Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: iAkj8l+Dp8vKdONdycmvj2qP2qyokRJht7uzI1MOT+Q=
Subject key identifier: 88:92:B2:74:65:2F:A0:9C:C3:D8:29:F6:2E:46:A2:E7:E0:54:76:17
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0194C46393BB485CF1D71D1926F088108F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0328
Signing time: Sun 02 Feb 2025 02:00:47 +0000
Manifest this update: Sun 02 Feb 2025 02:00:47 +0000
Manifest next update: Mon 03 Feb 2025 02:00:47 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: DA550aUq+WDyuuq7hdgWNDB/Kavz/Vl1oF0scflVH6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:93:bb:48:5c:f1:d7:1d:19:26:f0:88:10:8f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Feb 2 02:00:47 2025 GMT
Not After : Feb 3 02:00:47 2025 GMT
Subject: CN=8892b274652fa09cc3d829f62e46a2e7e0547617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:13:39:42:80:5d:b2:b4:7f:46:5c:00:ba:
46:24:74:50:2e:3c:41:55:5d:b3:ac:04:95:3c:17:
a3:5d:ed:fb:03:27:a9:d8:b4:6f:b0:3b:49:68:af:
3e:a7:dc:35:d2:4b:ac:48:14:10:de:e3:77:0e:9a:
3d:e3:94:b2:26:c2:24:8c:e3:58:40:37:98:86:41:
42:fb:d9:74:b5:26:2d:cc:a9:00:26:c5:29:49:40:
24:f4:ae:90:5d:b5:6d:b9:54:75:ff:2d:29:9c:e8:
08:15:8d:78:81:67:dd:d3:15:f2:52:3f:b3:1b:74:
5a:31:4f:4e:87:ae:96:a7:ad:58:b8:68:ca:c5:61:
eb:76:b7:28:b6:04:56:1f:e0:c8:45:27:b9:92:6a:
69:d7:f9:80:51:31:6f:21:ea:94:36:63:e4:34:ac:
00:2a:27:f7:b5:24:ec:be:bf:72:55:03:c0:e8:f3:
1a:61:c8:c7:e9:c9:05:b2:3a:9f:b8:09:72:50:1a:
64:b3:f5:22:cb:5e:43:51:5d:75:eb:9f:c5:3f:2d:
a0:cc:26:66:1c:f5:68:5e:f5:be:3b:bd:57:7c:2a:
08:f2:14:9a:b0:54:66:47:8f:78:cb:ec:f7:f9:a9:
22:82:f7:71:46:ff:38:96:4d:37:e3:cd:82:a7:3e:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:B2:74:65:2F:A0:9C:C3:D8:29:F6:2E:46:A2:E7:E0:54:76:17
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:eb:ec:0d:fe:7d:7d:c5:e1:31:7c:fb:2c:41:d9:1c:92:
f0:d1:92:32:19:52:2b:68:cc:78:21:05:6c:7a:55:6c:30:51:
25:9e:2b:5f:32:90:6c:8b:f7:1c:f8:b7:5a:94:9c:64:de:a4:
9c:a8:8b:d7:41:a4:7d:41:d0:10:71:65:f8:fd:72:2c:c7:52:
5b:15:fb:3a:8d:ba:7d:c3:e0:13:be:9d:45:bb:0c:5e:6a:ef:
05:40:ac:df:e4:89:97:ad:7d:7a:96:ce:a6:2d:5a:48:f2:cf:
2e:77:af:ea:36:3e:da:3d:29:8a:1c:43:4b:fd:ca:20:ba:f1:
49:49:4c:05:ea:04:cd:7d:c7:0d:2e:73:ca:80:5c:54:e3:6e:
a1:5f:8e:55:17:4b:c6:98:c7:a2:d0:38:f6:91:9a:c2:a7:92:
d6:e0:79:de:d8:d2:cf:41:37:01:c1:bb:cd:b1:ef:4b:8f:7f:
c4:06:75:4b:90:6f:87:23:94:db:49:61:bb:86:46:01:11:31:
1a:5c:3e:dc:78:91:ad:10:05:1c:fc:85:bb:0d:50:2c:c1:aa:
64:12:fa:e1:a3:3a:cc:f3:ff:fa:3e:84:a3:3a:02:b8:0d:11:
3e:a8:35:c4:ba:5c:a4:72:bd:e1:ce:cb:13:e5:ab:4e:b7:c6:
16:88:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:11 2025 by rpki-client