Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: bGUwUYnysEqbqKSol9cKV0SnVj7H6gxbXk82r5IoB0k=
Subject key identifier: 52:7F:1D:B2:B7:D3:3A:C6:63:E3:2B:58:C2:D9:31:3A:A9:A6:46:30
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 0195116B9CDF956295CF613356252CB505D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 07C1
Signing time: Mon 17 Feb 2025 01:00:20 +0000
Manifest this update: Mon 17 Feb 2025 01:00:20 +0000
Manifest next update: Tue 18 Feb 2025 01:00:20 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: 0tIctOdzeJLU7dN6DtVlZdJApRuj6hajLqTItnnNFFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:9c:df:95:62:95:cf:61:33:56:25:2c:b5:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Feb 17 01:00:20 2025 GMT
Not After : Feb 18 01:00:20 2025 GMT
Subject: CN=527f1db2b7d33ac663e32b58c2d9313aa9a64630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:34:6c:72:88:09:d2:d2:80:2f:44:5f:f7:
2a:81:d7:20:ea:74:6b:0d:82:49:78:76:f6:d0:d1:
e7:d3:36:15:f5:75:a0:59:d2:ea:04:6d:65:02:6f:
50:c7:c6:79:45:0d:41:22:80:1a:1c:3d:b3:da:48:
cf:7b:72:46:4b:ba:af:bd:63:73:b9:db:19:68:22:
5e:a1:f3:96:c6:e3:87:53:89:8c:10:f6:eb:6f:e1:
ed:44:4d:8a:e5:80:f4:8f:cb:f1:33:80:e2:46:23:
5c:c0:d2:eb:ef:6f:7b:fa:a5:1a:fe:98:2b:06:05:
26:86:56:90:fc:c7:e3:11:f0:6c:6c:36:97:1f:4c:
d0:a2:40:3e:de:d5:55:29:13:c8:ea:db:df:58:97:
47:e0:28:a1:95:d3:1c:44:9c:e4:ba:8c:50:c3:55:
6d:af:5f:da:1b:48:e7:bd:3a:22:df:5f:dc:cf:cf:
42:9c:f5:52:6a:ba:f6:86:28:b1:64:96:e1:3c:5b:
0e:cd:ac:bb:53:30:4e:9c:f0:b5:85:dd:db:0a:f6:
de:0d:db:38:45:b0:f6:ad:3c:e1:99:93:2a:ac:33:
d8:e4:66:89:b0:2a:51:cd:f4:90:e5:13:7c:c0:c2:
9d:a6:12:06:d2:f2:c8:ce:bd:ec:3f:5c:fc:31:48:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:1D:B2:B7:D3:3A:C6:63:E3:2B:58:C2:D9:31:3A:A9:A6:46:30
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e1:5e:7d:2f:bd:36:21:39:e7:55:b9:6d:2e:7b:5c:f1:ca:
97:b6:aa:75:4c:e3:d3:29:13:31:12:a9:d6:9a:2b:07:c7:b3:
f0:01:d4:c0:96:ca:59:fb:28:cb:b6:12:f3:15:b9:33:47:6b:
33:25:fa:57:9b:b5:98:15:2a:87:18:15:bd:6e:da:95:f7:f1:
bb:f8:49:36:14:14:43:93:27:cf:be:1c:f6:6e:26:b5:07:24:
a1:4a:09:ca:2b:cf:92:4a:c2:11:82:82:de:cb:b7:bd:e2:26:
76:80:8f:0e:c6:75:69:cb:14:4c:21:51:bd:2d:24:7f:0a:9d:
01:04:c4:16:60:17:85:a5:a6:09:e9:b2:c6:70:89:c2:45:ec:
8f:1e:26:6c:58:68:92:df:a8:e7:1d:ce:25:cc:de:a6:3c:13:
0a:74:37:88:fe:52:9d:e1:78:73:81:77:05:b6:f5:cc:16:cf:
de:ea:fb:c2:51:bd:7b:b8:a6:c3:71:f8:7d:3a:d4:30:44:3a:
7f:b7:4c:30:c0:57:33:29:59:d3:30:a7:28:28:28:8e:38:30:
e7:58:dd:b5:1c:8c:30:6f:1b:3b:c2:7b:0c:a2:42:93:95:ac:
e4:fb:ed:a3:61:59:8f:59:e0:0b:98:aa:f7:f8:6e:da:8c:b7:
16:1f:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:29 2025 by rpki-client