Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
File: 3o29_ntfwsHflmKJSlS-nmvKXcs.mft (raw, json)
Hash identifier: W/2XICPmDRIouWFNcj2gDk/d7+JdbD1Vbsm8gnIfGlk=
Subject key identifier: 23:7E:8C:D6:51:3F:B3:8A:00:32:FA:93:06:70:23:12:7D:B4:D0:05
Authority key identifier: DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
Certificate issuer: /CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Certificate serial: 019511A2C3BADDDA9976F9A2B8636A83EE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
Manifest number: 045C
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: 3o29_ntfwsHflmKJSlS-nmvKXcs.crl (hash: 719mUBkp+QviUeCfUNRZnMHilqaJvCsVEWbMKTiMMHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c3:ba:dd:da:99:76:f9:a2:b8:63:6a:83:ee:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8dbdfe7b5fc2c1df9662894a54be9e6bca5dcb
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=237e8cd6513fb38a0032fa93067023127db4d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:6b:49:37:fa:d1:c0:19:89:cb:12:a3:e6:
ed:fc:b1:b5:d7:ae:b9:57:04:8b:91:cf:7a:55:37:
5d:cd:01:58:b8:8b:1f:c2:dd:d5:22:ec:66:40:f2:
a9:12:4e:4f:32:32:5a:c8:d0:52:3d:b2:6a:dc:57:
31:db:2c:43:66:00:7b:c1:d7:ca:e0:65:2f:5a:c3:
8f:c2:02:04:5b:67:17:99:38:b6:b2:81:66:62:64:
06:9c:ac:91:1b:62:2f:24:1f:17:fe:95:14:8f:5a:
d4:8f:25:a3:3e:f5:70:60:4b:04:5e:55:ad:59:5d:
e9:52:0c:ac:99:ed:44:b4:4d:00:a4:7e:40:97:4e:
39:9e:44:fc:d9:be:6a:9e:5c:53:76:68:c1:c9:10:
d3:f4:2a:c5:cf:5c:0e:b7:bd:3c:f4:77:31:5b:5d:
c0:b7:27:d0:45:ca:ef:eb:8c:43:76:ca:c1:5f:3a:
53:b8:70:5e:0e:97:dd:ee:22:3d:7f:e8:64:82:8b:
5f:4b:e5:38:60:ce:ec:54:48:85:29:17:72:fb:ae:
98:df:94:50:54:74:6b:39:a5:9d:2d:a4:9e:da:1b:
75:f3:bd:88:4c:1a:46:e7:bc:22:03:eb:2c:49:1c:
36:19:84:16:18:ab:5e:88:07:ae:60:88:f3:3b:9f:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7E:8C:D6:51:3F:B3:8A:00:32:FA:93:06:70:23:12:7D:B4:D0:05
X509v3 Authority Key Identifier:
keyid:DE:8D:BD:FE:7B:5F:C2:C1:DF:96:62:89:4A:54:BE:9E:6B:CA:5D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o29_ntfwsHflmKJSlS-nmvKXcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2fcaa4-9f29-44b8-b1e8-921f5bc9f2e6/1/3o29_ntfwsHflmKJSlS-nmvKXcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c0:1b:96:b0:93:ef:c0:5d:3f:fe:68:c3:01:c4:cf:a8:51:
9e:d3:b9:56:f3:13:be:3e:75:c7:83:49:96:2b:d8:9a:42:21:
ec:18:b5:98:e6:df:70:45:2b:fd:93:e3:e6:51:19:3f:75:d3:
a6:56:c1:73:55:16:c4:7a:ba:93:08:d1:f6:4c:96:0c:92:2b:
fe:b6:99:92:e0:c4:17:6f:57:3e:8e:06:e1:be:95:9c:fb:df:
5e:8f:da:02:2e:ef:ff:32:03:dc:c5:5e:74:46:17:df:a8:57:
fe:64:70:40:d0:2f:e0:87:1a:0f:05:df:61:8c:78:2b:d9:45:
a7:37:a0:10:9c:f7:9c:f6:5e:37:38:b7:13:a0:01:a3:cf:62:
3e:cf:6f:78:b1:92:97:7d:93:1c:1e:eb:f6:ec:ca:46:76:d5:
a2:2e:97:0e:88:89:05:9e:77:95:3f:2e:14:d2:26:f3:59:12:
39:f1:dd:fc:65:2a:de:74:b8:ca:9b:30:17:07:4c:97:7f:8c:
80:e2:28:b1:55:77:6c:9c:b1:6f:2d:b1:f9:66:a8:b0:82:a6:
78:98:1f:f5:48:69:f8:0d:dc:d2:45:a9:e6:d4:ed:e8:e5:62:
d2:3e:c5:e0:19:74:14:af:0c:be:19:03:b7:87:82:b7:58:62:
50:60:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:41 2025 by rpki-client