Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: iHAUP6yTSgZWDgvhaNtvDL7cqRL1yLs8ffDzkvNpX8o=
Subject key identifier: 43:9D:DE:01:DE:1B:B0:AC:63:3B:39:84:82:33:0E:AD:58:E7:64:5A
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 01951090182CA05ED9A741FCD70E106EF35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0195
Signing time: Sun 16 Feb 2025 21:00:33 +0000
Manifest this update: Sun 16 Feb 2025 21:00:33 +0000
Manifest next update: Mon 17 Feb 2025 21:00:33 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: aTWgJe9quf3LTnVz84FsiGbMtCcGPprb/bPU4bhDYN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:18:2c:a0:5e:d9:a7:41:fc:d7:0e:10:6e:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Feb 16 21:00:33 2025 GMT
Not After : Feb 17 21:00:33 2025 GMT
Subject: CN=439dde01de1bb0ac633b398482330ead58e7645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:d6:6f:3c:1e:ee:c9:db:54:8f:22:65:1e:
33:90:86:fe:ee:55:df:f1:36:6e:0d:0d:c4:2f:7a:
07:17:45:e7:96:65:fd:f6:d8:0e:4a:5a:d9:99:ac:
e2:b7:1c:8d:33:49:99:71:ff:04:8c:16:2b:71:4a:
b0:b6:4a:ba:91:c6:db:f0:f9:38:0b:b2:fa:54:4a:
36:44:c0:6c:bb:6e:da:7b:97:83:94:7d:b6:dc:16:
9f:53:7b:6c:0d:0a:78:37:f0:94:0c:f4:62:e5:3a:
7c:3a:9a:bb:1a:10:99:83:50:3c:d2:62:3d:b6:d1:
cd:21:b2:6e:30:17:72:d2:d9:96:55:bf:f2:22:58:
38:5c:83:22:7a:3a:30:69:da:e4:6d:41:cf:ad:88:
3e:86:58:e4:fb:0f:89:1d:e7:a5:77:ad:11:10:e0:
cc:34:22:84:17:bf:bc:75:1d:fc:f3:62:99:8a:5f:
ee:76:2b:32:f0:0b:c2:2d:9a:4e:0a:a4:9e:6d:0f:
84:32:d5:9d:c1:16:ca:57:38:55:eb:2a:44:f1:da:
05:b5:b4:c6:08:84:86:c8:48:3f:ef:cc:fd:46:2a:
8a:d2:88:ea:77:45:8b:72:18:c3:4c:41:2d:db:56:
db:ee:2f:e4:82:92:62:3c:44:10:cd:6c:6d:24:6a:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9D:DE:01:DE:1B:B0:AC:63:3B:39:84:82:33:0E:AD:58:E7:64:5A
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b0:88:b1:82:2e:7f:ae:30:42:71:78:3d:f9:7f:bc:5e:b0:
b8:92:6e:4e:62:7a:8f:3a:ee:5a:f2:c1:50:3f:1f:d9:ba:18:
bc:50:e9:e2:2b:b2:d7:a1:fa:bb:ec:66:70:99:d2:8a:b4:ab:
ed:82:80:b6:55:29:9d:fe:8f:a1:ed:51:68:d6:c3:66:78:b0:
c7:a7:c0:48:a9:00:5d:76:ed:92:f1:28:4d:a6:8c:4e:6a:b2:
43:55:be:b9:ad:49:a5:3a:2f:9a:97:be:ef:5a:71:42:42:fc:
ef:80:92:b4:46:a4:f5:a5:2a:59:83:bd:86:c4:11:f3:3c:b6:
e3:f8:ab:ef:c1:e5:f9:c1:72:1a:f8:e4:0b:9c:0f:f5:d5:c2:
4f:a9:a4:85:82:48:b8:de:f5:de:07:82:a0:70:5a:c8:10:b8:
0b:4e:2f:43:19:8a:02:d7:66:d6:93:65:3e:da:7b:9b:6b:d6:
5f:45:a7:a8:76:b0:76:0b:92:86:91:c9:8d:9a:bf:0a:10:c2:
6b:01:aa:78:e2:37:d9:8d:c5:ec:c0:3f:55:91:ce:66:df:0a:
bc:a7:5c:b5:30:90:e2:4e:34:52:73:68:90:07:a9:e0:e0:1e:
83:92:d5:e2:e2:ad:39:86:23:47:30:7a:45:88:f1:2f:f4:77:
5c:2b:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:51 2025 by rpki-client