Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: LrSgg8xongyhbuEDje3iQKskxZ0PxcSvZ1lJdmXbbjo=
Subject key identifier: 69:1C:7F:02:D8:FC:BD:D1:9C:B7:15:87:D2:7B:DB:D7:03:DA:1E:03
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 0194BA84456FA86DA462452932247255AB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 0385
Signing time: Fri 31 Jan 2025 04:00:18 +0000
Manifest this update: Fri 31 Jan 2025 04:00:18 +0000
Manifest next update: Sat 01 Feb 2025 04:00:18 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: k9Gph+P6VY1HpTlsT/rcSzv1v8ZAmmrYMwPqbibomKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:45:6f:a8:6d:a4:62:45:29:32:24:72:55:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Jan 31 04:00:18 2025 GMT
Not After : Feb 1 04:00:18 2025 GMT
Subject: CN=691c7f02d8fcbdd19cb71587d27bdbd703da1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:a7:dc:99:2d:11:7e:8a:52:ab:d9:6a:72:
90:5a:5b:e8:b8:e7:ea:d3:86:2f:5a:cf:f1:f8:34:
45:1d:63:08:77:85:2f:f4:37:13:ec:f2:49:9b:de:
98:7b:40:96:04:d9:09:54:9b:6f:ed:17:d1:7d:26:
b7:d0:6f:c9:46:d3:ac:2b:b6:d4:75:6d:ea:10:57:
84:0e:21:dc:b7:74:a9:e5:6d:3a:4c:ee:e3:63:8c:
1d:9f:fd:19:fb:f0:7a:32:91:87:40:65:b9:f7:63:
cb:9b:03:41:8d:b8:b8:a3:35:fe:99:4a:bc:c0:ef:
32:17:62:87:5a:11:ad:9a:d6:30:4e:6d:67:c1:fa:
9d:d7:90:d2:0a:00:8b:6a:37:c4:7e:70:d0:32:e7:
3f:36:90:53:d3:75:51:71:e7:1d:04:16:86:2f:97:
b4:d0:d9:ce:df:99:0e:97:2f:62:a1:b1:eb:25:af:
32:2e:b4:ae:d4:d4:f4:e4:a3:8b:44:cc:d2:e4:37:
24:61:47:e9:34:26:cc:0f:42:af:34:f5:22:3c:03:
d7:83:a3:80:65:d0:6c:e7:75:d8:5f:da:52:a6:ac:
87:9d:0e:f7:61:2b:b9:80:94:62:33:d9:6d:0c:43:
0a:01:4d:dd:fa:1e:46:d8:6b:52:84:3b:8f:61:d3:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1C:7F:02:D8:FC:BD:D1:9C:B7:15:87:D2:7B:DB:D7:03:DA:1E:03
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:29:3b:31:85:a2:31:38:0e:3e:b1:79:e6:70:fc:9e:9f:65:
7b:b8:f0:8c:09:ec:97:4c:8d:e2:d2:f8:16:08:5f:3e:b2:f7:
33:c0:8e:bd:0d:ae:60:64:6e:9d:41:c4:0a:2e:18:93:e8:8a:
e4:08:39:72:6c:07:1f:a2:b3:bd:e9:63:ce:63:0c:65:27:5c:
9d:e6:fb:c4:6c:36:ff:4f:4e:7e:f1:65:a6:b5:10:5d:b4:9f:
be:1f:a0:37:14:a4:97:77:3c:b8:f9:a4:30:84:14:c2:f8:ce:
df:6a:06:fc:50:94:b4:2e:63:50:4f:70:0a:bf:a3:02:8e:f0:
cb:74:2b:a3:74:f1:15:32:f8:bd:6d:45:ac:40:0b:6d:41:9b:
3e:4d:21:31:ad:c3:fa:5b:3f:00:d8:17:aa:ae:fe:12:bd:f3:
f1:25:f7:bf:7c:35:62:d3:ac:86:41:e6:cf:f2:f6:70:8b:bf:
b3:73:e8:8d:c1:35:8d:db:17:42:01:50:90:a8:e8:40:4b:27:
87:65:48:f6:6b:f4:d9:9d:27:c5:98:6e:6a:62:99:87:f9:f1:
c9:38:86:67:2c:7b:fd:b4:48:b0:8f:18:d2:9d:d5:0d:9b:9d:
ef:95:42:7d:e0:e7:82:a3:26:f1:b8:62:e9:9d:01:99:51:d3:
53:bd:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:14 2025 by rpki-client on console-fra.rpki-client.org