Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: 2sqdPMF2WDJx+PNkfOLR7i1ojxhwxBGSUb0r5tPuZPE=
Subject key identifier: 35:CA:44:8B:FB:CC:E1:7A:C9:09:B0:36:6E:52:18:E1:72:3D:39:0E
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019510C76B105E6210C2A9FAE2C9E2AE16E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 101A
Signing time: Sun 16 Feb 2025 22:00:59 +0000
Manifest this update: Sun 16 Feb 2025 22:00:59 +0000
Manifest next update: Mon 17 Feb 2025 22:00:59 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: 0jYqimvO1gPPQpSqAKy0/LTguu9Ge9cH35bTXPA/f84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:6b:10:5e:62:10:c2:a9:fa:e2:c9:e2:ae:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Feb 16 22:00:59 2025 GMT
Not After : Feb 17 22:00:59 2025 GMT
Subject: CN=35ca448bfbcce17ac909b0366e5218e1723d390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:4a:3f:fe:e7:53:3a:86:5e:42:7f:49:4d:
e2:b1:fd:2b:a2:c5:f9:e5:a6:99:84:f1:3d:d9:49:
2e:bd:5f:ed:8d:86:a3:89:c3:5b:0d:22:5b:e3:2b:
2d:cc:09:10:75:f6:45:a2:b8:77:b6:44:4b:8d:9c:
1d:56:17:db:e5:e9:25:e2:17:60:0a:1a:93:f7:1d:
e0:83:9e:bc:ef:1e:a8:50:df:e5:ae:e2:8b:f5:9a:
32:f4:67:26:81:09:5a:4e:42:7f:dd:f7:3f:97:d1:
2a:c2:37:8b:00:16:df:b1:09:04:15:bd:e4:97:3e:
23:77:9c:37:19:05:57:b7:bc:62:ce:47:4d:22:25:
8b:84:8a:72:cf:8f:aa:0e:9d:2f:40:49:2c:99:17:
9f:0f:52:a9:6f:a0:da:94:d6:71:bf:b9:15:34:a0:
87:97:20:b9:bb:ae:55:14:39:6e:fd:ce:2e:ba:0a:
08:fc:09:40:ed:8d:94:38:bb:56:c3:89:62:06:1d:
3d:72:8f:81:b5:80:f0:bb:61:fb:e9:0e:30:2b:6c:
9a:c7:4b:1a:40:e3:1a:35:38:69:22:7e:b0:fc:cd:
39:be:ab:21:35:a9:e2:3e:66:b4:df:15:01:9c:ad:
0d:af:a4:36:bb:4b:4c:38:85:23:95:39:5e:9b:6e:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:44:8B:FB:CC:E1:7A:C9:09:B0:36:6E:52:18:E1:72:3D:39:0E
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:d9:0f:75:a5:3f:59:39:67:db:e8:9b:32:99:ae:ed:fc:
12:6e:7a:5e:ca:b4:77:30:13:65:ce:9b:f6:f8:78:2a:bf:b8:
87:38:53:66:b9:cf:9d:f0:78:25:71:a6:47:69:e8:ae:00:e4:
aa:81:fe:83:fb:33:78:58:4b:48:42:48:31:73:1e:73:5e:91:
c1:61:af:52:b8:5f:36:a6:32:01:e5:8c:fa:ab:45:7f:74:8b:
f3:15:47:6a:2a:05:f8:20:73:25:65:c6:de:69:7e:17:68:0a:
4e:4a:9e:02:7b:f0:dd:5d:03:ba:af:9b:98:0f:df:dd:b2:b2:
0d:e5:55:e5:14:22:ff:60:a5:7e:99:04:be:82:41:24:7c:fc:
62:c7:f8:b5:9c:e5:d3:9a:18:7a:ef:42:f7:74:f4:15:52:21:
63:ee:d0:b6:aa:08:ea:5f:00:6c:4b:80:e0:e5:fc:36:72:21:
85:45:a3:3d:70:17:5c:12:55:6c:44:28:6e:3e:ed:8d:d9:3d:
8a:90:05:f7:df:07:37:93:26:22:5e:ca:f0:92:1f:07:92:e3:
9b:d6:9b:40:5b:32:f8:48:fc:ca:a6:06:5d:ab:17:56:b2:8a:
58:7d:98:7a:97:8d:66:83:7b:b8:8f:dd:47:94:36:ae:0b:58:
89:71:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:15 2025 by rpki-client