Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: FDoMLcyc88OC6Wr7Rjbx9ATu1UM7rhnCNNu2pIt5urg=
Subject key identifier: F6:68:B3:C6:6B:BD:E1:E3:57:46:A6:D1:71:D3:8E:E7:4D:6A:E1:78
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 0194C4D0DF197BDB00F023A3DEA185400223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 30
Signing time: Sun 02 Feb 2025 04:00:10 +0000
Manifest this update: Sun 02 Feb 2025 04:00:10 +0000
Manifest next update: Mon 03 Feb 2025 04:00:10 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: mQE0sGKoDqp34suc23QiBKj15qB6vzY6KyKTwW76wGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:df:19:7b:db:00:f0:23:a3:de:a1:85:40:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Feb 2 04:00:10 2025 GMT
Not After : Feb 3 04:00:10 2025 GMT
Subject: CN=f668b3c66bbde1e35746a6d171d38ee74d6ae178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:8d:fa:54:9a:0d:4e:6d:a4:33:ed:4a:3b:
c5:c7:10:7a:d4:71:3c:ae:2e:07:dd:ee:df:36:e9:
63:54:22:89:35:b1:f6:d3:92:e7:ff:f1:ea:e9:27:
02:8a:40:62:d0:4a:f3:14:98:40:89:97:c1:39:93:
58:b7:21:91:ef:09:54:51:3d:ba:1e:80:14:98:6c:
28:76:e0:3b:5c:10:1b:4c:f8:a2:47:12:00:f8:c3:
40:c2:7d:3b:8c:4b:5f:46:81:e4:05:b6:23:d1:5f:
62:5a:5e:63:fe:cd:64:3d:79:ab:b9:c5:32:0f:83:
83:76:0c:0b:1c:d6:75:8a:8f:22:c5:9f:31:2b:55:
6b:15:75:9b:f2:a8:28:83:0e:c9:56:9f:1a:5b:c2:
af:94:56:d6:74:87:df:86:66:cd:22:6d:8b:90:19:
c2:ae:e1:00:ea:18:49:86:88:c4:5a:96:88:46:b6:
1b:9e:30:97:fb:73:bc:4e:fe:c6:a0:df:a8:2e:e5:
1c:a9:8f:c2:ec:44:82:70:ef:76:56:2c:b3:88:cd:
24:9d:55:6b:b6:cf:0d:38:1e:97:eb:b6:d5:de:38:
16:31:80:99:6f:16:53:55:0a:d7:0b:7b:7b:73:c9:
79:47:de:bc:aa:0f:17:5b:c8:4e:d8:66:5a:5a:2b:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:B3:C6:6B:BD:E1:E3:57:46:A6:D1:71:D3:8E:E7:4D:6A:E1:78
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:e1:1f:6f:40:fe:3e:c9:a6:4e:05:5e:bd:b5:86:a8:45:
01:26:8e:4e:f4:5f:c5:30:49:54:99:55:6b:2f:f1:ea:94:c2:
16:89:dc:f0:a2:4c:86:9e:f8:09:ed:2c:e3:24:6c:c8:9d:b4:
bc:04:8a:b6:90:eb:62:f6:b4:49:68:c9:c4:0f:46:98:2a:56:
e4:05:bb:13:47:e7:93:f1:84:af:d0:43:78:65:2b:e1:4d:94:
c7:d8:6c:51:57:4a:d9:7b:3d:dd:04:ad:7d:35:8d:8b:88:2d:
84:e4:69:d7:45:cd:cb:9e:98:c2:9a:69:a9:65:f8:ae:f8:41:
09:d8:bd:6f:e9:e9:92:fd:3b:9f:56:72:ef:14:ae:6b:3b:3b:
e1:c2:25:d8:e6:b3:4f:d9:59:71:c5:0c:96:ee:88:5c:10:8a:
dc:a8:b3:24:bb:b4:11:fc:cb:96:c2:cf:e4:1f:22:b4:d8:91:
b5:1b:cd:35:c0:4d:60:e0:22:1a:b1:e0:bf:21:30:d5:4f:83:
9a:3b:c3:3e:47:e7:7f:b9:4a:e8:ad:c5:c4:ac:d3:04:8f:0b:
66:70:04:ca:03:d6:5b:fb:3b:6c:b6:2e:c3:5e:2d:2e:58:44:
0f:bb:9f:ad:5a:67:5a:5e:19:76:e5:46:f3:ac:4f:ec:64:b6:
aa:74:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:31 2025 by rpki-client