Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: O02oPDftjJ3vhOrhBEHTFj1nCSRamoppx0SvvlRbfqc=
Subject key identifier: C4:E9:B1:FA:DF:1C:E4:4C:A3:36:A1:07:5A:57:6E:06:58:79:99:76
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019512471FE7C8CEED7AB76C15D1FF2A0DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 031E
Signing time: Mon 17 Feb 2025 05:00:05 +0000
Manifest this update: Mon 17 Feb 2025 05:00:05 +0000
Manifest next update: Tue 18 Feb 2025 05:00:05 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: MPoh9b+7HTfgX6RkDuaSmzPYT+sL2WD9VUAhBn7L6gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:1f:e7:c8:ce:ed:7a:b7:6c:15:d1:ff:2a:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Feb 17 05:00:05 2025 GMT
Not After : Feb 18 05:00:05 2025 GMT
Subject: CN=c4e9b1fadf1ce44ca336a1075a576e0658799976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:17:17:ba:d7:9d:d7:4e:6a:13:c0:93:24:
f0:7b:11:d3:a4:1d:61:be:a3:6f:a3:a7:c8:18:a8:
67:1f:1e:9b:dd:73:ba:5a:46:79:8e:7f:99:54:e8:
98:a8:1b:b1:5c:00:19:4b:aa:02:d4:3e:90:1a:92:
88:7f:3e:d4:8d:a6:1f:10:1e:94:f3:43:14:2e:0d:
01:11:a0:4e:43:3a:83:ba:95:8e:78:f7:4e:53:0c:
38:1f:fd:d1:44:9a:bf:31:88:6f:73:db:51:32:05:
4c:07:45:f7:c1:6a:41:23:93:75:16:ca:4e:11:3a:
03:e8:68:96:3a:1f:48:7b:af:ad:18:60:14:9f:98:
cb:28:32:6c:85:49:1a:80:52:38:49:53:d5:c5:bc:
6c:54:33:24:38:28:4a:90:9f:17:bb:9f:ec:4d:79:
07:bd:86:38:66:01:40:af:f3:74:7f:b4:32:58:30:
b4:80:71:a6:8a:c1:8a:5c:d4:58:80:4f:88:cb:d6:
ba:0a:9e:4c:a3:c2:31:b3:1c:cf:c9:4d:c5:e0:3c:
96:98:52:42:40:cb:9b:0a:bf:6c:ed:0a:ad:7f:00:
2c:35:49:8d:4f:0f:fa:c4:86:18:51:47:1d:c8:02:
2c:95:02:81:e9:b8:22:28:ac:6b:3a:74:1f:3f:42:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:B1:FA:DF:1C:E4:4C:A3:36:A1:07:5A:57:6E:06:58:79:99:76
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e4:16:85:d2:ed:37:e8:d7:b8:ba:fe:a2:34:3e:7c:d3:1c:
5d:18:30:73:fe:6b:4c:1d:c4:3f:cb:31:db:67:d2:65:16:af:
52:af:4f:8e:3b:03:ab:73:a4:0c:c8:a7:72:8a:a5:67:8f:8c:
43:e6:cd:56:8e:e6:f9:bb:e3:05:49:42:ae:de:0b:11:99:8a:
b5:e7:09:37:ae:42:d0:d4:c1:1f:0d:54:05:3b:ee:2a:d0:1c:
32:30:05:b0:01:5b:5a:ca:b5:87:50:16:30:cb:23:90:81:5c:
62:85:c4:8e:b7:3a:e9:51:1c:72:f6:e2:19:60:1b:b5:c8:02:
94:4f:69:e2:20:92:8f:7e:23:5b:c7:83:cf:ce:c8:0d:1d:59:
09:da:cf:90:5f:b1:ab:06:45:81:ad:ff:63:0f:bd:6b:2c:76:
6e:5d:5d:44:ff:74:85:a7:45:1b:c0:f8:21:b9:66:da:0a:81:
c4:05:60:85:94:5a:c6:af:fe:4b:bc:f8:81:9a:0d:1a:c2:e6:
5f:d1:a1:86:8f:9e:c9:53:35:7f:2f:df:81:00:a2:fa:77:94:
33:98:c1:a9:45:19:f4:e3:74:23:ee:ff:81:aa:a7:1b:bf:77:
d7:c0:09:e2:10:7f:91:e3:d3:0a:50:77:04:b8:dc:19:40:9b:
24:68:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:12 2025 by rpki-client