Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: DfSCUaLlwb9OK3E2rdrPlUD8qv4q8Zj7Wo/b+LNExa8=
Subject key identifier: 47:D8:42:FA:8B:1A:3D:3A:3F:DC:55:0C:85:3A:A8:EB:AB:91:2A:49
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 0194C3F5FA40E81F7D2FCE841154492B6AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 1429
Signing time: Sun 02 Feb 2025 00:01:05 +0000
Manifest this update: Sun 02 Feb 2025 00:01:05 +0000
Manifest next update: Mon 03 Feb 2025 00:01:05 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: 4d8DBtO76qZV01HgkHPGa4oHjNXSuAHrH7W9vh/XKuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:fa:40:e8:1f:7d:2f:ce:84:11:54:49:2b:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Feb 2 00:01:05 2025 GMT
Not After : Feb 3 00:01:05 2025 GMT
Subject: CN=47d842fa8b1a3d3a3fdc550c853aa8ebab912a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:cd:00:94:64:0c:7e:b8:ff:d7:9a:5d:80:
85:6b:dd:73:de:4c:30:b0:fd:35:74:6e:55:50:b1:
10:4a:d9:a9:90:ae:4e:ef:57:0b:4f:bd:f7:24:3f:
5f:b6:d7:a5:7f:3e:73:04:ed:73:62:25:53:66:eb:
ba:ee:c5:92:3a:5d:6c:4e:19:ee:b5:c7:30:96:8a:
23:99:8f:75:e5:0c:66:10:5a:b0:5b:2c:90:62:f8:
a0:b1:8a:5e:48:ce:9f:7a:0d:66:30:2b:35:18:3b:
03:13:d9:14:13:0f:e6:46:aa:db:1e:51:7c:7d:45:
a0:e5:21:42:9e:ca:b0:94:d6:6d:a5:c1:f9:43:0a:
2a:7b:20:fb:0e:79:75:81:41:aa:e6:66:b7:82:5d:
6b:1f:fa:0c:3b:08:a2:7a:76:b1:a3:dc:aa:ce:02:
1c:06:96:02:63:13:d2:e4:21:36:91:60:10:f8:3b:
c4:01:8c:18:cb:83:57:fd:8d:0c:50:ba:44:21:c7:
42:24:52:ea:83:23:62:f9:4f:ec:4b:a1:4c:30:3a:
35:1d:26:2d:d1:fd:9c:cb:64:0b:94:f4:61:1a:d1:
91:b9:09:ca:ff:c9:fb:c1:67:79:8d:aa:62:78:08:
c7:7c:6f:82:48:02:4f:55:60:a3:23:39:ed:f6:aa:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D8:42:FA:8B:1A:3D:3A:3F:DC:55:0C:85:3A:A8:EB:AB:91:2A:49
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:36:85:a7:5b:67:7e:4c:84:63:55:29:4e:15:69:2f:45:
94:66:e4:41:c5:7e:c3:72:48:45:49:75:7d:f1:1b:90:92:b9:
ba:1c:66:61:fd:f7:8c:0e:b5:ba:1e:c1:89:b9:31:c0:21:f5:
1c:db:09:57:d7:f6:f5:9b:f5:9c:df:be:4b:d0:96:81:42:88:
2a:d7:2f:dd:c2:54:4e:24:06:d0:23:18:42:90:d5:a1:51:ef:
e1:35:8d:d7:0a:31:fd:7b:9d:45:fa:eb:eb:e2:95:ed:7f:b0:
00:1c:ee:49:67:9d:d7:b1:7e:b8:c9:73:e9:0f:49:9f:f1:d4:
e8:c5:c8:59:ac:cf:0f:99:33:f7:3c:b4:77:4a:e1:a7:1b:fa:
e1:a9:de:26:b6:3e:52:13:ba:6a:75:f8:3e:3e:fe:ca:50:52:
7a:40:5b:12:b9:4a:6b:03:35:7c:c3:52:16:33:10:3e:06:9f:
1a:93:97:02:6f:29:76:ee:61:41:0e:95:63:b7:b3:74:25:6c:
41:c7:49:ab:78:ee:e9:be:e8:bc:76:25:d8:08:aa:0d:36:00:
d7:9e:33:67:25:47:a0:99:c8:05:75:82:c5:0c:31:a6:08:42:
5d:b1:e4:c6:49:02:54:5e:dd:71:90:0d:0a:0d:fb:bd:c4:f5:
f1:b3:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:36 2025 by rpki-client