Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: 12a6q71xe+trKgyNiAJx58f0hW23bVXCbIWWRgXtcNo=
Subject key identifier: 6F:29:E8:4A:80:06:CF:8F:C4:1F:DA:B9:DE:5F:33:68:1B:30:F3:E1
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 0194C387D1C02D9D9F6E5BE4E19D12738B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1060
Signing time: Sat 01 Feb 2025 22:00:45 +0000
Manifest this update: Sat 01 Feb 2025 22:00:45 +0000
Manifest next update: Sun 02 Feb 2025 22:00:45 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: MBW3Kth8yHds3S829Q1bT2ffCzoHzhQFQNt9ddbU9xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:d1:c0:2d:9d:9f:6e:5b:e4:e1:9d:12:73:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Feb 1 22:00:45 2025 GMT
Not After : Feb 2 22:00:45 2025 GMT
Subject: CN=6f29e84a8006cf8fc41fdab9de5f33681b30f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:eb:fd:4e:53:e6:f7:71:49:a9:cb:a2:1d:
3a:45:80:ca:91:cf:68:ae:b2:d5:78:39:e8:a9:06:
11:87:0e:d9:b4:3d:e4:33:40:87:56:44:00:89:4c:
c9:bc:31:e5:bf:fb:2f:fb:b5:03:89:82:22:23:a3:
c9:46:d5:d9:3e:64:d3:89:43:0d:7c:de:4c:65:3a:
2c:31:c9:b1:02:1a:b5:e3:7a:e7:36:9f:90:6c:85:
4f:eb:35:d1:9b:80:47:36:07:30:c6:af:33:ef:e0:
37:7b:ae:77:e2:3f:fe:f7:9f:c5:ee:79:9c:ab:4f:
4c:f0:08:c8:75:90:9f:81:93:96:0e:dc:46:89:3a:
94:9f:66:d1:30:d7:c9:73:4d:9f:75:e7:a9:18:42:
55:1b:a4:ff:fa:09:56:aa:ea:09:37:f6:b0:fe:66:
a3:2a:23:77:f5:19:a0:06:ec:47:6b:14:c6:36:f0:
ab:08:83:0f:9c:65:5d:52:90:86:b6:0f:2b:48:71:
75:65:e0:ee:91:82:ae:df:dd:45:27:9f:c0:74:8f:
f0:ac:ac:dc:e8:ca:e0:e1:25:be:e7:a0:c3:bb:f1:
ef:8b:a2:c4:62:bd:ea:c2:52:f2:29:42:5a:4d:5b:
e7:4e:65:f6:33:16:b7:08:b9:1d:c2:bf:8b:71:81:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:E8:4A:80:06:CF:8F:C4:1F:DA:B9:DE:5F:33:68:1B:30:F3:E1
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:bb:d4:56:ac:bc:4b:75:2c:d0:bf:56:62:d2:58:7b:24:
1e:6e:c5:5a:0d:cc:5a:86:bc:89:48:58:d1:50:32:75:0e:77:
07:2e:33:ff:92:ff:9e:38:6c:1e:bf:df:9b:26:a2:68:54:9d:
4c:76:94:6d:e1:68:71:ff:df:7e:c4:02:08:7d:b6:65:dc:0f:
e0:d6:db:a4:c5:0b:3d:be:d4:e5:75:fe:a0:93:12:c6:d5:aa:
f5:c4:21:f1:78:50:29:06:80:97:3e:96:cc:73:77:76:0f:36:
80:f0:98:92:12:73:64:8f:5e:fd:27:64:5d:fb:78:63:50:b2:
bc:36:4a:4e:2b:9f:94:cd:22:36:a8:59:60:99:81:4b:ea:84:
98:55:28:1f:9e:de:99:fe:98:9e:87:42:b3:5b:31:6f:ae:fa:
2e:29:1e:54:c2:69:a0:26:86:e7:5f:b5:74:e1:e8:0c:8f:27:
a9:56:e7:a6:e9:f7:2f:c3:b2:9c:a0:83:0c:d1:55:95:ff:cb:
16:e1:48:4b:6a:3a:5e:48:60:42:12:5c:8e:7d:49:d8:4e:7d:
c5:81:c3:1c:3e:ce:25:97:a6:13:bf:5c:1a:49:89:51:a5:c4:
e6:5f:8f:c9:0c:dd:87:50:03:00:db:96:4f:91:69:35:0b:10:
0e:6f:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:42 2025 by rpki-client