Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: CSc5AexKFKm+jwERH50Al4fviMnXSRm97+Zc1Mr3W7g=
Subject key identifier: B5:38:31:DA:67:91:70:65:62:91:92:4E:E2:A8:48:AE:BA:E4:6A:A8
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019510C789F38143A0F3B669D073A760D4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0DB2
Signing time: Sun 16 Feb 2025 22:01:07 +0000
Manifest this update: Sun 16 Feb 2025 22:01:07 +0000
Manifest next update: Mon 17 Feb 2025 22:01:07 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: ekD7mP/c2qYPZ87iwF6GngKwZaiR9/jIpPNCCdyFk3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:89:f3:81:43:a0:f3:b6:69:d0:73:a7:60:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Feb 16 22:01:07 2025 GMT
Not After : Feb 17 22:01:07 2025 GMT
Subject: CN=b53831da679170656291924ee2a848aebae46aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:d2:8e:f5:b2:02:6d:5c:e5:4c:01:74:ee:
e3:2d:1b:d3:80:80:a6:ce:c8:7e:77:ee:c1:8a:3a:
a5:0c:44:cc:25:10:cc:08:5f:4a:67:35:b0:46:99:
9e:5a:95:44:42:ff:9a:34:4e:46:69:dd:b8:02:dd:
d8:22:5c:50:12:a7:3f:73:11:10:14:28:f6:43:0c:
7b:7c:21:4b:77:ad:2d:4b:71:33:ce:4b:29:25:a8:
e9:10:af:ed:a0:b5:b7:e7:1e:5b:c0:79:12:87:d8:
59:34:29:0d:31:2e:b5:5d:4d:ef:4c:01:e5:8d:c8:
3c:89:66:7c:38:dc:38:26:a8:21:3f:25:13:0c:7c:
c8:25:86:55:22:de:3d:8b:9a:f0:c9:b6:94:34:49:
e4:8c:b6:9b:cf:d0:36:93:7e:a3:f6:d5:fd:bd:c3:
34:19:a9:f7:37:21:e1:03:1f:6e:78:3c:90:f4:1d:
3f:7f:95:ec:52:70:36:65:19:ca:1b:96:c2:4a:13:
ed:86:ef:e1:07:c5:dd:0c:be:03:58:52:67:ad:8c:
e3:9b:14:f0:23:44:4b:04:20:c5:71:a9:38:5c:ac:
81:33:6b:2e:59:64:7f:09:11:c5:89:7d:94:d6:53:
2e:4b:1c:7a:b3:46:6e:fa:5d:f7:27:94:10:dd:02:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:31:DA:67:91:70:65:62:91:92:4E:E2:A8:48:AE:BA:E4:6A:A8
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a7:a3:a9:05:be:45:a1:ad:69:d7:e3:3a:0b:4e:04:74:ed:
5d:99:72:7e:a0:68:c8:eb:fd:07:5a:93:1c:43:94:27:df:11:
fd:06:78:57:db:2b:a5:de:a9:e2:15:43:a4:6c:a4:bc:af:d0:
49:26:5e:f3:26:48:79:6f:49:f7:f9:61:7c:6c:c3:ba:06:10:
ba:61:d8:ff:55:f9:26:46:4d:80:15:3e:2f:fd:70:aa:49:96:
ae:4e:33:d5:ad:a2:89:b5:16:ba:5d:91:07:e6:5b:a0:f9:6a:
e0:2c:76:8a:a0:6f:e3:f0:e0:3f:48:a2:50:b0:de:da:9b:c4:
9a:90:b5:e6:a5:8e:8b:c2:cb:ef:9d:2b:b3:85:ce:95:f1:3f:
7b:cb:5a:04:38:9f:09:92:0b:49:79:f5:55:eb:be:03:b7:57:
a4:5f:4d:5c:a1:9e:f6:0e:0e:3a:a6:b6:0a:63:77:bf:c8:ce:
1e:a3:d8:12:aa:8f:5c:69:c3:0e:b9:58:8b:38:fd:31:88:ec:
42:93:62:e6:a3:7b:c1:fb:93:09:05:64:d3:de:dd:f2:01:30:
d9:82:23:a4:47:b9:c1:e0:03:d0:89:37:ff:ea:34:60:c0:0e:
c5:57:fc:ac:88:70:db:d1:a7:9b:7e:93:1c:9a:b9:b4:38:76:
fe:74:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:39 2025 by rpki-client