Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
File: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft (raw, json)
Hash identifier: mIcaY7o3fvQshqEu8/3RiHBVACFwcjSA+L2jNlE3GDI=
Subject key identifier: 65:19:03:C3:DA:96:50:0E:14:C3:00:EB:B3:4B:C2:12:05:B5:81:2D
Authority key identifier: B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
Certificate issuer: /CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Certificate serial: 0194C38801117755D167B0F4CC1B814E8691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
Manifest number: 038F
Signing time: Sat 01 Feb 2025 22:00:57 +0000
Manifest this update: Sat 01 Feb 2025 22:00:57 +0000
Manifest next update: Sun 02 Feb 2025 22:00:57 +0000
Files and hashes: 1: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl (hash: GsEySndLzAkW+YTLiaTuHOdpZvKdCvumUhIq10hecdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:01:11:77:55:d1:67:b0:f4:cc:1b:81:4e:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Validity
Not Before: Feb 1 22:00:57 2025 GMT
Not After : Feb 2 22:00:57 2025 GMT
Subject: CN=651903c3da96500e14c300ebb34bc21205b5812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:00:e2:13:38:e0:ad:4d:5a:1c:04:7e:4f:
5f:fd:18:24:f9:6c:5f:ad:67:9a:b0:46:81:76:5c:
aa:32:f8:1e:53:e3:13:b5:3b:61:41:4a:6a:17:0f:
09:b6:97:17:38:0d:02:25:ec:a4:48:a6:7d:08:d6:
11:92:c4:b5:3a:11:6c:93:f9:d4:9a:c7:45:ef:80:
93:2d:d5:d4:ac:3d:3c:23:fc:4f:d6:ee:7e:d7:0d:
c8:79:cd:cd:16:df:c3:e2:bb:52:4d:8a:b4:a6:88:
a9:e7:e1:f6:9b:b9:fc:1b:49:a4:b2:26:b2:6b:8c:
74:28:f8:22:c5:76:92:58:de:95:af:dd:0b:a7:02:
49:6e:12:f4:79:3b:ce:d0:6e:cb:19:b4:f4:75:c3:
5e:c6:6f:03:63:97:c8:12:c5:57:49:7e:69:6f:54:
66:cc:99:0e:4b:90:16:95:8f:13:7c:ee:cf:0a:70:
2a:6e:20:3e:e6:8a:42:e2:e1:82:12:69:ba:20:ce:
34:05:5a:bd:ba:26:e9:a2:52:83:ee:37:8c:55:fa:
03:03:4b:7c:91:fb:1c:c5:21:08:af:ea:58:fd:7d:
ea:d1:05:a6:a1:0d:fd:1e:a6:84:48:65:42:75:00:
9c:54:49:90:09:9e:64:23:a7:24:68:9f:43:12:0e:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:03:C3:DA:96:50:0E:14:C3:00:EB:B3:4B:C2:12:05:B5:81:2D
X509v3 Authority Key Identifier:
keyid:B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:7c:d6:2d:33:4c:f1:22:b4:e8:52:f4:05:1c:f2:e1:ad:
1d:1b:b7:5b:66:79:16:76:19:ae:df:fe:3c:18:94:a8:02:2e:
b5:42:19:87:bb:81:46:f3:e2:80:d6:50:cd:aa:65:ad:60:cf:
79:df:61:b1:eb:76:a9:53:b9:ab:03:36:62:ca:b1:24:9e:6f:
7d:42:52:70:72:45:90:8e:2b:25:16:94:5b:a2:00:c7:16:ee:
65:67:07:7d:92:38:85:34:26:a6:98:3d:d2:b5:7a:5a:c9:80:
89:d6:88:e1:64:dc:dc:f1:2a:55:a6:1d:a8:ac:df:3c:55:d4:
59:07:50:fc:23:5a:97:97:9a:0c:f8:de:c9:b6:ff:ba:2f:e3:
bf:6e:4b:e4:ab:d6:41:90:ce:3b:07:7c:27:d0:64:67:8f:b1:
12:b7:d7:2e:bc:75:a9:2a:5d:d9:3b:d4:0a:c3:b5:0e:89:94:
af:12:2d:28:e9:a9:27:4b:52:b3:57:cc:e4:ce:2b:03:66:6b:
68:30:f9:9b:1f:2e:75:70:c6:b7:29:ec:45:e7:00:30:df:d3:
f3:ce:c3:22:03:ea:7d:a9:b2:25:da:49:7f:25:ee:e9:e2:09:
b7:87:b9:0d:b9:f6:b1:c7:60:9f:51:56:b8:18:5e:f6:4f:e9:
9e:34:a0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:33 2025 by rpki-client