Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: 2Rj/ZtTnbxXGcM51qSBZKNixBe5H/vWxsUGkkwp5X0k=
Subject key identifier: 5F:23:9B:D9:EF:48:DC:3D:1B:CB:8F:57:EE:AA:8A:E5:38:A1:10:36
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019510C745FB05F12B659CEC40A41C2FB4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1451
Signing time: Sun 16 Feb 2025 22:00:49 +0000
Manifest this update: Sun 16 Feb 2025 22:00:49 +0000
Manifest next update: Mon 17 Feb 2025 22:00:49 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: YpdLhJg43SAq3qZzZ3X/052W18+9U4pTAZvm+ZyyQzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:45:fb:05:f1:2b:65:9c:ec:40:a4:1c:2f:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Feb 16 22:00:49 2025 GMT
Not After : Feb 17 22:00:49 2025 GMT
Subject: CN=5f239bd9ef48dc3d1bcb8f57eeaa8ae538a11036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:43:7f:a6:47:34:5c:1f:a4:54:06:2e:6e:
9a:ad:d0:07:d1:31:14:86:8d:f0:57:26:1b:02:51:
40:36:81:5c:25:de:95:de:3b:a2:ac:1f:f4:06:ba:
5a:cf:7e:da:c5:12:2e:b3:85:9a:9b:49:72:65:ad:
8d:0d:d1:d9:68:c3:20:7d:56:87:6a:84:54:7c:1b:
12:94:c4:14:12:e7:d8:6a:f4:f0:04:d9:82:af:b7:
6d:63:7e:c0:f4:54:be:07:a7:87:67:7a:c7:a5:43:
63:57:d9:32:71:a3:5c:af:76:ea:9b:fc:86:c3:3a:
12:5e:b0:37:8b:a7:25:e1:18:e3:88:d0:f1:dd:8a:
e5:da:c0:f3:d1:00:3f:15:49:de:5a:9c:04:c4:f2:
48:0c:29:ed:74:3b:fc:de:f0:4e:06:23:44:79:ee:
1b:6a:b3:62:11:5b:45:91:46:6c:83:9c:a6:b6:62:
e6:f2:2a:1f:f6:3a:ee:9d:ab:58:7c:82:52:f8:ad:
97:62:e7:a1:52:5c:1c:b8:77:21:96:47:b5:a9:e8:
83:3d:dc:2c:06:37:01:6a:38:c2:99:6d:39:72:59:
8a:e6:22:33:6a:8e:a3:89:69:88:e3:04:96:e5:51:
ce:28:27:21:08:40:3c:7d:c2:de:90:db:05:a3:d4:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:9B:D9:EF:48:DC:3D:1B:CB:8F:57:EE:AA:8A:E5:38:A1:10:36
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:90:bc:70:48:71:0c:1a:32:9b:cf:94:56:14:17:ec:40:c4:
af:cc:c1:33:3e:5a:84:44:a7:23:f0:88:e6:62:07:3a:28:00:
50:09:42:6e:b1:5e:72:57:60:77:ac:17:81:e6:0a:2b:25:0e:
ae:6d:a7:00:3f:96:31:26:ff:95:ac:48:50:97:25:eb:63:60:
b9:a6:e8:9b:ec:42:73:20:63:5b:c0:14:7e:91:da:7d:73:96:
93:34:da:fa:fc:e4:96:e9:c1:66:a7:90:72:93:b2:42:aa:88:
16:a2:47:e6:52:7e:87:4c:26:80:51:48:2f:f5:2d:ca:15:fa:
24:19:6c:9a:d8:6b:04:69:8f:80:99:e0:c5:5f:b2:96:92:a0:
09:46:1b:21:d1:6b:cc:02:01:1c:2e:bc:a4:68:df:9c:ed:05:
40:dd:4f:54:3d:ef:31:01:ea:c0:68:e9:b3:3b:bb:20:c4:b6:
da:f5:ae:2f:0d:2a:8e:4f:e9:30:08:ff:d0:a5:33:68:d4:a2:
e4:1b:89:ca:4c:d5:54:d9:6a:67:e3:bb:7a:ff:b9:22:e7:1b:
f2:ee:2e:33:5e:f6:8f:9a:fe:92:99:da:76:ce:c8:a3:56:42:
68:00:63:45:45:55:34:3e:0d:14:5d:d0:ee:22:b8:58:47:38:
35:cc:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:09 2025 by rpki-client