Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: RmwUIfZ2C4D8w/JEFmA77JCeP8U/zu65KFkHVzT8GFk=
Subject key identifier: 34:03:E0:97:8D:76:D5:0B:07:89:A1:61:7A:CE:5C:A0:86:E7:49:32
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 01951210D0A0CF4FEAFC7771088C3F2043FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 03FB
Signing time: Mon 17 Feb 2025 04:00:46 +0000
Manifest this update: Mon 17 Feb 2025 04:00:46 +0000
Manifest next update: Tue 18 Feb 2025 04:00:46 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: DuAJ8BaahCzpYKrZokiVPr9AzfpxTFHTYAOYlaGMNV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d0:a0:cf:4f:ea:fc:77:71:08:8c:3f:20:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Feb 17 04:00:46 2025 GMT
Not After : Feb 18 04:00:46 2025 GMT
Subject: CN=3403e0978d76d50b0789a1617ace5ca086e74932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:ee:65:30:7d:df:2a:dc:12:e5:06:2f:45:
4b:ef:74:9b:72:bb:e2:75:95:d7:c2:a0:eb:e5:1e:
da:2c:ec:cd:ff:8c:41:82:78:df:04:cc:19:3a:10:
92:de:91:b5:3d:60:66:f8:a5:76:4f:1a:34:27:c0:
87:20:e9:46:da:1f:ed:8e:1a:b1:27:6b:a5:c5:5f:
54:47:ad:54:35:9b:c0:e8:ce:45:eb:28:ea:7c:2e:
ab:2c:63:e4:3f:2e:73:64:d3:45:e5:07:b3:81:36:
ef:81:c2:ed:69:20:e8:9c:f0:68:c6:87:30:c7:9e:
29:aa:b2:87:a0:5a:46:05:a8:41:ab:34:d6:b3:b0:
9e:b3:d8:34:69:a7:76:d4:8d:21:16:ba:76:62:47:
79:0b:36:16:3b:8f:c1:82:e2:7c:49:74:5d:23:3f:
39:b0:dd:37:3b:0c:4c:15:20:d5:31:76:c8:46:bc:
61:2b:38:cd:5b:42:ac:5d:0b:db:ac:4c:11:ed:56:
9d:e6:f4:a7:13:86:81:5f:de:1a:91:38:7e:e8:ff:
8e:1c:fe:02:77:d7:3f:f0:73:00:7d:58:9d:59:91:
b5:32:d8:be:10:4a:e9:13:40:bc:70:08:56:03:c4:
b7:35:a4:03:3d:c1:39:40:a8:e6:87:7c:7d:41:27:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:E0:97:8D:76:D5:0B:07:89:A1:61:7A:CE:5C:A0:86:E7:49:32
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:47:0e:86:59:0e:6a:24:fc:c3:ae:89:a6:6a:aa:51:86:
e3:2b:14:4f:f9:64:54:30:cf:c1:7d:39:e9:ca:2b:e4:d8:69:
7d:bb:5b:03:9d:b8:55:3e:09:2a:4a:a2:02:70:f0:d8:b6:9b:
26:e1:18:33:b3:5c:5a:29:98:bb:bc:dd:db:0d:06:01:cd:ee:
83:3d:99:e1:91:e4:58:29:ee:29:c7:c9:0e:54:23:c9:d5:fc:
b5:ef:14:8a:2b:eb:45:89:30:75:0c:2e:92:7e:1d:1b:04:56:
9a:e2:8d:47:a9:75:1a:fe:f2:a5:da:bd:6e:68:9d:99:4f:a8:
fe:4e:e2:9b:2d:73:02:01:5f:5d:80:a2:c6:07:d0:95:84:da:
cd:40:13:db:8c:34:76:fe:92:83:32:b9:f1:68:85:0c:8b:0a:
91:6f:8b:a6:12:37:12:d0:1b:45:0c:77:0c:1e:0f:d1:4a:5f:
70:3e:7a:5f:e9:75:68:e9:40:52:96:f3:b6:4d:ad:50:f8:c6:
1a:11:71:0b:58:19:9e:a3:ae:2d:aa:16:5b:02:80:46:d0:1c:
86:41:60:4f:45:89:07:96:e3:49:76:08:f9:79:1d:e6:27:32:
8d:4b:1b:99:fd:bc:00:e1:2a:27:6a:b1:14:2f:ef:8c:4b:84:
64:4d:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:05 2025 by rpki-client