Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: 83boff69UPnOzMAajonuAFHXDDMiuYhavCzPM/A+3Qk=
Subject key identifier: 36:1D:26:9B:1B:48:3B:12:0C:E0:5C:3B:BF:6D:2A:93:0F:68:85:DA
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019511D938C68BC80A2F1E24570F6DA24C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 056E
Signing time: Mon 17 Feb 2025 03:00:03 +0000
Manifest this update: Mon 17 Feb 2025 03:00:03 +0000
Manifest next update: Tue 18 Feb 2025 03:00:03 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: B8+wj6y3JUhgYBECVrrKueRPOu16gOnwEXAoMe9BRSA=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:38:c6:8b:c8:0a:2f:1e:24:57:0f:6d:a2:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Feb 17 03:00:03 2025 GMT
Not After : Feb 18 03:00:03 2025 GMT
Subject: CN=361d269b1b483b120ce05c3bbf6d2a930f6885da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ff:12:5a:a1:f2:f6:40:33:52:e7:38:e8:90:
bb:7c:c5:3b:0e:d4:c8:da:6f:ee:34:12:c9:70:d4:
1c:dc:04:e7:13:a2:05:2f:af:10:da:77:25:cb:97:
eb:3c:2a:60:42:75:af:46:81:02:12:4c:c9:e5:93:
07:04:99:b0:76:b1:13:fd:a3:48:a0:15:26:87:6e:
78:4a:af:56:96:97:92:db:06:c8:58:84:84:0c:da:
6a:f7:a2:6a:b3:c3:16:70:0f:fc:14:bc:2d:09:9d:
81:0c:21:79:83:86:a5:b9:e1:41:fc:f6:ac:6f:20:
11:f7:e8:9a:e2:e9:3f:3d:e9:e4:d2:e0:0a:18:ba:
d6:72:2e:ca:4f:43:b2:f2:fd:8a:ae:c6:ef:5a:5f:
3d:86:7c:d8:04:f8:e7:8d:ef:4d:90:1e:19:2c:a0:
26:85:23:4e:80:29:94:bb:7b:fb:e4:00:84:e2:51:
75:3f:3a:a0:db:d6:a3:3a:14:df:8d:44:b2:2a:20:
e9:23:97:68:ee:33:43:d3:4b:12:67:e9:e8:cf:15:
5a:d8:a5:e1:b8:c1:c9:88:c1:d6:ce:86:eb:e3:18:
d3:3c:e9:49:7e:06:33:8a:9e:07:85:43:3a:42:b8:
52:e9:2b:a4:f8:4c:67:4b:d6:d2:af:c5:7f:98:85:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:26:9B:1B:48:3B:12:0C:E0:5C:3B:BF:6D:2A:93:0F:68:85:DA
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:a7:e4:eb:a7:9b:44:7b:cd:0b:d6:52:12:78:17:4c:e9:
d9:78:d4:fe:18:2c:97:47:2b:fc:0a:a0:b3:0a:55:0c:f6:38:
d9:9d:dc:55:45:db:26:96:49:15:9e:ee:d1:84:f4:0b:9e:0b:
09:cd:1e:e6:6b:f3:8d:e8:8c:f7:77:0a:2d:74:db:e1:f8:1b:
b5:c2:14:ad:22:cb:21:b4:fa:a2:b1:ec:ac:ec:14:da:31:2d:
a6:6c:63:64:52:81:64:51:bc:60:70:5f:e0:eb:49:ba:a5:40:
ee:59:80:10:e1:16:f6:b4:ab:8a:03:34:a4:12:e5:91:7f:6b:
a1:52:8a:7f:36:fb:b5:dd:cf:25:af:a1:ce:49:91:23:3a:b2:
58:f9:9c:73:18:9c:98:ed:b0:1d:81:22:4a:fc:04:24:6e:86:
26:d8:e9:3f:43:8a:d2:c4:9d:88:82:ac:18:27:40:6c:ad:84:
0d:ef:80:f0:39:3e:fb:a2:91:04:52:b4:6b:cc:70:58:ba:35:
43:1d:53:c8:02:b5:f7:b2:02:73:fd:21:07:94:e4:20:d2:55:
8f:8c:ed:3c:98:0e:37:18:2f:ba:f0:d2:ba:01:ed:12:96:1b:
bd:95:7e:8c:d9:2e:b5:7d:05:e7:0a:24:02:89:75:91:59:e0:
ed:56:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:41 2025 by rpki-client