Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: sLuij1kagiO5fK1A41KfXM185ZbRIFI7qp3Bgv6//7E=
Subject key identifier: D7:3F:8C:C7:16:B6:F9:17:18:68:02:E5:9B:F1:A9:A4:36:54:1E:1C
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0194BA849E9C0C5B716C8F6C1A26E6A34B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 04:00:41 +0000
Manifest this update: Fri 31 Jan 2025 04:00:41 +0000
Manifest next update: Sat 01 Feb 2025 04:00:41 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: VZoCQjODSv9JwUmrIgrntUqTzd+bga05lVw/g8CzzxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:9e:9c:0c:5b:71:6c:8f:6c:1a:26:e6:a3:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Jan 31 04:00:41 2025 GMT
Not After : Feb 1 04:00:41 2025 GMT
Subject: CN=d73f8cc716b6f917186802e59bf1a9a436541e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:ba:c4:59:8c:66:91:36:ce:6a:24:5c:59:
cf:7e:44:b3:06:a6:48:29:d8:e5:15:e4:36:dc:1f:
7f:04:33:80:3f:a1:a0:e4:af:ea:f4:d5:86:85:bb:
50:3d:c6:9f:a5:bd:53:7a:24:f0:01:9c:cc:2e:a4:
13:0d:1d:14:09:af:20:32:0f:1f:04:45:28:65:8c:
f1:dd:15:97:65:4b:91:11:59:69:99:a6:74:f6:7c:
7d:53:77:6f:09:c4:16:20:51:61:3a:9b:7b:f2:2f:
a3:ac:76:a0:01:cd:0d:6c:29:2f:96:b7:05:e9:8b:
19:52:86:87:e7:95:77:23:c5:e7:f0:6d:75:92:6d:
44:ae:e9:70:d7:0e:1c:ca:d4:b7:9c:bb:b9:c7:dd:
6b:36:66:da:d3:62:0e:b0:16:16:24:70:d5:6a:e3:
cf:1a:25:13:58:8b:42:0a:57:a2:b4:64:21:4e:f9:
af:cd:2a:64:7e:81:c9:58:85:e6:cd:c1:27:78:2e:
75:eb:d4:46:e8:b1:71:af:57:fe:15:31:3c:dd:92:
f2:0d:6b:b8:ff:63:81:50:2c:64:52:01:b7:21:38:
be:c3:ce:2d:e5:27:50:de:81:3d:84:10:60:b4:a9:
f7:0e:4c:9b:c0:67:d6:4e:ca:93:ba:44:85:08:2a:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:8C:C7:16:B6:F9:17:18:68:02:E5:9B:F1:A9:A4:36:54:1E:1C
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ec:e0:35:75:c0:31:16:a8:e6:ae:a2:bb:b5:f9:e7:7c:05:
d5:c2:d0:1d:6f:ec:4e:31:d0:26:6a:82:bf:13:d7:6f:2d:54:
73:83:9b:96:ba:1d:c5:b9:7e:6f:32:df:b1:3e:9a:d6:98:1b:
c7:ed:08:ab:98:58:12:3e:b5:b4:2d:93:a1:6d:de:d0:ad:3e:
a0:09:a2:b9:cb:21:90:de:d9:10:a3:27:18:27:69:ba:1c:04:
47:9c:62:58:1f:49:42:c9:f0:76:b2:06:60:93:7f:81:9e:31:
9d:4c:14:54:42:50:ec:8d:0b:e8:77:21:7c:88:e4:12:0a:e1:
08:d1:07:f9:23:c4:77:62:d2:21:b5:16:c2:ea:8f:1c:d8:19:
cf:81:c0:37:42:1a:ff:ee:2b:c9:46:81:a2:03:92:da:0d:ea:
7d:bc:34:f7:59:5b:d4:a0:2c:7f:44:8e:01:f4:91:42:d2:65:
0d:cc:2d:22:60:c9:9d:1a:8b:f3:00:3f:1c:96:c9:6b:74:10:
cc:13:71:ef:2e:38:cb:b0:a7:91:07:6b:ff:2d:b2:35:5a:d7:
8f:38:a0:be:00:03:b9:5a:88:f6:de:8b:6d:04:c9:c5:66:30:
b5:d6:2e:70:89:c4:55:37:4a:3e:00:90:ce:5f:15:3a:eb:c4:
02:e4:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:26 2025 by rpki-client on console-fra.rpki-client.org