Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: YJoTpjx5IGNR4tnvRafh6ggaWZC3aYHcVAJTEY8aHtQ=
Subject key identifier: BE:42:9B:B1:51:86:84:B1:31:16:86:DC:30:38:59:A8:6D:8B:D9:CE
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 019510C7084F624B4606C4B18922249E60D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 0E88
Signing time: Sun 16 Feb 2025 22:00:33 +0000
Manifest this update: Sun 16 Feb 2025 22:00:33 +0000
Manifest next update: Mon 17 Feb 2025 22:00:33 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: 3xL/Z2z3H4OB/KR5kratKbpdnhQ9nlrBg9wcHYMgyJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:08:4f:62:4b:46:06:c4:b1:89:22:24:9e:60:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Feb 16 22:00:33 2025 GMT
Not After : Feb 17 22:00:33 2025 GMT
Subject: CN=be429bb1518684b1311686dc303859a86d8bd9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:ec:ad:46:4f:3d:e5:98:22:ad:06:6b:00:
7f:c1:ee:39:09:99:c0:81:a6:b3:88:01:d3:e7:0a:
0c:58:34:f7:48:0e:02:5b:60:a6:0b:cf:52:6e:0f:
c1:09:f5:fd:bf:fc:07:24:d6:ed:14:3f:50:cb:2e:
24:23:74:36:c4:d2:c2:b9:38:54:3c:10:d1:c7:e7:
b2:0a:87:d9:7d:21:d4:fd:37:33:8e:1e:b2:81:d9:
b7:ac:60:74:94:fe:49:f4:30:76:36:74:e1:04:9e:
50:89:0c:7f:d1:03:2e:e2:42:d4:26:0f:43:45:73:
b6:c6:8e:62:52:57:d5:43:1d:88:f9:ac:33:e0:f8:
ca:8e:53:cb:91:93:53:04:b9:3e:fb:ad:15:2c:ca:
a4:69:24:c4:85:5b:fe:81:35:34:fc:ab:e5:ef:16:
45:b0:ee:94:e0:d7:22:76:04:e0:e2:60:73:68:e6:
31:c4:b7:f4:56:94:e7:0d:53:ec:8b:e5:91:d3:8a:
6d:ed:e3:3e:f2:14:e2:67:11:72:1d:5f:80:a5:65:
b2:27:0a:fe:07:3c:f6:cd:eb:3e:45:37:ec:ad:b7:
13:e4:6b:da:23:38:1d:4d:42:cb:7c:26:a2:2f:77:
77:00:36:5c:f7:7e:9c:b7:f3:f6:6a:eb:ec:51:b1:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:9B:B1:51:86:84:B1:31:16:86:DC:30:38:59:A8:6D:8B:D9:CE
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a8:af:25:56:75:41:a4:16:77:15:1a:bb:c9:dd:38:49:8c:
19:7d:e8:c1:e4:4e:10:76:b0:71:16:73:f9:6e:51:ad:d5:32:
9c:4f:17:09:da:65:ab:af:d8:99:ec:0b:97:c0:58:a8:1f:4c:
01:21:07:f4:d0:c0:44:e6:c9:75:f3:24:09:28:d4:78:04:36:
dc:d9:1e:96:5d:c1:cf:98:13:71:fb:b8:68:22:8f:be:e4:7b:
5b:b3:1e:a9:ba:84:46:1d:3e:fa:8f:37:55:23:24:f9:0c:dc:
16:d1:de:1c:d0:72:f0:9c:45:b2:cb:a5:bb:c5:48:3c:d3:7d:
b9:9f:4d:29:3f:5a:24:b2:f6:77:05:71:c7:e9:05:ab:db:e4:
85:9f:dd:92:b1:8c:00:c3:7a:3f:25:f1:24:5d:6d:54:ef:e0:
39:9d:89:66:42:52:f6:46:e0:e8:37:66:93:71:c5:db:4e:fa:
91:b3:b7:73:1f:58:c7:3e:0b:cc:39:e8:eb:f1:bc:ff:d8:b0:
56:ff:3e:03:36:b8:d5:ab:f2:42:22:5a:1d:fb:36:60:a1:70:
f3:5a:8d:40:3e:8c:b3:b5:0b:63:44:36:22:3b:67:a5:40:a0:
f3:f8:7f:92:e2:1a:6f:30:7d:e8:9d:ff:81:0d:10:00:43:3f:
d4:e6:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:37 2025 by rpki-client