Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: K8JBwA6TdHlKnCTaJjt/xyMJqacX70jzUwhLXSqT6zA=
Subject key identifier: 46:84:C6:4E:20:5F:5E:40:D7:8F:DE:79:90:F7:6F:5A:E2:91:DD:F8
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 019510C7D3471BA73175375BA4A760A573A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0DE5
Signing time: Sun 16 Feb 2025 22:01:25 +0000
Manifest this update: Sun 16 Feb 2025 22:01:25 +0000
Manifest next update: Mon 17 Feb 2025 22:01:25 +0000
Files and hashes: 1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: aJD1yCGkBzxg8/DJbn3ffJLv8zKm37uhW/nFVC6mbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d3:47:1b:a7:31:75:37:5b:a4:a7:60:a5:73:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Feb 16 22:01:25 2025 GMT
Not After : Feb 17 22:01:25 2025 GMT
Subject: CN=4684c64e205f5e40d78fde7990f76f5ae291ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:b3:c0:16:cc:8e:14:d8:49:25:75:ed:44:
34:d8:6d:aa:75:5b:6a:69:a7:e4:04:7c:4d:57:0e:
51:24:87:ed:f5:c0:b4:5f:96:7e:80:cb:89:b2:38:
1a:f0:f3:01:99:1f:4f:c6:06:01:e9:b5:e4:8e:cb:
92:b0:28:18:2a:6e:a4:1f:b5:e8:c5:bb:84:80:b0:
6b:c0:f6:a1:cf:72:4a:20:ef:f1:23:a2:8c:7a:d9:
b4:0f:7c:f3:06:f3:79:6d:c8:5f:0e:4f:df:41:0c:
04:66:2e:84:54:ed:3e:8d:45:1a:fc:36:71:da:23:
ad:73:f5:7d:72:96:70:a4:be:5b:87:9e:e1:1c:ec:
2b:cf:44:df:4c:0d:2a:ee:98:0a:78:ef:28:d8:15:
fb:4f:b5:2a:d2:16:fc:7a:ea:22:0e:b6:ae:0d:68:
b5:58:61:84:af:0f:4c:c0:dc:73:0e:f8:fa:b1:bc:
36:7d:ac:ac:a2:aa:33:72:dc:78:28:9c:9d:ad:00:
d0:15:52:3d:a3:f8:c3:12:41:40:6a:94:9d:50:d5:
96:e4:a9:eb:2a:19:eb:0f:71:90:a2:9f:51:74:cd:
37:e4:f8:2a:76:c0:9b:aa:0d:b1:ae:14:26:67:7e:
cc:69:f6:0f:8c:da:fd:e9:7f:30:14:47:0f:c4:d6:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:C6:4E:20:5F:5E:40:D7:8F:DE:79:90:F7:6F:5A:E2:91:DD:F8
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:de:d3:ea:e0:2c:53:9d:b0:10:fd:df:51:e8:1a:53:31:ff:
c1:7d:7f:ca:f1:20:df:af:68:65:49:82:7c:58:c0:57:50:41:
a8:e1:d9:2d:36:14:26:a9:a6:d6:ca:cd:29:e2:4d:a9:01:41:
6b:51:d5:bb:8c:6a:c8:47:f6:90:c0:66:73:46:87:ee:72:21:
16:e2:a4:8c:54:5a:4e:3a:45:21:2b:79:51:8d:07:b0:a6:59:
19:4b:a1:0b:8d:bf:de:5f:8f:37:36:0c:c4:3a:8e:c0:fc:65:
af:64:40:87:c1:88:a1:d9:ca:60:91:ed:57:0b:93:04:9f:2a:
3e:01:a0:7d:40:af:89:a8:d0:a0:30:29:ff:12:3b:a0:c1:16:
c3:6b:8f:fd:3b:b0:4f:44:54:e5:4c:47:31:62:bb:89:05:68:
39:5f:30:7f:34:3a:ed:ce:77:37:f7:c0:7b:df:38:96:a8:c0:
61:71:e8:a6:79:7a:3a:51:99:48:48:98:41:50:4a:38:98:72:
84:d8:89:d8:b0:2d:14:fa:5b:0a:54:3c:ba:4c:49:bc:64:75:
cd:62:8a:f7:a7:c3:77:12:f7:2f:f5:9d:b8:99:68:1e:5a:59:
e1:ff:79:ae:ec:e2:a0:6a:b8:bf:2a:40:ab:3f:42:31:9d:a8:
d0:7d:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:06 2025 by rpki-client