Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: kN90cPqzOR/KF4iI+coSNruphyz54KwoKY7PiJq6krg=
Subject key identifier: F6:06:3F:34:00:8E:E6:DA:C5:21:C0:11:86:AA:AF:3B:08:21:D3:9E
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 019511350B0E4D1B110E213D7E3F0E60DB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0540
Signing time: Mon 17 Feb 2025 00:00:43 +0000
Manifest this update: Mon 17 Feb 2025 00:00:43 +0000
Manifest next update: Tue 18 Feb 2025 00:00:43 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: WlKO84BQawr8fGhCI+5uoIT2m2gRek+y4UrWeINibqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:0b:0e:4d:1b:11:0e:21:3d:7e:3f:0e:60:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Feb 17 00:00:43 2025 GMT
Not After : Feb 18 00:00:43 2025 GMT
Subject: CN=f6063f34008ee6dac521c01186aaaf3b0821d39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:95:20:45:f2:c9:87:a1:f2:4a:a5:6f:42:
04:44:75:a0:0a:40:26:4f:11:f1:ed:39:95:c2:7f:
a3:38:87:48:f2:24:7b:53:39:fa:ac:0b:69:5d:7f:
69:b7:89:73:e6:ee:f4:cf:bc:9e:41:0f:67:5e:7d:
75:78:63:f9:17:62:56:91:95:42:7f:62:09:91:34:
7c:d7:39:2d:92:d3:53:4b:78:6f:35:23:f6:a9:c0:
b2:e6:4a:fb:a0:d9:48:de:89:5e:0c:d5:55:33:54:
47:be:70:6f:a1:a7:c5:3d:56:b4:54:06:74:a5:e6:
98:65:25:58:dc:52:d1:4b:44:49:1a:79:87:dd:0e:
a6:ad:43:8a:f5:81:6f:8e:bb:b8:35:85:0c:ce:0d:
90:f9:ab:89:95:a2:a8:70:5e:40:a5:06:35:72:92:
81:e6:fb:60:19:c9:c4:52:47:84:37:92:de:33:4f:
6f:80:32:66:e0:65:b9:fd:77:51:10:34:5f:ae:73:
04:b9:bc:66:d2:b0:d4:cf:8b:ae:7a:2f:79:c0:a7:
95:d0:00:12:b4:0d:80:b9:c5:2a:07:66:2f:b0:eb:
69:19:3e:ab:39:1d:ac:e7:f6:e7:4c:80:a9:44:dc:
bc:62:bf:fa:2e:68:3d:ec:77:29:58:93:16:26:63:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:3F:34:00:8E:E6:DA:C5:21:C0:11:86:AA:AF:3B:08:21:D3:9E
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7f:c3:10:96:2b:19:e9:23:40:d3:9b:b5:28:75:b6:11:bf:
91:b3:38:5b:72:e2:1b:4a:55:1a:a1:3e:f9:9e:bd:9b:25:d9:
76:64:eb:d3:eb:81:65:05:f0:7d:b7:35:e3:a2:03:3e:34:48:
62:eb:04:87:70:98:a8:3a:b1:02:c4:5e:59:33:7b:76:f3:75:
2b:e8:00:2f:a5:ae:06:e0:fc:51:56:4a:ee:86:45:64:8a:3c:
d2:98:a4:ab:a3:f4:b0:d4:c5:50:60:07:fb:4a:20:e9:76:6d:
dc:03:55:db:89:ce:be:c3:da:7d:3b:ec:d2:b0:d5:67:e1:4a:
b7:3c:8f:79:ad:c7:9c:17:e6:91:71:db:fb:25:02:a1:f4:97:
56:24:1c:54:03:6e:16:73:02:4d:dc:97:27:16:2c:06:1a:f7:
24:c4:59:17:3b:27:13:e9:3e:23:e6:62:6a:c1:c8:7b:dc:fc:
d2:93:ac:07:55:ca:cd:4a:cd:87:53:d4:1a:1c:8d:99:8d:00:
78:a9:80:fd:33:ec:23:59:e0:09:0d:ff:fe:88:70:bd:12:35:
23:af:32:c0:b9:4c:6e:dd:4c:2f:85:79:ff:27:91:fc:2b:6a:
76:d9:61:07:8f:f2:f6:13:46:3c:b0:77:5e:fd:95:5b:2b:7c:
b0:5e:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:13 2025 by rpki-client