Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
File: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft (raw, json)
Hash identifier: 8Z0VKv4WkYBy/hS9LA09dMT3R9nANihzTHgof2RIj08=
Subject key identifier: 05:4C:AF:B8:5F:E3:DF:77:59:9B:A0:4B:F1:EE:23:87:FF:24:6E:BC
Authority key identifier: 5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
Certificate issuer: /CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Certificate serial: 019511D9BE1D90D0AAF59C361DAA96783A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
Manifest number: 06E6
Signing time: Mon 17 Feb 2025 03:00:37 +0000
Manifest this update: Mon 17 Feb 2025 03:00:37 +0000
Manifest next update: Tue 18 Feb 2025 03:00:37 +0000
Files and hashes: 1: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl (hash: SZcLxD3IY1FDjpj43ddQCokdFDHdTcEMPQAJp+qsyxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:be:1d:90:d0:aa:f5:9c:36:1d:aa:96:78:3a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Validity
Not Before: Feb 17 03:00:37 2025 GMT
Not After : Feb 18 03:00:37 2025 GMT
Subject: CN=054cafb85fe3df77599ba04bf1ee2387ff246ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:4c:09:b3:a7:fb:b4:85:09:7c:b1:f1:95:
b2:1e:90:8d:db:bd:c5:af:96:3a:38:e5:bc:22:d9:
04:5c:d5:d4:b3:5d:0f:ed:66:b0:d9:1c:bb:7d:1d:
e5:d0:07:00:9d:75:58:08:42:33:12:58:78:15:a4:
50:82:2e:fa:1c:90:04:26:20:55:e2:cb:e1:0f:e6:
18:88:9d:33:75:eb:16:5e:59:b9:9b:83:33:0b:3c:
a8:51:12:22:1e:57:33:52:92:f2:9e:82:57:c9:d9:
6c:76:40:b6:ee:9b:4f:ca:ad:08:15:91:0a:8f:e4:
f4:0b:f8:66:56:79:1c:68:b3:0e:45:9a:b7:99:75:
2a:25:e3:95:e4:57:bd:0b:66:8f:bb:0a:53:39:49:
88:00:03:74:b3:bd:3b:8e:4d:5e:a0:09:81:5b:2e:
2b:f8:99:10:4f:ee:4e:ff:13:9a:9f:87:ed:09:d0:
bb:04:b4:21:f4:61:11:b6:9b:94:9c:c4:03:84:b9:
e0:9e:40:03:9e:41:9c:f0:5f:15:a2:d5:7e:e4:94:
fa:3d:02:2b:ce:66:0e:58:fa:12:a6:0c:19:d0:67:
ad:76:f8:de:40:46:b3:7d:97:af:88:54:14:03:96:
3d:fd:14:9b:04:74:c1:99:47:cf:75:d1:9a:c8:cc:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:AF:B8:5F:E3:DF:77:59:9B:A0:4B:F1:EE:23:87:FF:24:6E:BC
X509v3 Authority Key Identifier:
keyid:5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:31:97:00:4c:d9:10:12:e1:31:c6:51:f5:3d:9d:07:be:
eb:73:fc:b2:d9:72:51:c5:c3:62:bb:23:d8:40:49:c0:61:ca:
07:6b:84:52:8d:5a:aa:86:e7:28:00:3f:99:36:de:d0:34:24:
c1:26:d3:3e:4b:1f:0d:cb:4e:fb:8b:e5:d3:84:b1:68:83:83:
fe:04:39:cb:8a:c0:49:50:61:8a:0b:34:90:09:d2:d7:a1:84:
71:4c:48:1d:5c:6b:f6:5b:7b:df:4d:7d:6f:15:ea:a5:ba:80:
32:e0:50:53:34:62:e0:71:b3:e3:f4:4b:1f:c4:59:37:e8:b9:
f2:02:f1:6e:ea:72:30:6a:11:66:80:cd:16:4b:13:57:6a:87:
fd:18:3c:c1:95:87:71:4c:e9:5e:3b:47:d6:2c:6d:c0:dc:a1:
5c:6a:3a:80:a4:eb:70:69:98:0f:1b:c6:40:6c:98:af:59:5a:
ad:8c:0b:65:4b:12:ba:e6:b4:26:2f:df:eb:ec:19:05:de:62:
a9:db:a2:d4:75:5c:37:68:42:0a:13:7e:1b:1f:47:f1:1e:50:
b2:fd:16:a6:ca:00:32:01:48:29:44:cf:a7:51:c5:8b:f6:35:
c0:24:f5:7f:ab:bd:ce:ce:63:db:38:0e:e8:5b:58:be:bc:ba:
64:b7:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:07 2025 by rpki-client