Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: i3B1JbLjT+c4BdBLkMBOAxOKaJUivjWEcWvsWB7gUcc=
Subject key identifier: B0:D8:C0:1F:E8:53:5C:4F:9A:B7:C2:FE:6F:1A:28:36:A5:1E:AA:D1
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0195116BF6C330CF49641E2D15C7CBC04F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 1217
Signing time: Mon 17 Feb 2025 01:00:42 +0000
Manifest this update: Mon 17 Feb 2025 01:00:42 +0000
Manifest next update: Tue 18 Feb 2025 01:00:42 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: zPo9AgCPzIjxvzvSgrG4WFllBKkUzNpkVDJjFF8PnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f6:c3:30:cf:49:64:1e:2d:15:c7:cb:c0:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Feb 17 01:00:42 2025 GMT
Not After : Feb 18 01:00:42 2025 GMT
Subject: CN=b0d8c01fe8535c4f9ab7c2fe6f1a2836a51eaad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:16:80:36:1a:08:de:c9:80:77:0a:0d:a7:
3e:a2:97:ac:ef:9d:19:3c:b1:78:12:7d:f6:da:e8:
58:d8:83:1c:96:7f:22:4b:49:85:71:b8:98:f5:58:
a5:9b:4d:31:8c:37:55:58:b8:96:0b:19:d9:76:1c:
3c:47:46:aa:13:30:03:d6:51:7e:7e:6a:c8:f5:51:
71:45:a7:c7:cc:f0:89:2d:0d:8a:2a:61:83:6b:1a:
88:cb:6e:dc:18:4f:39:63:c6:e7:85:55:9a:b7:ab:
c0:08:2d:26:6c:82:01:b8:74:57:f3:10:cc:1b:c0:
0e:5b:dc:e4:32:f0:4c:d7:ac:0a:21:5b:21:cc:8f:
9e:ab:86:7a:ea:9f:83:7d:85:6b:4f:18:7e:ff:6f:
9c:52:75:c8:fe:86:d1:ee:09:02:70:05:dc:fe:ea:
38:33:e8:af:a9:8d:18:fb:a4:fd:79:39:a2:53:4c:
d2:3d:9c:56:fb:49:27:a9:11:ae:da:51:9e:7d:4f:
56:7b:a2:b2:d3:69:d7:cb:35:dd:91:90:a3:4f:ac:
34:ae:e4:cd:1e:79:de:f4:1b:48:38:e7:7d:a6:41:
73:36:f0:9c:e1:cb:93:42:ba:d0:c7:47:bf:42:26:
cf:9e:ec:c2:47:63:16:06:6f:a1:e0:6b:6e:d6:a7:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:C0:1F:E8:53:5C:4F:9A:B7:C2:FE:6F:1A:28:36:A5:1E:AA:D1
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:51:b4:10:ae:c1:b6:e2:15:55:87:bc:f6:16:21:3d:72:55:
ef:03:2d:3c:0c:1b:50:26:8a:47:ba:ba:b6:30:34:2c:ea:67:
00:63:17:1c:60:17:b6:c4:56:8d:48:0d:5c:cd:3a:da:c2:27:
38:dd:5f:69:c0:d3:85:6e:7d:e2:74:8b:62:53:12:31:1d:4b:
9b:5e:59:1b:c9:55:5e:51:b3:4d:e5:57:13:5c:66:fe:82:36:
f6:af:c8:68:d5:5f:64:b2:63:b3:7c:df:1b:af:e6:7e:0d:64:
32:c3:67:66:e5:53:a4:2c:57:60:29:3a:c2:df:01:12:3a:93:
f6:52:4b:ea:7b:7f:e6:8d:fc:ca:8c:e6:73:09:70:76:f3:cd:
d3:57:74:f4:75:7e:d7:41:a0:c1:87:17:a2:5a:f3:e7:1e:ca:
62:e7:2f:08:d9:81:ce:18:00:2f:af:a4:04:e4:8b:99:bf:46:
15:3e:e3:ca:a6:fb:42:ca:d1:f2:37:ac:17:e8:e7:d2:32:43:
1d:e0:c7:97:78:d4:36:1d:a8:8a:5d:e8:2c:66:9d:86:8f:5b:
5b:88:bf:a4:a8:37:70:16:42:12:72:93:46:78:56:50:81:af:
15:7f:5c:89:d3:90:58:a3:82:23:cf:b8:00:06:9a:be:0a:1f:
1e:7d:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:09 2025 by rpki-client