Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: wQkt/g6gqfthvgC4z6JcauiTQQlRxr4w7ZjIcg2EHvA=
Subject key identifier: 4E:11:6B:54:41:32:CC:A9:20:B7:4A:D1:B8:BA:84:72:9F:D7:1A:20
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 0195116C3F6CA1F19E0F5AC9A997BF8E3962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 01:01:01 +0000
Manifest this update: Mon 17 Feb 2025 01:01:01 +0000
Manifest next update: Tue 18 Feb 2025 01:01:01 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: skS47+sYQa4T4SvC5qAOzEshcXF2BQQlOMuV3cj2hUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:3f:6c:a1:f1:9e:0f:5a:c9:a9:97:bf:8e:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Feb 17 01:01:01 2025 GMT
Not After : Feb 18 01:01:01 2025 GMT
Subject: CN=4e116b544132cca920b74ad1b8ba84729fd71a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:26:42:2e:89:b9:26:d6:24:f9:36:27:bf:
49:60:ac:ea:8d:48:1c:42:dc:b5:02:7d:67:1d:76:
32:2e:bb:2b:22:ed:1f:79:eb:ec:8d:84:f8:4d:98:
d9:94:13:22:be:63:ad:30:dd:0f:68:21:2b:d3:7a:
77:da:dd:0d:00:e0:07:43:4d:0f:c9:e8:51:b9:12:
0e:ff:61:c2:25:9c:89:db:da:47:eb:df:2d:75:99:
2c:df:8c:a7:3f:2d:11:5e:69:fa:9f:5c:af:0f:5e:
ab:7f:2e:2a:27:bb:0d:17:d7:59:03:5f:83:63:4b:
bc:90:1e:15:a6:a5:d2:1b:92:35:73:9e:23:d8:7a:
82:94:52:1e:82:48:24:b2:50:8b:05:56:30:ac:6b:
ea:83:6b:03:92:53:5e:a9:f8:35:87:f1:c5:65:ff:
1d:28:63:8a:1d:70:2e:2c:f9:a5:47:2d:8c:2b:b9:
ff:1c:c0:a5:d6:fc:a3:20:d6:6c:67:8a:3f:c6:df:
f4:d5:f0:80:f9:d4:54:92:95:c3:94:39:b1:22:e6:
ee:a3:76:ab:a7:7c:81:f8:bf:86:0e:6c:41:26:97:
a6:3a:2f:cf:3f:2d:10:4a:be:de:72:fb:96:a4:d5:
d7:39:9a:a3:96:e9:fb:69:e8:b9:28:13:78:8c:3b:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:6B:54:41:32:CC:A9:20:B7:4A:D1:B8:BA:84:72:9F:D7:1A:20
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:81:7d:10:50:9a:21:42:c0:f2:7a:b8:6b:fa:ec:eb:97:3c:
52:f1:9d:f2:3d:b5:36:7e:33:cd:c4:42:c5:78:9b:5b:4a:0d:
95:79:95:b2:eb:0b:47:39:bb:98:b9:88:88:57:82:a9:cf:36:
c1:14:88:30:ce:04:a7:a6:34:2f:a5:e2:37:59:6c:ea:61:4d:
4d:97:44:fb:ee:68:fe:ec:a9:14:4d:c8:fa:cb:f4:d5:1d:17:
bf:74:1a:de:d2:e5:87:85:da:61:da:fc:eb:f6:7d:5d:1c:b8:
7a:51:59:ed:a0:95:ff:1a:62:c0:8b:07:8a:45:a0:a3:e1:9b:
81:0d:25:09:43:28:b7:24:73:e6:8a:91:4e:d0:df:60:d5:30:
b2:e6:e9:3a:2f:ff:81:78:f3:db:3a:2f:d1:fc:b6:2f:ff:04:
70:01:ec:88:c5:ca:8a:bd:83:88:57:00:72:e6:3d:00:d7:b0:
9c:24:de:5e:f6:7d:7d:68:f9:eb:cb:26:51:4f:e6:73:11:55:
2e:6d:1e:90:28:d4:49:a7:f3:20:8c:ce:f2:39:5d:ee:a2:30:
96:49:49:49:64:4f:4e:07:1c:32:68:78:fd:74:1c:11:8d:36:
56:50:bd:e8:73:7c:5e:5e:9d:89:57:ee:fe:9e:e7:43:63:40:
e6:1f:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:29 2025 by rpki-client