Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: 1SNkoQAI1wSRwFcQfMt0p+7BgKYJXPQ82ZhwB+eW20I=
Subject key identifier: 75:4B:31:EB:46:13:B3:CF:4C:19:17:CA:9A:F8:81:DB:70:7E:BD:5D
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0194C42CA0BDE123BB69B400CF69239C46F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 01B3
Signing time: Sun 02 Feb 2025 01:00:46 +0000
Manifest this update: Sun 02 Feb 2025 01:00:46 +0000
Manifest next update: Mon 03 Feb 2025 01:00:46 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: nf4dole6tQzGqUqPdTrbH59r6uNRcN5sy463fRXg54Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a0:bd:e1:23:bb:69:b4:00:cf:69:23:9c:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Feb 2 01:00:46 2025 GMT
Not After : Feb 3 01:00:46 2025 GMT
Subject: CN=754b31eb4613b3cf4c1917ca9af881db707ebd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:4d:88:1d:f5:bd:dd:16:cb:de:a8:1d:8a:
04:5e:11:8a:5c:ca:24:3d:e1:73:00:0d:4e:47:53:
b6:b6:80:a0:cf:75:9b:44:47:ab:cc:7a:9f:a8:18:
4a:b7:08:12:06:09:f4:a5:28:10:85:16:db:1e:a2:
0c:ea:db:a1:36:73:86:f5:c4:37:38:c1:58:51:14:
e9:39:4e:43:f2:5d:76:86:4f:87:89:32:e5:b0:99:
b2:27:6c:df:ca:1c:42:fa:be:90:bf:20:6f:aa:37:
a0:5f:86:95:0a:f1:52:97:d8:bb:25:77:ca:0a:8f:
fa:26:ec:dc:00:e4:76:2a:b5:92:cd:0f:e1:83:23:
fa:17:44:2b:c1:db:55:64:ff:9b:39:56:4b:c7:b3:
3b:1d:e4:04:cd:87:ed:01:90:79:49:91:78:bc:c3:
13:9f:52:b9:c4:90:79:85:36:be:1d:1f:9e:f7:59:
6a:f4:04:a4:fa:cc:37:3b:22:e8:ce:e9:a3:e4:7d:
b9:c0:6a:e0:3c:35:fa:be:06:a6:5d:e9:c8:66:93:
d9:7d:42:a5:ae:e3:7c:35:48:e4:8f:67:7c:c2:c6:
bb:05:ad:0e:5c:32:e8:6e:5b:73:38:8c:04:af:3d:
eb:56:70:4c:ff:8e:59:4b:84:a4:bb:c9:8d:84:09:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:31:EB:46:13:B3:CF:4C:19:17:CA:9A:F8:81:DB:70:7E:BD:5D
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:44:03:48:6c:7b:52:37:b1:10:43:cb:8b:64:5b:3f:07:
47:25:99:a7:6e:1d:e3:2f:6f:bb:c3:f9:4b:80:1b:1e:89:b6:
14:3c:dd:91:0a:7f:e1:d5:18:3d:ec:32:ed:ae:c4:53:30:17:
55:7d:52:5d:62:37:03:7c:49:7b:33:d2:2c:52:aa:de:27:e4:
d9:e6:89:29:db:5a:99:9b:90:b4:de:f2:2b:bb:2a:35:15:32:
bb:76:1c:e2:53:40:b1:4e:4c:1e:4f:0b:b7:f3:4d:6b:ac:af:
9f:fd:19:77:4c:74:78:f6:89:91:1c:ed:06:b0:00:f4:e2:f0:
70:4f:e8:73:7c:40:37:05:de:56:1b:10:b2:af:f0:05:f4:83:
94:ff:99:66:c5:df:b1:d6:86:5f:ee:9e:01:61:9d:1a:84:30:
54:eb:4f:f6:39:96:ff:73:39:6f:2c:b7:0b:4c:c0:b3:23:74:
e4:50:02:49:e4:2b:c6:7f:58:d9:fc:92:4f:73:14:66:e5:de:
49:57:be:0d:64:58:09:c9:bf:5e:41:28:03:d6:1c:a3:e8:a8:
0e:2d:88:48:7f:7a:fb:86:5f:3c:00:30:ce:8a:23:8f:51:e2:
f9:67:5d:65:a0:35:f1:63:a2:75:e5:12:50:54:2b:c2:bf:f4:
d0:33:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:02 2025 by rpki-client