Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: kEoax1Rxh9j1990g5O7+udXLvFIV7fPPldnAWpWWSl0=
Subject key identifier: 8B:91:B4:71:DB:51:3D:A9:7B:25:34:0C:7A:83:6B:49:B0:56:A9:E5
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 019510C777D3FACFBD614643874CA66121B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0532
Signing time: Sun 16 Feb 2025 22:01:02 +0000
Manifest this update: Sun 16 Feb 2025 22:01:02 +0000
Manifest next update: Mon 17 Feb 2025 22:01:02 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: YFD73f7rjgcyKIP7C5sFKKguwA5Fn+d8U63M4eSyzKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:77:d3:fa:cf:bd:61:46:43:87:4c:a6:61:21:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: Feb 16 22:01:02 2025 GMT
Not After : Feb 17 22:01:02 2025 GMT
Subject: CN=8b91b471db513da97b25340c7a836b49b056a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:72:7f:8b:4c:f9:6d:4f:ed:64:df:7c:7f:
b4:c1:73:29:7e:43:9a:54:ab:d1:05:62:97:cc:49:
13:f4:d2:d9:26:90:89:af:ea:a3:ea:71:bc:30:42:
a6:b4:ca:c6:3d:25:1e:65:36:50:f5:c7:36:b5:03:
41:31:1e:f8:8e:65:63:fb:0d:05:98:f7:0b:8e:10:
4d:be:4a:1b:3e:c2:e2:73:6e:94:f4:29:ae:3f:d2:
25:bb:bf:75:6e:5a:1f:7b:82:65:06:04:e0:d9:1e:
bf:30:fe:38:8e:b4:da:ea:fd:c5:17:b3:95:b6:0a:
63:d2:3a:9b:c9:54:d5:28:34:93:b7:28:3a:ff:18:
92:9a:9e:11:b0:75:d3:ee:05:f4:d3:85:1e:48:cb:
8b:e3:f4:30:43:66:99:5c:98:82:18:d4:11:ac:d6:
8d:20:12:44:37:98:72:f4:f0:26:81:12:fa:93:a0:
c9:a0:8c:65:6e:a7:a2:68:bd:5c:a8:5f:8d:74:ff:
0a:81:0d:ad:eb:fe:64:29:f8:48:5e:41:88:bf:ee:
b0:bd:4c:c6:5f:38:78:b4:45:2e:f7:e4:e4:69:d1:
a4:e1:46:10:7e:70:ad:86:61:2e:4c:2d:fd:4d:8a:
5f:91:df:46:ac:11:89:1e:28:69:2b:4d:df:c7:5c:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:B4:71:DB:51:3D:A9:7B:25:34:0C:7A:83:6B:49:B0:56:A9:E5
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:26:17:cb:a4:61:46:1b:63:aa:23:be:cb:89:6b:94:07:6b:
3b:ea:cd:48:dc:df:18:6b:d4:97:19:c4:3f:89:3c:b7:e4:ea:
e4:3d:c6:ba:a3:3f:ce:54:70:9c:37:03:24:31:3d:f7:c4:2a:
74:74:1c:cb:04:aa:d8:7a:1c:90:35:4d:80:bd:19:06:f8:7e:
6c:f3:0a:75:66:4e:85:71:77:33:18:58:ae:ca:09:e4:8e:f4:
0e:4c:e2:c8:a8:37:ee:15:ef:aa:57:b8:9b:82:c8:ea:a3:5d:
29:e6:cf:c9:40:27:db:5e:86:03:c5:c1:f5:0f:4f:9a:a0:34:
39:2b:47:9d:3a:02:47:5a:60:ea:ad:33:b7:63:d4:00:9f:81:
89:b1:6d:b8:9c:0e:1c:24:c9:46:34:37:29:ac:f9:d8:4a:4d:
2e:be:0f:bd:6f:34:29:d3:d0:33:75:79:e6:b2:01:f4:15:0f:
9e:e2:93:3a:52:5e:54:3d:e2:b4:e9:bb:0e:dd:bd:ee:be:bb:
59:ff:36:68:2d:e6:17:7d:5a:a7:69:5f:74:04:e0:3d:99:8a:
52:6e:7b:22:ef:15:0c:d8:da:ac:96:75:ff:6c:9c:5d:8b:4e:
22:06:99:c9:1c:73:9d:4e:f7:1c:ef:71:f2:c4:74:4e:97:b3:
5e:c7:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:12 2025 by rpki-client