Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: K/BRQoutqiUopPSKrzr8wa8wKjfFx3//J1bvMwWCAEE=
Subject key identifier: EE:F8:0D:F0:97:2C:24:63:92:75:30:3B:11:12:A5:64:19:9D:BA:58
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 0194C387CF2159D01088A027C8430539034C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:00:44 +0000
Manifest this update: Sat 01 Feb 2025 22:00:44 +0000
Manifest next update: Sun 02 Feb 2025 22:00:44 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: OYes3+DmCzVGjicsRYrPfBlPYbk/OSZ51tMru1mw9uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:cf:21:59:d0:10:88:a0:27:c8:43:05:39:03:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Feb 1 22:00:44 2025 GMT
Not After : Feb 2 22:00:44 2025 GMT
Subject: CN=eef80df0972c24639275303b1112a564199dba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:78:c3:03:47:48:71:87:99:ef:ea:9c:5d:
38:29:04:48:89:03:e1:7f:59:64:bc:4e:25:73:0e:
5e:1e:84:aa:ad:cc:90:c9:9b:91:94:da:87:9d:c0:
68:95:0e:86:6e:62:c7:1f:1a:61:e4:51:fd:41:fe:
3c:1e:0c:74:89:81:e0:65:0c:0b:de:b4:a4:35:9e:
60:1e:ed:1a:13:b9:1f:e5:e9:aa:72:c3:31:6b:61:
06:65:00:9d:8e:43:c5:e5:f8:97:cf:52:83:b8:01:
84:32:d1:17:a1:22:d0:0d:18:d2:a7:95:4b:11:4e:
14:a1:da:83:51:e8:08:09:3f:09:ab:f5:2e:cf:38:
8b:b6:2d:27:2e:2d:bc:5c:ab:04:ff:52:83:40:43:
4e:04:36:9e:7d:9d:96:63:2a:e1:14:80:9a:23:aa:
0d:f9:22:a9:23:ce:98:00:a8:4b:d2:66:2b:38:f9:
d2:70:56:3b:08:d9:d0:50:0e:53:ee:21:8f:d6:3a:
c1:d8:a7:2c:46:91:3d:a4:a2:c3:a8:13:e2:8f:1d:
75:bf:2b:de:f9:a3:2c:bb:c4:e3:86:a1:96:3d:eb:
9c:c6:df:81:b5:06:16:52:b1:3c:d4:90:7d:47:c9:
1c:46:db:3a:b5:89:8d:15:c0:49:63:50:c0:d6:a7:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:0D:F0:97:2C:24:63:92:75:30:3B:11:12:A5:64:19:9D:BA:58
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:0c:26:e5:7c:60:71:11:87:e9:95:ff:39:6b:47:02:8c:
c6:ad:a0:6a:3a:b2:cf:7b:99:9c:6c:e7:e2:c8:df:68:c7:d9:
51:2e:fa:d0:c7:e9:ac:58:6b:96:ed:72:5f:95:59:84:cc:b6:
f0:63:18:97:01:46:45:8f:cb:34:88:65:44:c6:e4:6b:7f:3c:
09:a2:92:e1:65:70:30:aa:8a:1f:90:99:a2:02:8d:30:a2:bc:
6c:3b:24:59:b5:e6:de:f5:48:79:a9:f8:e3:fc:f2:96:a1:ce:
3c:a7:d0:5f:ac:5d:83:c2:4b:67:b7:66:6c:0a:69:de:98:8c:
8c:66:da:2a:d3:72:ef:6b:f6:1e:99:28:91:07:b1:6f:a4:ff:
cd:a7:ff:b2:25:a2:fd:fa:6e:c5:97:e5:85:b6:58:d2:51:6a:
c9:64:b8:b1:24:69:fd:d2:0d:31:af:f2:f5:1d:3f:07:a1:13:
65:e0:e5:3e:e2:26:85:e1:b2:33:a3:71:89:56:f2:16:af:39:
e6:31:1a:48:a8:38:b8:38:fd:53:85:00:f2:fe:4c:69:c3:4e:
53:90:44:d0:ba:9a:56:33:d0:44:51:67:70:08:60:9e:b4:29:
f6:b7:9e:65:c0:c6:90:4a:d0:d1:18:3c:b8:5a:7a:23:a9:76:
e5:75:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:58 2025 by rpki-client