Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File: Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier: V+qEc9DXIbMDAEmB2J8N8oKY8VRM/7k8sssLWXlU8rM=
Subject key identifier: 0C:04:96:D1:BF:FD:12:65:2B:B8:7D:9D:AF:6C:20:D4:13:6D:FE:54
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer: /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial: 019510C71F10A6CEA03FF4618DD9BC4B43B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number: 0BC1
Signing time: Sun 16 Feb 2025 22:00:39 +0000
Manifest this update: Sun 16 Feb 2025 22:00:39 +0000
Manifest next update: Mon 17 Feb 2025 22:00:39 +0000
Files and hashes: 1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: NH9Y8fvQyM1WicwzT78ewm858uYSI4mo27Ill30KzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:1f:10:a6:ce:a0:3f:f4:61:8d:d9:bc:4b:43:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Validity
Not Before: Feb 16 22:00:39 2025 GMT
Not After : Feb 17 22:00:39 2025 GMT
Subject: CN=0c0496d1bffd12652bb87d9daf6c20d4136dfe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:50:4d:9d:57:e3:ca:5a:8f:6f:b3:cf:d8:c5:
e2:a5:53:51:e4:9b:9d:05:ab:ed:37:0f:da:21:ab:
8e:15:2c:57:50:c9:05:78:59:9d:dd:bc:5b:ba:84:
4b:bc:d8:9b:6a:2c:1d:f2:4f:a7:6e:8b:87:a2:5c:
b2:0a:1e:3f:45:c7:9a:39:ea:b1:7f:8d:88:8a:77:
ce:c1:10:4e:45:ed:b1:39:5a:e4:1e:25:3e:d1:d4:
56:81:27:b3:69:ed:5b:72:8c:6e:50:54:dd:2b:3a:
64:ae:61:0e:97:93:47:25:39:39:d5:d5:db:67:bd:
c9:dd:1d:95:23:49:3c:a4:b2:5b:66:9a:89:1f:f7:
22:49:cc:85:58:ef:46:31:16:c9:48:52:e3:ce:2c:
f0:0f:94:e4:a2:07:79:5a:44:2a:56:63:6b:2c:a8:
f0:87:ed:8d:bb:f7:c8:a4:03:7b:6e:49:24:7d:76:
13:11:70:3d:ba:ea:d5:20:a2:44:ef:83:46:b9:a1:
d6:aa:50:88:bc:e6:47:db:26:c5:b3:f8:e7:7e:59:
ec:e6:a4:10:77:a7:ee:94:3a:79:98:f5:99:a6:63:
19:e9:56:51:d3:2f:cf:43:f3:94:e3:70:66:9d:aa:
e4:34:da:fc:9e:27:4a:c1:47:6f:ec:23:a0:2b:a8:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:04:96:D1:BF:FD:12:65:2B:B8:7D:9D:AF:6C:20:D4:13:6D:FE:54
X509v3 Authority Key Identifier:
keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:e0:07:8d:45:f6:dc:82:ca:d1:be:4c:69:04:46:4c:e6:
18:4c:16:41:60:c0:05:05:1a:73:0f:57:d6:ef:02:22:58:a2:
2a:2a:e6:d1:4c:97:90:50:01:77:18:17:b1:3b:5e:ad:17:df:
70:f3:45:89:f5:ee:dc:1e:47:6f:b0:75:69:c7:2f:2e:aa:e4:
fd:4d:8e:3a:97:a6:97:69:06:23:dc:de:7c:f4:43:4d:fc:02:
8a:e3:a3:89:04:46:31:f9:ca:86:e4:4b:b4:76:bc:a6:c3:f4:
9b:5c:9c:be:42:50:8d:f3:bd:f7:e6:ec:b9:66:42:81:72:72:
7d:75:45:d5:ad:28:95:20:6d:1a:c5:87:38:88:6e:bd:64:3b:
04:ac:fa:fa:b8:61:fd:5e:13:5f:7d:7c:d3:4c:84:3a:fd:6e:
16:90:4b:f9:9c:5b:e0:bf:06:aa:a1:03:73:61:de:98:26:c5:
e8:e8:1a:3b:45:3d:44:1e:b7:20:59:5e:4a:99:91:3b:66:20:
35:9b:99:7e:6f:fd:61:5f:f0:89:57:a5:81:6e:0e:a6:f5:1b:
74:03:98:66:5e:9e:31:5f:63:45:3e:7b:54:5b:c2:ec:c4:cf:
5b:73:d3:60:45:73:a9:71:f2:e7:63:3f:3b:07:5e:35:54:73:
a8:96:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:06 2025 by rpki-client