Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: r/cf866dcLWmlNh4SwSZd9bL4WomuGSraXoR+M+NI/Y=
Subject key identifier: 93:A4:63:8E:52:DE:19:59:0F:C5:EE:31:F5:54:FF:BA:6A:4A:50:46
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 019510C78BC237CB2CA1D8584BB8C1CEC3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 0552
Signing time: Sun 16 Feb 2025 22:01:07 +0000
Manifest this update: Sun 16 Feb 2025 22:01:07 +0000
Manifest next update: Mon 17 Feb 2025 22:01:07 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: tnEnKZzG/JsQylVCZuWai0o/7IqUYYvg3YAQqSG4A+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:8b:c2:37:cb:2c:a1:d8:58:4b:b8:c1:ce:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: Feb 16 22:01:07 2025 GMT
Not After : Feb 17 22:01:07 2025 GMT
Subject: CN=93a4638e52de19590fc5ee31f554ffba6a4a5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:84:6f:76:25:fb:93:a9:4c:2a:93:4f:ea:
43:d7:93:2a:db:b9:42:e7:70:65:cc:f6:98:f5:47:
bb:89:9c:05:a9:f1:28:18:b4:82:6c:41:6c:7f:a3:
55:87:df:4b:ff:b0:3a:2f:4d:ab:3a:e3:0c:84:e8:
a4:ce:24:46:c9:d2:5f:16:51:ae:85:c6:ef:2d:4d:
0d:05:d1:c3:b3:85:78:aa:e1:36:cd:e2:e3:85:13:
2f:9f:0c:6b:af:1c:f4:da:25:85:02:be:a7:a3:ea:
a3:87:68:84:3e:a9:49:93:a2:30:5c:fd:38:5b:3b:
ff:54:d2:44:22:14:99:8d:b2:77:e2:2b:b5:63:b4:
0c:79:3a:2f:14:23:0d:3e:28:f7:54:48:a4:6f:52:
fb:76:eb:bb:51:31:b7:e8:e0:88:3b:a0:2e:f0:d5:
e9:6e:0d:05:83:7d:62:ed:a1:fc:cb:b7:b2:4f:d8:
de:99:74:ee:7c:19:5a:37:09:86:b7:47:6c:e0:12:
2f:b4:3c:a2:0b:e2:0e:35:31:88:9f:34:80:3f:bb:
1c:41:b5:4d:59:a6:38:5f:91:5a:a6:58:a9:00:fc:
5d:3c:2e:90:8a:37:f8:97:2e:67:8f:56:66:ee:71:
79:4c:9d:21:ca:ed:24:fc:90:4c:30:b2:10:6e:86:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:63:8E:52:DE:19:59:0F:C5:EE:31:F5:54:FF:BA:6A:4A:50:46
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:d5:47:2e:a9:0b:60:7e:07:c3:d2:23:47:8d:9a:d0:8c:
46:f7:45:97:6d:74:7d:e8:b5:49:13:c1:d5:74:56:9e:3b:52:
64:83:0a:08:d3:12:5e:d8:c8:29:9b:eb:bf:14:1b:d7:bc:67:
d7:49:32:dc:ad:84:2f:39:16:94:88:5d:ef:bc:89:03:ee:76:
40:0c:0c:7a:74:bb:a1:7f:7e:59:5c:4a:f6:14:9f:1d:c0:82:
8d:e9:97:49:1a:10:dc:67:2c:0a:27:e3:55:d4:1c:b0:3f:30:
56:57:d4:c2:8b:5d:7e:19:65:a1:cb:29:ae:19:a2:7f:2a:6e:
82:56:83:b1:bb:fd:60:9a:8e:02:7e:fe:8a:38:46:9a:98:c7:
39:f8:f8:6a:bc:22:98:e3:ec:f7:31:4b:e5:42:05:45:26:f7:
d2:7a:54:99:ae:a4:f5:f4:a3:78:30:8a:da:b5:4f:e6:74:8a:
39:1a:f2:f1:ff:c9:73:23:bf:81:aa:8c:69:f3:c1:b3:ca:30:
f0:b7:2f:a7:15:df:f4:ad:c3:4e:e8:26:ab:7e:d6:58:15:01:
ce:7d:c4:39:75:9e:10:9d:c7:11:27:04:da:cb:90:83:e4:17:
b6:e1:b2:36:d1:84:1f:24:6e:c1:e6:aa:bb:8c:b3:9d:77:ff:
bb:58:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:18 2025 by rpki-client