Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: WAJo8cW6lb52vKXUPrUvOgOS3M74j7Y1sQBRkZPQ+ko=
Subject key identifier: A9:6F:74:F4:4F:87:1F:AF:52:FC:7A:2E:1B:B4:99:BA:DE:00:F4:D3
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0194C3F5EDC65F4802DFD4BB092D9D1EBC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: AC
Signing time: Sun 02 Feb 2025 00:01:01 +0000
Manifest this update: Sun 02 Feb 2025 00:01:01 +0000
Manifest next update: Mon 03 Feb 2025 00:01:01 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: JZgykLB3DzPTVpHzdRGxVcN09Nvwt0h0HYIut4Z/MQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:ed:c6:5f:48:02:df:d4:bb:09:2d:9d:1e:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Feb 2 00:01:01 2025 GMT
Not After : Feb 3 00:01:01 2025 GMT
Subject: CN=a96f74f44f871faf52fc7a2e1bb499bade00f4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:a7:48:cf:f8:dc:2c:64:7c:2f:4e:12:01:
7b:d4:1a:38:73:c1:e1:1d:e9:47:c9:29:0c:e4:83:
b4:7a:94:37:57:1c:aa:ac:bb:33:10:1d:06:b5:14:
24:f6:98:71:ff:df:18:ec:a0:b3:06:d8:df:d3:a0:
cc:b4:5b:8e:7e:84:67:0e:1a:7d:c5:22:6f:5d:72:
9d:24:ca:e7:be:f5:b6:ad:8f:cd:0e:d3:7a:f5:c4:
27:cc:bb:4d:a0:a7:df:cb:c0:0d:7b:4a:0d:92:b4:
a5:dc:cc:97:5e:b6:fe:ae:67:64:e4:b5:0e:48:30:
4f:d2:bc:cb:bf:c1:d5:90:60:e5:a1:ba:68:53:d6:
43:8a:07:91:3f:9f:9e:1e:f3:c4:08:a0:c3:b2:58:
28:ec:dc:9e:d9:63:85:68:a8:88:b6:4d:3a:3d:02:
2e:29:07:1f:d4:25:a4:e0:f3:02:ab:23:b6:f8:96:
23:2e:2f:c6:85:b6:29:1b:ff:db:76:dd:8b:19:cb:
7d:56:0e:6e:f7:5f:89:fc:5f:e3:bc:c3:69:bf:91:
07:9d:95:3c:28:00:03:da:70:21:77:a1:69:88:b8:
1f:74:f8:0d:cd:c8:d9:eb:14:ee:b3:fc:5a:51:98:
4f:b8:a7:6f:9e:26:fe:61:75:2e:72:27:c0:02:de:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:74:F4:4F:87:1F:AF:52:FC:7A:2E:1B:B4:99:BA:DE:00:F4:D3
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ac:e2:d8:8a:db:3c:ec:b1:45:24:41:7c:3e:15:b5:41:db:
d7:1a:97:9c:8f:81:96:8b:95:6b:56:17:34:f2:7c:0e:83:48:
65:60:51:d0:79:76:30:b8:5d:92:a5:0c:14:72:10:96:7e:11:
7a:92:e4:7a:c0:8d:08:3c:24:b8:63:3d:6c:45:db:67:f9:b5:
f5:9b:9e:79:3a:72:35:e7:33:5d:4d:9b:c0:e7:b8:8c:cd:41:
0f:4a:92:40:58:03:13:ce:ee:f6:18:a6:34:d6:ba:87:91:ba:
a7:f5:e5:3a:a2:e0:21:17:9c:eb:c1:83:4c:ca:02:98:c2:99:
61:56:c1:c4:a3:33:99:ea:22:f4:40:ee:ba:21:ee:fd:c0:8f:
35:8c:43:a6:7e:2f:0b:73:68:39:f4:36:da:f6:b2:93:6d:0b:
b3:98:1b:04:54:a2:1e:64:39:cb:9a:a1:7f:d3:52:f8:7d:08:
7e:2b:59:26:7e:62:fc:c6:41:06:66:5d:ee:2a:4b:59:af:90:
68:a4:01:6f:bc:dd:28:44:05:54:38:3f:7f:e2:bd:86:9b:55:
cd:d6:dd:58:90:a1:2b:ba:48:d0:5c:c5:f3:db:4d:e3:30:6f:
39:f6:d9:55:aa:27:cc:29:76:e4:a3:ab:eb:49:9e:3e:33:d7:
d3:95:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:36 2025 by rpki-client