Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
File: vFxHuPnkKkkot2dDFqcap21AHjw.mft (raw, json)
Hash identifier: gWJT33he77D88nmFsl3itilh5GwCL9pXBs8ARV6fiWI=
Subject key identifier: B4:B0:4A:8A:A1:17:9A:9C:B2:83:DC:FC:1E:23:19:95:10:CA:1E:DA
Authority key identifier: BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
Certificate issuer: /CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Certificate serial: 019510C767479A9A9C5C324CDB64D544FBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
Manifest number: 09E7
Signing time: Sun 16 Feb 2025 22:00:58 +0000
Manifest this update: Sun 16 Feb 2025 22:00:58 +0000
Manifest next update: Mon 17 Feb 2025 22:00:58 +0000
Files and hashes: 1: vFxHuPnkKkkot2dDFqcap21AHjw.crl (hash: PZG6DPIBgVlNf4d9Or7FRKfD2hg+ptEk+4KRyKGU2WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:67:47:9a:9a:9c:5c:32:4c:db:64:d5:44:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5c47b8f9e42a4928b7674316a71aa76d401e3c
Validity
Not Before: Feb 16 22:00:58 2025 GMT
Not After : Feb 17 22:00:58 2025 GMT
Subject: CN=b4b04a8aa1179a9cb283dcfc1e23199510ca1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:7d:50:d3:50:2a:9d:0c:06:d5:62:6b:6d:
32:b4:72:3b:4f:96:3f:84:e1:38:79:00:68:82:d3:
21:42:f1:73:5d:bf:33:f3:a1:d6:51:06:09:fe:6d:
b4:4b:56:1f:40:be:2f:4b:d6:78:bf:b9:49:6d:f5:
41:f7:21:6e:6a:ab:6a:b9:56:c2:0c:94:3a:39:0c:
ee:8d:fe:dc:c2:7c:fa:1b:74:80:cf:34:05:a4:5a:
9d:34:31:65:28:e6:9c:aa:15:57:2f:08:2b:b4:01:
85:90:bc:62:6b:5e:14:cc:7b:47:c7:f7:a7:b7:f7:
2c:6d:f9:ce:83:0c:4b:3c:1f:f2:89:f7:5d:87:12:
4b:e9:b7:0f:12:e5:9d:2d:34:8e:fb:f3:0f:98:07:
57:95:ff:ef:7d:69:7e:32:9c:09:bf:38:ce:f0:80:
5b:ba:39:8d:28:f0:68:1e:83:85:ff:16:e5:33:2d:
68:3e:6f:66:52:f0:9c:72:df:95:3f:33:e4:1d:5b:
b3:1a:e9:2e:f1:50:c4:fd:78:43:7c:3a:bb:19:af:
ea:fa:5f:d8:48:28:8c:fb:da:ca:99:2b:1e:65:de:
0d:bf:40:95:8f:15:ad:e5:9e:1c:0f:bd:fd:88:c5:
c9:61:ff:d5:65:f7:4e:61:35:48:3a:41:62:61:3d:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:4A:8A:A1:17:9A:9C:B2:83:DC:FC:1E:23:19:95:10:CA:1E:DA
X509v3 Authority Key Identifier:
keyid:BC:5C:47:B8:F9:E4:2A:49:28:B7:67:43:16:A7:1A:A7:6D:40:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFxHuPnkKkkot2dDFqcap21AHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd8762-47bc-4511-93a5-7a18c179076d/1/vFxHuPnkKkkot2dDFqcap21AHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:38:ab:24:64:cf:0f:5b:fa:3b:cd:3c:63:0e:88:13:3e:
6e:7d:a1:46:42:ed:4c:fa:a3:0f:4f:9b:e9:c5:b5:f2:01:b9:
66:2e:cd:d5:6c:68:0b:c2:8c:b0:a8:02:75:ce:12:cb:9f:cf:
fa:f9:e4:89:e7:69:88:15:49:8b:47:ac:8c:8a:da:33:a1:ce:
6e:76:26:1a:20:65:e6:48:3c:9c:f9:73:a3:98:46:3e:5a:ee:
af:dd:c9:a2:a4:37:d0:7d:ac:53:70:d1:9e:8a:3c:3a:56:73:
2c:ce:8c:0c:c4:13:53:76:53:17:b0:30:73:ce:2b:bb:a5:0a:
cb:a1:ea:68:05:4e:4d:6f:67:a7:90:46:8f:d7:68:b0:6f:cf:
5a:50:e0:79:06:88:59:46:78:1a:fc:ca:ba:bf:4f:70:9c:69:
e0:8f:7f:53:6f:59:c8:32:b3:ad:22:30:67:01:81:53:12:44:
c3:29:ab:11:6a:0d:8a:c9:d7:b9:99:f2:95:3d:49:e4:d7:aa:
a4:c4:7d:7c:21:69:d4:e4:bb:a9:3b:76:90:f4:25:76:52:3b:
b7:0a:ed:0d:3b:a4:03:5d:c8:65:61:ed:ff:35:63:ba:a8:d3:
7f:00:63:c5:64:b5:ce:d9:1f:1a:3b:5b:6f:9c:d8:fe:eb:d1:
f1:48:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:48 2025 by rpki-client