Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: BxsyOrqKJgteZ922TZZBQVL8S5W0OHsNkkCQjMc7uug=
Subject key identifier: D8:EC:0F:09:86:4C:27:7C:CC:D7:4C:A2:07:E8:D2:51:B2:BE:D5:6E
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 0194C38871A602EA2C33563DE3ADAA1F012A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:01:26 +0000
Manifest this update: Sat 01 Feb 2025 22:01:26 +0000
Manifest next update: Sun 02 Feb 2025 22:01:26 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: eyCQiqtxbwzAxcdOTK56xeNTEgrWoNvHPzfs2A2zsq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:71:a6:02:ea:2c:33:56:3d:e3:ad:aa:1f:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Feb 1 22:01:26 2025 GMT
Not After : Feb 2 22:01:26 2025 GMT
Subject: CN=d8ec0f09864c277cccd74ca207e8d251b2bed56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:b1:65:8a:9a:91:a5:26:b1:b3:d0:37:ae:
e7:05:85:f0:39:8d:06:9b:9c:a4:83:bd:24:b7:72:
ab:39:8a:fa:b8:f6:a4:8b:d2:dc:98:41:02:4e:34:
f2:21:dc:cb:86:09:e1:bd:ff:b7:56:37:bd:c8:cd:
dc:52:c3:44:5f:4b:86:64:39:25:83:bc:84:c2:52:
e5:99:e6:ad:4b:4d:14:05:23:a1:45:c4:4c:e2:a6:
80:74:3f:cf:2e:62:eb:5d:af:b6:98:ac:ba:37:6f:
3a:47:02:4e:03:8c:58:1b:35:07:1a:6e:c8:c9:39:
24:1c:29:57:45:1d:35:71:23:ab:6c:b6:d0:02:60:
f1:ea:76:67:60:fe:60:08:4d:47:4d:fc:be:6c:56:
67:e7:c9:d8:2b:14:14:01:24:72:02:d0:32:6f:98:
5b:d5:08:29:c0:ae:ae:2d:5e:4c:80:d2:15:08:58:
c3:e3:dd:a3:54:37:3a:68:7a:f1:b0:25:31:06:74:
bf:ba:c6:46:b0:fd:24:53:b1:1b:a0:84:64:ba:8b:
01:38:82:1e:a4:64:6e:5c:9d:d4:4f:c8:e1:58:35:
8d:49:46:b9:4b:45:7b:fe:8c:4a:85:e0:61:db:d5:
79:be:c8:f2:d9:a5:df:70:d3:1b:a1:25:07:a2:73:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:0F:09:86:4C:27:7C:CC:D7:4C:A2:07:E8:D2:51:B2:BE:D5:6E
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:59:34:9c:3d:da:75:12:15:79:d8:d0:f5:3b:97:0d:d8:
81:90:a6:c8:bb:7c:95:19:fc:d8:d8:8f:c6:69:5f:d4:29:7a:
6c:41:c4:d7:2d:80:ff:98:b6:3f:62:a4:14:73:b0:f1:70:e6:
ec:86:b6:37:55:0b:6d:0b:a7:54:34:8b:d5:8f:75:13:46:23:
cb:43:93:3c:60:a6:8c:a9:78:b8:0a:bd:8a:58:b4:ec:07:99:
0f:91:8a:44:8f:bf:b2:a4:98:f5:3c:b2:e8:b1:8c:6a:87:47:
97:34:34:a1:f3:18:e9:77:4e:65:6b:a1:27:21:08:ca:f6:06:
43:9a:d8:7d:4d:ff:cd:64:f9:82:cb:07:06:e6:62:6d:41:80:
ec:04:ce:fb:aa:c5:29:f5:79:62:be:00:8b:34:23:7e:b0:6d:
4e:c4:d6:46:7d:8a:7e:6e:cb:8a:60:c1:6e:23:cf:b4:7d:a7:
ee:ce:9e:bb:0d:fa:3c:53:00:25:1f:24:50:f3:0d:3a:05:64:
0a:3f:9a:6c:59:dc:b5:10:e8:a7:fe:32:86:fc:6d:a1:e9:fd:
8d:5a:c5:6b:fd:e0:c5:c3:cf:0e:9e:8b:7b:78:0e:c2:e0:19:
63:59:02:a0:ee:7a:a2:6f:a4:83:cb:33:14:6e:65:e0:cb:76:
ed:f7:41:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:18 2025 by rpki-client