Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File: 2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier: 917/STzVMGByOVXzXMCNvO/iYAVv7EGI5ayP6icFFUk=
Subject key identifier: 88:DC:F4:3F:D0:2C:1E:E8:2F:A3:23:9A:A2:38:F3:1E:E3:7F:9F:BA
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer: /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial: 0194BAF274988E0EC99310BE942E364B2B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number: 7B
Signing time: Fri 31 Jan 2025 06:00:39 +0000
Manifest this update: Fri 31 Jan 2025 06:00:39 +0000
Manifest next update: Sat 01 Feb 2025 06:00:39 +0000
Files and hashes: 1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: B9niCGUZb+H4RTWUj4Gc6KcNZQjeA8/13ikAaXhXXWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:74:98:8e:0e:c9:93:10:be:94:2e:36:4b:2b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Validity
Not Before: Jan 31 06:00:39 2025 GMT
Not After : Feb 1 06:00:39 2025 GMT
Subject: CN=88dcf43fd02c1ee82fa3239aa238f31ee37f9fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:fe:43:b8:b6:5c:c4:e6:d0:7f:92:63:e6:
d0:0c:9f:8c:45:28:e4:1e:3b:fa:69:fe:88:de:ae:
56:59:04:0f:6d:0a:5f:91:10:cb:4d:d8:95:b4:56:
07:3b:bd:66:ef:e8:54:13:ec:11:04:e4:5c:25:99:
c6:d9:c9:5a:6c:c2:6c:71:b2:61:60:75:59:ef:ab:
04:ef:d7:9c:d0:b7:e8:a2:49:f9:5d:56:65:af:82:
19:3d:27:ce:b6:cc:a7:84:5a:76:57:dc:1b:9e:1c:
be:04:2c:b3:79:6a:9c:17:e7:f0:0b:1e:00:fd:a8:
df:de:24:d1:32:be:f8:76:99:36:1a:6b:ca:a7:23:
86:f5:0a:3a:2c:fc:3c:32:e4:8e:9b:84:ef:f4:7e:
cd:db:c4:e4:9b:35:91:5e:91:db:ce:a5:60:a1:4a:
ae:37:bd:80:1d:1f:f5:1d:f0:d8:b5:b4:6e:27:3e:
78:de:5a:25:74:ac:3d:ba:32:3f:c1:27:43:e0:04:
37:af:43:59:de:b7:25:3f:31:4a:b6:a4:79:22:04:
a2:a2:c6:5c:dc:54:b9:dd:46:79:a0:2f:b0:bd:7a:
bc:1d:34:81:2a:fe:af:ed:82:2d:20:26:fa:3f:84:
a0:9a:2f:2a:15:b2:98:7d:4a:75:33:16:33:59:c9:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:F4:3F:D0:2C:1E:E8:2F:A3:23:9A:A2:38:F3:1E:E3:7F:9F:BA
X509v3 Authority Key Identifier:
keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:6f:09:14:ef:94:77:6f:4a:2f:4e:0d:06:c6:5d:8e:f5:
06:a4:13:49:37:1c:27:e4:05:6e:b0:82:8d:7d:d9:e2:39:2c:
30:ca:af:c2:4e:21:ab:15:24:48:ba:18:f2:aa:9d:23:95:38:
0a:e7:72:b7:e3:82:fa:19:ff:3a:28:14:c0:76:00:b1:d7:ba:
d5:3c:f8:40:0a:4e:af:eb:ca:07:dd:75:c3:22:df:dd:ba:fe:
06:78:f1:1f:86:8f:b1:61:d5:49:ea:3f:92:ef:58:68:6b:d3:
35:b8:30:2d:84:e5:0a:81:24:1d:c5:bf:c8:04:d0:ab:c7:9b:
4d:95:f0:e8:62:e3:1a:ac:74:cd:04:73:3b:e3:fc:f4:a4:7c:
0b:bd:a4:52:d5:60:5d:1b:51:9c:18:4c:6b:74:3d:98:1c:8d:
da:fb:57:e9:3e:b9:a0:be:03:25:a9:7c:54:6e:49:27:6f:ce:
09:a0:bf:34:d5:da:15:5e:64:40:c1:30:9f:d2:0f:f8:bd:cd:
4e:5a:75:96:0b:4e:8a:2f:0d:c5:8b:08:f8:a9:3f:a1:95:63:
cb:60:92:62:7b:21:19:cd:cd:99:59:11:46:e0:0b:0c:9f:40:
30:5e:84:48:13:3f:d6:48:4f:08:68:3d:23:be:7f:d3:83:39:
d2:34:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:31 2025 by rpki-client on console-fra.rpki-client.org