Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: MQGd9R9hiqNdGtdxBG/R2jWs7ohoDquj9xZT2BkDI0o=
Subject key identifier: 07:DE:6A:F2:AB:A1:2F:94:08:F1:4B:E7:B2:C9:54:1D:8E:5A:27:B5
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0194BABB706B4706E19D1539B57B2C2288DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0538
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: PQyaTvJ3/0JpT4ghctKSW0FRR2L9oJ/jJFwZElEeJbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:70:6b:47:06:e1:9d:15:39:b5:7b:2c:22:88:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=07de6af2aba12f9408f14be7b2c9541d8e5a27b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:65:b7:ef:84:26:62:f5:63:3f:b7:a6:5e:
b4:99:66:fc:1e:b4:8d:1f:12:49:f2:7f:7f:ce:2d:
73:32:71:61:13:bb:11:43:13:4e:44:5f:57:b7:3b:
3a:3f:6a:cd:69:28:f4:a5:e1:b6:c4:cc:7a:27:7b:
a6:fd:2c:13:ce:24:47:3e:1c:19:98:55:62:83:c6:
55:5e:8a:ac:56:c5:3d:aa:fd:83:e9:ab:1f:ec:bb:
dc:d8:ff:46:ad:79:5c:b4:67:72:63:95:dd:17:b3:
ee:bb:fa:ed:a7:ef:c9:d4:7f:ae:12:3c:22:e8:dc:
a5:d0:e4:55:31:63:7c:ad:a4:04:56:0f:56:39:26:
9f:fd:7e:69:5b:d8:8f:b9:18:2d:20:33:c3:8e:44:
b9:0e:fd:46:ae:c2:7e:cc:ab:ea:a6:17:8d:c0:f5:
f7:25:46:a6:d0:94:19:37:8d:03:66:b2:63:33:9b:
87:0c:b9:ff:08:d9:9b:b6:e0:4a:0e:35:6d:63:b0:
d4:00:40:ba:17:50:c8:90:43:4b:09:fb:73:9e:5c:
38:4a:de:d4:76:e0:c1:75:b2:7d:0d:7f:de:fb:92:
a0:ea:5e:fe:31:ff:fa:a6:5c:18:9f:bc:bf:93:5e:
a8:73:41:d1:b1:fb:fb:df:73:35:c7:d9:3e:b5:b4:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:6A:F2:AB:A1:2F:94:08:F1:4B:E7:B2:C9:54:1D:8E:5A:27:B5
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:9f:10:6d:4b:d1:08:3c:b3:00:90:00:8f:e1:81:50:31:
23:d7:be:33:d4:e2:fd:d7:df:38:a5:88:01:01:1e:09:37:4e:
e3:d0:9a:bf:ca:af:b4:13:81:97:23:54:24:54:43:0f:7d:73:
4c:87:0b:86:49:14:88:f3:3f:96:34:79:c5:39:6c:b0:ad:2c:
1b:dd:4e:45:8c:37:90:94:a7:0a:30:fe:19:99:0f:25:3b:aa:
3e:85:02:6a:b9:ed:53:a4:c2:0a:85:ab:0f:37:cf:4c:7f:82:
11:d2:cf:43:12:3c:a1:40:d2:6e:c7:b7:df:cb:bd:e5:47:d3:
7e:08:38:ee:4f:39:5a:72:c1:75:bc:2e:d4:f4:a3:90:b7:c9:
bf:78:2c:5d:94:63:a2:a6:01:c3:1b:f8:f5:68:13:72:6e:98:
38:3f:a9:31:95:fc:4a:0c:85:b7:fd:bc:f1:3d:f4:f6:37:4e:
05:7a:b3:b0:62:8b:8a:be:a1:7f:37:69:d8:0e:8e:48:13:a7:
e4:ab:2a:71:2a:9a:7d:46:cc:f0:43:62:a8:8b:42:e3:e6:d9:
a3:67:a9:b0:d5:b3:04:fd:99:d2:42:d7:21:fe:ce:2d:fb:90:
ce:2f:a5:83:da:1e:75:a1:e0:27:4d:38:46:b3:04:f8:b5:4f:
e1:53:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:15 2025 by rpki-client on console-fra.rpki-client.org