Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: k5opOEIJ+/kva6drx9VbreDE+T6GtB8pCUBzjdk4SA4=
Subject key identifier: B7:6D:A0:D7:7B:2D:81:3A:9B:B4:46:A0:AA:C4:13:C2:F7:DC:80:54
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 0194BB2935D9FD046D0E0CE34CA8381AC5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 05AC
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: A0qMPlfFJLNldjvtIhUGONQqq/v8uQSy8INi2X7CB9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:35:d9:fd:04:6d:0e:0c:e3:4c:a8:38:1a:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=b76da0d77b2d813a9bb446a0aac413c2f7dc8054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:21:c2:72:31:ba:a3:33:f2:a2:3c:8a:4c:
0b:8e:30:ea:7a:f7:38:09:65:a8:ee:10:f3:49:6b:
e7:e7:95:d5:40:89:6c:5d:e1:90:eb:96:7b:fb:45:
85:d1:b9:e7:64:45:b8:e0:61:ad:dc:46:7f:ea:74:
40:7f:ff:b1:bd:e8:4c:9a:ac:7e:b4:b1:27:0d:47:
d7:ac:16:74:bc:98:16:82:c1:63:c4:b5:6c:71:9e:
33:08:a4:c8:20:d8:c6:c3:e1:63:8e:55:0d:eb:54:
e2:39:d0:a9:96:da:b9:9c:01:c6:ab:c0:9f:20:11:
71:9d:68:d5:50:7f:93:13:45:d8:c6:b3:e2:60:11:
8d:bd:a2:10:f9:b5:87:80:b3:61:80:8b:7b:d9:2f:
7a:84:32:f9:c5:54:40:49:9c:08:3a:31:c0:27:4a:
f1:e8:63:c0:6d:08:11:2d:f4:1b:72:dd:f2:07:62:
fc:a5:0d:a3:0c:06:21:f7:9f:fe:8a:e9:46:6b:13:
76:da:25:f3:b8:0b:3a:2b:f5:c7:99:61:2c:86:ed:
72:1d:81:fa:d0:34:72:39:4c:67:9f:02:84:6e:0e:
af:b8:a3:61:b0:69:b4:77:43:02:1b:e8:ad:bd:3e:
b6:15:56:49:e7:06:e3:5c:d8:ff:2d:dc:21:19:c2:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:A0:D7:7B:2D:81:3A:9B:B4:46:A0:AA:C4:13:C2:F7:DC:80:54
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:78:fa:74:f4:40:02:ff:c2:fe:78:4b:12:e9:b6:03:fa:
eb:7c:9b:4e:40:ee:a8:c2:1c:a2:6d:c7:82:fe:51:98:56:ab:
7e:47:73:47:07:cf:80:c9:f1:a0:9b:ca:37:be:87:d7:a6:77:
cc:96:7b:d7:f6:8a:92:83:06:51:46:26:39:a1:da:cb:f6:16:
6f:ce:e2:57:96:b6:83:21:d3:ee:83:e1:fd:7a:b2:8a:5e:ae:
d8:f9:f3:97:e5:3a:50:6b:2b:dd:2a:08:10:ef:0d:47:31:cf:
b6:60:e9:60:52:75:3e:95:35:12:97:5d:a2:6a:66:30:4b:45:
8a:3c:fa:38:35:ed:c5:d6:8f:4a:38:65:5e:d8:b0:23:9e:98:
f5:ad:13:98:59:7a:da:74:74:bf:b6:5c:26:68:94:d9:37:c7:
02:1b:f9:df:43:4e:38:a2:7c:2e:59:b4:e3:b5:3f:6e:71:7f:
dd:c9:20:50:3b:e0:3d:e7:0b:76:8b:98:96:3c:55:40:a9:cd:
bc:2f:a8:49:e9:06:d3:29:8c:3c:4a:3f:d6:55:1d:27:3c:a8:
21:b4:41:91:16:55:62:b6:fc:5d:6c:ab:0b:07:70:78:15:3d:
39:7c:7a:d6:fb:1a:be:df:d9:da:65:20:ce:6b:40:89:07:fa:
c6:e1:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:01 2025 by rpki-client on console-fra.rpki-client.org