Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: ZJpDlWGYD+tiwpbk4T8enp1ifuXrR6rvGX+enB+7wvA=
Subject key identifier: 06:74:D2:88:98:A9:E0:35:18:B6:00:8E:A4:3A:8E:CB:86:CB:D7:13
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 019510C6F546A46F41FE4873921A61BE0C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:29 +0000
Manifest this update: Sun 16 Feb 2025 22:00:29 +0000
Manifest next update: Mon 17 Feb 2025 22:00:29 +0000
Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: h52bbDiHHGKJYOAcF8Qco1g9O/SFyHizz5QZdIrgKoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f5:46:a4:6f:41:fe:48:73:92:1a:61:be:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Feb 16 22:00:29 2025 GMT
Not After : Feb 17 22:00:29 2025 GMT
Subject: CN=0674d28898a9e03518b6008ea43a8ecb86cbd713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:ff:cc:08:d5:ba:b5:2a:58:83:f4:59:71:
ec:d9:07:c9:e6:19:15:2e:1e:c9:a5:33:b1:4b:27:
3d:29:a0:48:83:3e:f5:10:de:97:63:d6:24:5f:9d:
a5:f7:13:22:56:39:03:c1:c4:56:8c:35:87:d8:2b:
78:fe:e7:9c:83:74:44:f4:7c:66:b5:df:85:5d:2b:
9e:b5:b4:53:80:55:ec:7f:a3:44:ff:2a:be:95:11:
f0:cb:ee:9c:c4:ee:fd:5b:41:7e:0c:4c:92:01:27:
a9:fa:cd:d3:3d:71:c1:7a:d9:95:90:32:77:52:ae:
19:94:b7:c9:ec:73:02:93:86:7b:cc:32:29:c4:00:
28:22:de:83:6d:1b:10:e3:b5:22:69:bb:43:96:a6:
9c:cd:ca:30:2e:fc:44:b6:da:6d:83:57:40:07:e3:
e5:d0:40:94:ae:3e:be:97:85:3c:45:97:ae:05:0d:
dc:d0:a6:82:9a:97:72:1c:0c:64:84:df:d4:6f:d0:
0a:89:a9:c8:b4:32:cd:fd:39:04:80:2d:2b:52:25:
88:f6:74:02:c0:49:dc:42:e2:30:e8:b0:a1:2b:f9:
41:55:20:4a:f9:f9:9a:32:9e:09:12:1d:f9:a4:f7:
02:16:45:04:14:55:d8:68:b8:a1:81:b1:d2:61:a6:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:D2:88:98:A9:E0:35:18:B6:00:8E:A4:3A:8E:CB:86:CB:D7:13
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c4:35:44:60:65:58:f1:f7:0f:90:a3:e3:ed:d3:05:f9:eb:
8a:b2:51:b3:f7:92:a6:b6:bf:48:ff:8f:7a:21:a7:73:eb:8b:
a0:49:b0:39:52:d7:af:41:e7:a0:0b:f7:4a:35:6b:90:2a:4b:
9b:71:e4:d2:30:23:cc:9b:bb:a1:93:eb:c8:a1:d6:db:e9:a7:
20:07:a3:cf:c2:aa:64:98:74:8c:a2:05:ea:ab:e3:6d:15:c2:
d5:51:aa:9f:9e:01:3f:ff:8e:29:06:31:92:e0:6e:3d:e5:40:
6c:72:58:32:5c:c4:a3:b9:ee:75:4f:05:63:eb:64:f4:d0:79:
d3:47:f7:8a:eb:23:81:56:d2:b0:c5:1d:d2:e6:d1:1b:c9:fb:
cd:0b:4e:20:41:a5:65:2b:ca:32:54:a3:e0:88:f0:4c:05:98:
56:9d:d0:d9:5a:ce:57:b8:28:b6:16:00:49:3c:f6:df:9b:84:
87:5f:56:66:0a:09:87:de:98:08:02:79:7a:3f:b4:aa:cd:56:
4f:2e:2a:3f:fe:cd:8e:08:77:03:47:75:f0:fb:d6:b0:31:66:
87:de:97:96:3a:57:5e:36:ec:06:c7:bf:58:fb:32:fe:b4:9d:
fc:b1:d2:46:fc:94:e0:31:f3:25:23:cb:ea:55:dc:96:15:cc:
77:1d:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:54 2025 by rpki-client