Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: bwnefpToC+7oMmHfQcEa0jSwGbuAPTrUm8X+Mt93Fzk=
Subject key identifier: FD:EA:EF:09:26:F2:ED:54:D8:9E:19:03:19:E3:F7:1C:20:93:58:2D
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 0194C387B5E4BA14D3945390096466206822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:00:38 +0000
Manifest this update: Sat 01 Feb 2025 22:00:38 +0000
Manifest next update: Sun 02 Feb 2025 22:00:38 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: /J0Q+5Eq5O/Jfj5Y9OR6fFF0fe8HV5QxTU0Ux6KqoD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:b5:e4:ba:14:d3:94:53:90:09:64:66:20:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Feb 1 22:00:38 2025 GMT
Not After : Feb 2 22:00:38 2025 GMT
Subject: CN=fdeaef0926f2ed54d89e190319e3f71c2093582d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:b6:18:ad:96:c9:2a:8b:39:e8:17:ee:9c:
a6:97:cc:bc:07:8d:4a:37:9b:c9:dd:67:ab:0f:39:
9a:c3:28:f9:76:30:2b:7f:15:fe:9e:37:48:73:47:
10:f6:25:d2:6e:d1:39:a4:6d:48:f8:fc:e9:d7:16:
83:3e:bf:55:24:83:47:f0:d1:73:ea:45:22:c6:3b:
4d:6c:1d:d5:e3:a5:5e:47:ab:64:4f:21:69:ec:fa:
95:76:eb:0e:a0:f0:b0:29:f3:43:8c:29:75:2d:77:
4c:a6:3a:af:20:03:1c:10:c0:46:62:ce:8f:3f:14:
e8:3b:f5:cd:1b:05:91:6d:e8:e9:4e:10:f4:e1:d0:
d7:df:75:6a:fe:2e:49:5d:06:b7:eb:1a:38:1b:3b:
cc:c6:31:02:0e:a7:49:b4:88:0e:06:79:bc:b8:cc:
cf:80:e4:f3:58:3b:04:63:fc:af:fb:c0:22:5b:8a:
22:67:6d:c8:90:8f:48:97:23:90:13:a4:e2:38:1a:
a9:d4:07:03:c2:24:ed:a8:89:34:91:0e:84:e7:ef:
81:ba:f9:72:65:74:64:31:ba:e6:99:ae:81:e7:23:
c0:2f:aa:de:80:e2:bc:36:4c:d7:82:c1:91:87:7a:
2c:fa:78:af:87:47:2f:4b:9b:10:ba:20:4b:2b:f6:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:EF:09:26:F2:ED:54:D8:9E:19:03:19:E3:F7:1C:20:93:58:2D
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:d1:50:46:bb:66:7c:90:b8:f5:7e:91:2d:77:91:8e:23:
06:a8:da:a8:e8:67:26:c0:04:47:04:a7:5a:e4:50:04:1e:84:
c3:93:18:54:c0:c0:85:f8:12:f5:3c:b5:e3:02:48:66:cb:7c:
ac:f0:5a:02:ff:ab:5f:dd:a6:86:49:02:c6:17:d8:53:f7:98:
03:25:98:43:c1:80:fe:33:88:6f:ce:bf:af:6e:fc:17:ac:72:
cd:ab:c3:bf:36:c5:80:46:b6:84:34:5f:02:42:95:52:25:12:
63:3b:5b:61:74:51:96:ea:70:1f:35:06:ce:ea:a2:fd:8b:9a:
1a:8b:ef:09:69:eb:9c:82:94:d8:93:ef:2a:8a:d6:cc:74:6f:
72:c8:13:9b:a1:7c:f8:3c:c5:be:24:89:07:92:74:65:53:49:
86:ee:de:e6:b7:db:66:6f:ef:3a:a7:4b:ec:2f:35:51:8c:c3:
a9:bf:76:bf:29:f0:61:bb:3b:57:2d:18:46:97:05:f2:84:72:
01:77:3d:98:9f:a8:9e:63:bf:9d:c8:d3:eb:ce:5a:7a:0b:05:
15:47:0d:27:5a:06:dd:23:bc:55:37:3b:a3:71:76:9a:7a:b8:
e2:a8:78:1c:b1:a2:5f:0a:48:03:e3:84:76:7f:0b:d8:e1:cd:
07:4a:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:50 2025 by rpki-client