: 1: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: fefQ7ZN1cTSAw61jXfS8okqK7rMZN5gWFCufnxpT2IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:27:36:9e:ac:2c:93:2e:ed:69:19:ef:42:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Feb 2 05:00:33 2025 GMT
Not After : Feb 3 05:00:33 2025 GMT
Subject: CN=4cecfe1ca85c040bcfb5a6b045c27c6d9e6aa1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:41:ba:ff:6a:a5:5e:78:c9:cb:09:ba:42:
90:61:da:da:e9:b3:7d:9a:11:4d:d1:39:4e:0a:20:
47:92:fa:26:17:30:42:a4:d4:ee:7a:15:07:23:40:
6e:2e:ff:5e:eb:d6:b0:90:8b:fa:0b:21:53:6e:71:
52:ff:26:02:d1:93:fd:04:fd:86:2e:ec:22:f2:fa:
89:2f:08:86:c5:c2:ba:6e:1e:cd:73:48:32:90:2c:
07:f5:c7:60:7b:9b:7c:24:ef:e7:da:4f:e9:22:fb:
5a:93:80:60:55:15:17:b4:ca:1d:13:11:bb:14:db:
78:8a:4f:ed:9d:7b:99:6b:54:56:da:67:9a:a8:1a:
06:14:4d:1e:1e:c9:5d:9e:d6:3c:0e:04:c0:e3:de:
5b:26:1c:af:5f:a8:ad:1c:4c:e8:33:b9:67:3f:e0:
5e:5a:46:1c:bc:0a:dd:8d:a3:f2:62:29:fe:d9:84:
58:b0:ab:bd:1d:a3:4d:37:72:02:30:29:82:8c:bf:
fe:44:6c:19:23:53:0d:1d:80:24:26:7e:fc:93:33:
9b:41:90:53:e6:b4:b4:02:c3:c3:f5:88:68:8d:7f:
c0:4e:a5:96:fc:da:a0:c1:9d:03:72:39:62:e0:7e:
c6:e8:e6:eb:3d:fc:c6:10:4c:a6:6a:75:d1:92:fb:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:FE:1C:A8:5C:04:0B:CF:B5:A6:B0:45:C2:7C:6D:9E:6A:A1:D0
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:27:b9:03:2f:79:0a:72:e7:60:d2:9d:73:12:c0:31:b6:4e:
24:ef:f9:c4:c1:5d:43:e8:f9:2b:5c:00:9a:f4:9a:25:ee:cb:
c2:45:38:e5:47:2e:e4:bf:4f:84:fe:16:c4:eb:fa:2b:46:43:
09:a8:ce:8c:fc:ea:70:41:04:79:fb:1c:2d:d3:ca:a0:14:6d:
7a:2c:a3:4c:45:5b:73:c3:47:68:42:d8:2d:52:85:8b:8f:43:
98:bc:05:47:61:a1:19:5f:4f:d4:47:c2:5b:0c:49:48:87:ee:
5c:2a:7a:f9:cb:cb:e4:0e:22:23:99:9e:42:d6:ea:2f:e4:de:
fd:8e:47:8f:18:0f:e1:a9:cc:14:85:9a:1b:37:e3:38:da:d5:
0c:d5:dc:c5:a5:0b:24:75:57:ef:62:7a:6b:6c:c7:5c:01:50:
33:bd:02:49:88:c8:99:f1:0c:7c:fd:01:3e:64:f3:9a:21:5e:
09:af:55:6d:0f:2f:91:3b:1e:af:9a:cd:12:e1:c1:0d:37:cb:
02:f6:54:52:4b:ee:8a:89:fd:3b:ad:a1:a4:cf:c7:7b:dd:35:
0b:38:65:94:1e:fa:1e:41:da:ef:58:3a:f9:11:ba:30:34:4b:
c2:2e:e7:80:05:e3:f7:37:1d:68:fc:a5:12:34:68:04:d3:31:
98:23:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:53 2025 by rpki-client