Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: 29UI12SZkkdyivCnuVfk1u0af8RFFIepUcdkgOv16EQ=
Subject key identifier: 65:04:A3:75:68:58:4A:C0:B5:64:B8:ED:2F:1A:BB:2A:9F:B9:CC:3A
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0194C463A05E2F155BFAE3D40621241F458C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 6F
Signing time: Sun 02 Feb 2025 02:00:50 +0000
Manifest this update: Sun 02 Feb 2025 02:00:50 +0000
Manifest next update: Mon 03 Feb 2025 02:00:50 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: vqcEJe9PzFUlVlzuKRyjFyqDssjN+MAmb0OthOf76Dk=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a0:5e:2f:15:5b:fa:e3:d4:06:21:24:1f:45:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Feb 2 02:00:50 2025 GMT
Not After : Feb 3 02:00:50 2025 GMT
Subject: CN=6504a37568584ac0b564b8ed2f1abb2a9fb9cc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:83:9b:ba:a4:61:37:f5:48:f8:33:d4:4f:
bf:ea:1b:ea:05:5c:38:49:a5:51:51:4f:ba:58:4b:
12:3b:95:b4:dd:b5:f4:2a:c2:28:45:6f:81:b5:a8:
6c:ff:74:cd:8c:04:8a:7a:0d:bb:49:32:f4:a2:9f:
e4:ec:db:33:4b:e7:55:58:85:dd:1f:08:a2:9d:b0:
4c:4d:8e:4b:0e:fb:75:ad:0a:d3:fd:4a:cf:c5:a2:
7b:c1:e7:25:44:a8:1f:1f:41:0b:67:3c:d0:12:58:
5b:bf:85:c8:a5:6d:df:42:9f:ee:02:1d:48:0b:23:
ed:86:9f:61:45:bc:00:12:e0:5b:87:73:2e:a5:84:
f7:a4:3d:18:5f:c7:70:c3:66:89:59:1d:4b:08:f5:
39:c1:19:8b:fe:ba:df:7d:52:b1:fa:9a:f5:6e:8a:
78:4a:34:49:8d:71:c7:6a:86:53:45:8c:c0:27:50:
e6:eb:e7:9d:48:ff:49:37:f8:d0:62:55:53:b5:05:
2a:be:78:c6:98:76:df:c4:e2:83:d9:50:69:a7:20:
88:17:dc:29:eb:0d:76:a9:f8:a2:22:5c:62:b7:d3:
fe:a8:86:54:73:3d:35:f6:b0:91:92:cd:c5:55:91:
5b:20:f1:03:17:48:8d:37:7c:39:21:19:93:8d:53:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:A3:75:68:58:4A:C0:B5:64:B8:ED:2F:1A:BB:2A:9F:B9:CC:3A
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:5e:1e:28:d7:94:ad:52:b0:63:2a:bc:dd:2e:11:73:0a:
44:f0:7f:7f:64:24:9e:cd:b9:92:a0:bf:d8:cd:8b:3f:e1:60:
59:bc:f1:10:8b:c7:79:96:23:27:70:fd:4c:f8:ee:5a:b4:3c:
32:dd:fa:f3:3e:f6:62:b9:6a:ea:c1:c3:c8:2b:29:07:c5:c1:
bc:12:25:6e:d9:de:e3:bd:40:e5:b5:97:22:e8:8e:bc:b3:de:
f8:5f:c0:f1:c3:ad:1d:3b:00:c5:8e:9b:f5:e8:f8:c4:7b:c0:
b8:c7:4e:d4:be:72:e6:d2:df:6b:6c:19:ed:51:e2:af:a8:c9:
a9:fd:eb:f3:32:14:fe:3a:59:80:0f:56:73:b2:80:b9:6a:ef:
38:11:50:4c:3f:51:2b:2d:18:f7:ff:d0:b3:bf:88:fe:b6:94:
c7:85:b6:ab:86:f0:bc:89:58:78:65:f7:1d:63:31:e2:a9:2d:
67:be:8c:11:45:62:5f:6e:0f:83:72:b5:eb:29:41:73:9c:cc:
e7:9b:96:68:7d:e4:4a:fb:dc:0f:4e:3a:68:1d:05:54:01:ac:
bc:28:f6:af:f1:a0:69:1c:b3:78:9e:ce:a1:0e:c0:01:28:6c:
29:09:aa:5e:9f:81:bf:c5:24:d1:72:eb:da:bb:50:f1:4f:78:
23:33:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:38 2025 by rpki-client