Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: SLGS8BQG8ABmOSliUKZMjgKWJkwlwZGM23pZEr7ZMd8=
Subject key identifier: 46:04:47:F1:31:AC:8C:BE:C1:1F:CE:BD:20:10:2F:42:8A:83:6D:FA
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0194C4D0FA1A2206832763BEB1DE83DA0657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 13C1
Signing time: Sun 02 Feb 2025 04:00:17 +0000
Manifest this update: Sun 02 Feb 2025 04:00:17 +0000
Manifest next update: Mon 03 Feb 2025 04:00:17 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: FRADexK66vvA6yyDLG+L8dSMI7y0D+T7KDOV+4+1eM8=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:fa:1a:22:06:83:27:63:be:b1:de:83:da:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Feb 2 04:00:17 2025 GMT
Not After : Feb 3 04:00:17 2025 GMT
Subject: CN=460447f131ac8cbec11fcebd20102f428a836dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:8d:27:bd:d2:52:14:df:cb:a7:68:4a:a2:
a5:28:bc:8b:dc:76:26:3f:15:2d:67:19:cd:2b:22:
57:ab:1e:28:3e:2c:59:90:9a:1e:68:e0:83:eb:b3:
3e:e8:05:cd:d1:b5:66:d9:1a:ea:ca:3e:4a:ae:9c:
2d:1b:4e:19:a6:47:8f:7b:51:04:da:59:4b:4f:73:
7b:65:86:4e:dd:51:b2:0f:4c:0d:00:10:d1:cd:f9:
30:d8:46:2a:c2:63:19:66:9d:4c:84:cb:93:80:c9:
b4:c1:46:c1:c2:cc:56:2e:c2:7d:92:a3:a5:e0:b1:
9b:d1:ba:58:56:8e:e1:65:e6:eb:db:0d:fa:30:04:
28:7c:1a:76:c9:e3:1e:7b:d4:d2:c4:90:16:61:b6:
c1:59:d7:ab:b5:77:7e:47:a6:cf:82:9a:56:fe:aa:
70:b0:0e:d6:4c:ee:b1:73:79:b6:da:77:19:1c:54:
d7:19:4d:66:69:86:ad:e0:dd:6d:20:e5:ed:bd:fc:
3b:d0:1b:2c:48:fa:59:f9:b4:5d:c3:05:28:04:8b:
a3:af:59:76:f3:38:b7:f5:51:2c:15:6f:4a:f8:96:
d6:df:66:de:ff:cc:ce:fa:2d:06:d6:b6:be:c9:9f:
0f:44:af:e3:08:e3:a2:e3:d6:52:40:04:8d:3c:cf:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:47:F1:31:AC:8C:BE:C1:1F:CE:BD:20:10:2F:42:8A:83:6D:FA
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:26:0f:08:26:d9:fb:3c:5f:c2:b1:63:ef:c9:3e:5c:99:
8a:2d:8d:49:e3:91:32:08:82:dd:da:c0:ff:06:f1:fb:82:57:
7b:42:75:c2:3a:60:47:be:47:f9:d4:0f:20:0a:8f:b7:c8:15:
c9:a1:93:64:1e:b4:11:bb:18:27:50:9b:6d:7d:6b:23:86:15:
dc:80:fc:c5:2d:33:b1:ca:c7:51:2a:49:36:cf:01:9d:4a:ef:
a6:d9:8f:43:81:7e:c7:0c:e7:5f:79:1c:20:cd:f1:3b:18:50:
43:b5:d3:75:36:25:eb:5f:25:d8:24:9a:ee:35:d3:dc:df:db:
68:52:03:1a:78:10:f1:49:72:51:9e:f6:94:99:7a:57:67:08:
98:1d:54:c7:60:1f:38:ba:ce:96:ed:9f:b1:d5:0e:b9:6e:98:
d9:48:69:56:07:a8:7b:3b:c3:31:5a:14:4e:70:85:9d:67:fd:
27:76:44:fa:c7:71:e3:5d:94:18:10:6f:32:7f:4c:fe:98:6b:
86:0c:f0:96:21:dd:a3:dc:14:02:ae:40:d9:47:4a:e7:65:48:
fa:27:ca:0d:69:0e:cd:a0:bf:84:10:db:fb:8c:d6:51:33:39:
e7:21:3a:57:24:f6:49:53:ec:e6:3b:b3:bf:8c:a2:c2:8b:da:
06:24:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:07 2025 by rpki-client