Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: Hg+5QR4smZXfcYmQujSubsjENEBSGSSDjvQrovR5d+A=
Subject key identifier: F4:89:7A:1D:FE:DD:53:5B:32:FC:76:D8:91:0D:B0:F9:20:C5:AB:BD
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 0195127E6E9B760520CDF48103D29E238249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 0378
Signing time: Mon 17 Feb 2025 06:00:30 +0000
Manifest this update: Mon 17 Feb 2025 06:00:30 +0000
Manifest next update: Tue 18 Feb 2025 06:00:30 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: npn7e86euq7h+BF2hsmPfrl6ChiJeCu7StMbduzyHMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:6e:9b:76:05:20:cd:f4:81:03:d2:9e:23:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Feb 17 06:00:30 2025 GMT
Not After : Feb 18 06:00:30 2025 GMT
Subject: CN=f4897a1dfedd535b32fc76d8910db0f920c5abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:b3:9a:4a:1d:0c:e8:a8:ec:91:77:2a:43:
6e:b3:32:50:e5:b7:39:e3:ae:b9:50:4a:41:57:f9:
59:d5:cf:bf:fe:60:00:4d:36:4b:b5:91:09:90:e6:
e2:bf:43:7e:ca:5d:ee:91:9e:3e:39:7f:07:1e:76:
b3:3b:65:ab:2c:f7:fe:b2:0a:c1:d3:f2:75:5e:8c:
01:3a:64:50:3f:4b:2a:1c:8d:7d:9d:2e:6d:fa:69:
82:59:e9:ec:65:52:a6:13:32:5f:ce:04:cb:4f:dd:
57:52:81:42:b6:b4:97:d2:29:f7:7b:b5:eb:a4:56:
17:37:8b:55:1c:6e:fd:e5:ac:f5:65:54:62:ce:11:
58:9b:bf:60:1b:7f:97:bd:0b:b8:00:dd:77:0d:f4:
09:de:18:12:6f:e3:c2:ac:6c:12:5e:97:d8:87:99:
ef:2b:2f:f9:b2:f7:79:66:43:91:a4:5a:d8:b0:a7:
1c:69:eb:21:c1:c6:f5:f0:59:1e:19:ed:7b:bf:3a:
e5:a2:60:e5:1a:2f:4e:28:a2:4d:49:c3:33:e5:f5:
49:85:6b:38:c4:b2:2f:29:e3:ea:96:52:28:c1:aa:
35:0c:10:fe:66:f1:cc:ae:48:b0:8b:07:93:9c:9e:
24:d7:e7:0c:16:2f:1d:1f:82:fa:04:eb:6c:50:40:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:7A:1D:FE:DD:53:5B:32:FC:76:D8:91:0D:B0:F9:20:C5:AB:BD
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:b6:84:57:58:ad:59:13:f0:4e:95:9d:aa:32:b0:8f:6f:
48:49:91:c1:2b:ef:fb:78:f6:7d:52:92:96:7a:a1:05:ed:23:
aa:d0:94:1a:5d:19:1c:7f:34:58:5f:49:1e:f3:db:dd:fe:ad:
69:17:50:ca:c6:45:a1:e0:26:dc:59:7e:26:79:b9:1a:fa:36:
c7:72:a4:b5:1d:c4:97:4c:dd:68:2a:dc:b0:ce:31:f6:9d:c7:
75:2c:4a:e3:ba:27:17:e5:d5:7a:66:fe:9f:7f:73:2e:5e:6c:
7a:d7:c0:8d:53:16:7d:21:25:08:64:7e:69:92:87:27:b5:7e:
83:90:f3:14:e5:fe:80:ad:1b:2c:0b:45:60:aa:f9:a6:c0:74:
73:0f:dc:40:b2:29:9d:9b:66:b9:80:4f:ab:1d:9e:ba:52:38:
1e:9e:e5:83:4a:dc:55:f6:21:66:66:1f:62:4d:ee:db:be:1c:
97:9a:53:2e:62:6c:30:93:02:f7:44:fc:8c:2d:af:8c:c5:a4:
b8:d6:ef:3e:09:e9:24:e3:cb:7c:dd:46:a3:f0:bb:35:a2:24:
41:83:26:cf:c3:36:0e:61:19:8f:ca:75:35:22:17:f3:91:98:
68:ad:c4:fe:a7:35:9e:5c:f9:5c:9a:d6:85:4b:77:bd:9c:80:
55:cf:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:56 2025 by rpki-client