Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
File: 1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft (raw, json)
Hash identifier: ack50ZljN81Hlfusxoeghwg4RVp0GmygDlxHS64w02I=
Subject key identifier: B6:2B:30:5F:AD:1C:E0:B9:B8:81:76:DA:0D:94:4F:2E:C2:5E:F6:68
Authority key identifier: FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
Certificate issuer: /CN=fbbbb7638c0741a343a3779cdb709a04aab41554
Certificate serial: 01951247A1326CCFF5ED7D1791FC399D8969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
Manifest number: 0368
Signing time: Mon 17 Feb 2025 05:00:39 +0000
Manifest this update: Mon 17 Feb 2025 05:00:39 +0000
Manifest next update: Tue 18 Feb 2025 05:00:39 +0000
Files and hashes: 1: 1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.crl (hash: wV1Ju/ExNq9CjZGJWx8kfyO5bjKS6Wx5Fvhc/k1zOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:a1:32:6c:cf:f5:ed:7d:17:91:fc:39:9d:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbbb7638c0741a343a3779cdb709a04aab41554
Validity
Not Before: Feb 17 05:00:39 2025 GMT
Not After : Feb 18 05:00:39 2025 GMT
Subject: CN=b62b305fad1ce0b9b88176da0d944f2ec25ef668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:61:c1:f5:a5:a0:d5:5e:c4:c4:11:56:ce:
1e:45:3f:c2:81:1c:e0:64:65:cc:ad:3c:44:74:e3:
31:cb:ad:6a:69:35:c8:42:ca:9e:0d:b9:ea:ff:e4:
e6:5c:81:15:e5:ad:92:3f:2e:50:62:a0:0c:e9:12:
d9:c6:72:79:8a:59:52:55:44:8a:22:54:2a:b3:0a:
9b:21:7c:f1:4a:3a:6c:2e:5f:fa:3b:e5:24:36:5b:
ff:8c:1f:52:15:89:2d:10:42:fe:58:3a:23:42:0b:
35:b0:6f:fb:d4:19:7a:00:8e:39:32:5b:3a:c6:1d:
18:a6:67:c9:ab:be:e2:f0:d5:20:32:b0:c9:e6:de:
78:27:a1:90:71:da:39:3f:13:e3:49:ff:ff:c8:6a:
2d:a8:51:77:b0:30:76:e3:87:78:2e:15:4f:9a:56:
b6:87:69:70:4b:12:a3:3d:af:5a:e7:43:5f:2f:c2:
1d:84:33:49:6a:b7:ca:9c:ae:62:f8:33:19:50:64:
8d:c8:24:f0:5b:fc:b2:92:08:92:ae:8d:c8:f2:2e:
a0:8e:57:9a:01:18:bc:4e:16:69:e0:0c:38:32:b0:
e9:e7:39:21:d8:f1:4e:db:9f:47:dc:66:b9:cb:f9:
cb:41:a5:85:9f:48:bc:67:25:30:dd:57:e7:7a:1c:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:30:5F:AD:1C:E0:B9:B8:81:76:DA:0D:94:4F:2E:C2:5E:F6:68
X509v3 Authority Key Identifier:
keyid:FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:41:6f:50:34:83:d7:ef:83:1f:f5:b1:0f:d0:bb:b7:73:
f6:68:ba:6d:af:6f:7a:02:88:8d:08:c3:a1:d6:23:77:42:9a:
96:1e:5b:94:d3:e4:ae:8b:a7:65:79:0a:ba:ec:19:72:17:5c:
ff:ea:4a:ca:1d:0e:a6:e3:46:34:c6:0a:52:58:cd:fd:a6:5e:
e4:db:ea:61:07:00:bc:8f:d6:83:3e:33:e3:8a:4c:a2:75:ca:
40:2b:8b:19:1a:90:d4:0a:ba:67:1c:04:6d:b9:d6:12:1e:01:
15:6e:7a:af:2c:7d:be:b3:d9:86:08:e6:5e:b0:82:91:4f:60:
49:4c:83:af:ef:c6:55:22:71:55:67:2d:10:64:2a:e3:33:a7:
26:95:22:c0:65:e1:bf:75:39:5d:5d:60:bc:f5:e8:ed:cb:4b:
45:62:d5:da:63:c3:f5:88:a5:05:a9:94:f4:d9:5e:50:2f:9a:
92:d2:19:79:70:ed:a2:2f:17:73:5c:6f:c5:69:e4:3a:03:53:
31:9c:df:02:3b:7a:d9:fe:d2:8a:6d:f5:bc:34:3f:df:7b:df:
cc:f9:11:1c:5f:3b:13:87:05:ac:1c:a5:06:f6:0d:74:97:64:
65:89:9e:0d:1a:b9:30:20:71:6e:44:7d:5e:a6:9c:27:9d:37:
8e:9c:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:19 2025 by rpki-client