Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: u+w6OJ7Kt6SOlJ7lXPFFQB7Mgn2/fXsBtWZNQzPJEMg=
Subject key identifier: E0:AF:73:87:3C:B7:E5:42:0F:6F:9E:EF:DE:62:8C:74:48:E6:76:AE
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 0194C3886E3D807768F55420389443B28063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:01:25 +0000
Manifest this update: Sat 01 Feb 2025 22:01:25 +0000
Manifest next update: Sun 02 Feb 2025 22:01:25 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: Z4qfGTwfQ1vGpy1wMQpdLt1acVqyhHoviX4zi6ThOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:6e:3d:80:77:68:f5:54:20:38:94:43:b2:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Feb 1 22:01:25 2025 GMT
Not After : Feb 2 22:01:25 2025 GMT
Subject: CN=e0af73873cb7e5420f6f9eefde628c7448e676ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:30:d9:64:e5:7c:54:a5:ff:de:ec:66:b3:
ec:35:c0:af:7e:e4:fc:93:28:4e:bd:e0:af:84:31:
6c:09:0a:bd:13:68:a2:53:6c:c3:ea:09:f3:cb:eb:
ec:df:65:ed:8a:48:89:df:7e:45:b6:5b:00:6a:2b:
fd:e2:57:7b:df:35:e5:14:0f:0c:72:2f:9f:83:76:
4d:7d:0d:b7:1d:40:02:19:45:27:65:c6:a9:04:64:
3f:fa:f2:e4:34:bf:4f:95:f9:96:01:48:af:48:20:
9c:09:8e:54:ed:bb:05:d3:3a:74:fc:7c:5f:6f:59:
ae:5f:de:14:09:87:72:fa:a7:ec:15:fd:54:8a:09:
62:e2:83:b0:23:eb:02:8a:7f:08:db:02:46:89:4a:
da:a9:6f:09:a5:50:a5:4b:ab:54:68:c9:6e:e9:50:
e6:03:6e:77:28:68:36:ef:28:2b:90:36:b4:f6:39:
30:6d:09:74:28:4f:25:66:2c:47:c1:0b:e8:30:4d:
c5:0c:d0:54:89:9b:7f:c0:ba:6d:aa:25:3a:fa:ae:
1a:15:14:a3:37:f7:31:e0:71:64:76:4b:26:2a:81:
dc:3a:2e:73:63:75:d7:fb:5a:19:1b:0c:57:41:1d:
82:7f:8e:bc:74:f3:be:ee:3d:04:96:60:ad:d3:03:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:73:87:3C:B7:E5:42:0F:6F:9E:EF:DE:62:8C:74:48:E6:76:AE
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c7:58:6b:83:67:3b:06:46:b9:fb:99:66:78:cd:f2:7d:0c:
cc:23:88:a5:e1:c9:b7:1f:e2:93:76:69:47:1e:9c:50:35:6a:
03:b9:50:f2:11:b1:19:4e:05:03:13:1c:5e:da:2c:88:4b:19:
d8:99:6a:50:86:16:48:43:ab:f3:2b:53:67:78:33:db:ef:4f:
f7:63:2f:ba:be:d1:c0:aa:39:90:7a:64:86:b4:74:a6:4a:96:
95:b8:a1:39:65:ec:80:8a:27:6f:05:0b:fb:86:b1:45:20:4a:
4e:8c:a8:ca:01:5c:5e:9e:fe:0f:f1:82:88:55:eb:2b:24:77:
8d:fa:d8:26:0d:07:04:b9:5e:1e:12:51:8a:02:b2:06:87:ea:
0f:d8:9c:dd:78:18:87:7b:e7:2a:62:b8:8f:48:17:72:46:ad:
21:cd:52:0d:ba:e8:07:f3:3d:f8:2a:e2:b5:df:98:2d:81:3d:
67:f8:c8:87:9e:26:d3:69:06:ba:42:b9:f7:84:91:c9:5d:87:
78:96:35:2a:cf:7d:27:5f:86:dc:67:fa:52:a5:d5:81:0e:27:
ee:7e:94:14:1d:b2:29:f7:29:ab:5a:c0:41:ab:53:53:e9:fe:
ba:67:4c:ab:d4:8a:6b:19:ef:61:85:25:43:53:9c:70:3d:ff:
b8:0e:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:44 2025 by rpki-client