Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft (raw, json)
Hash identifier: gL1p34/2NoWgd18O8Z6W6pS7noi8yZwUz92aVTxKF20=
Subject key identifier: 85:CC:2D:60:91:E3:01:AE:02:6E:AA:28:E1:8C:27:69:9E:59:1A:49
Authority key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
Certificate issuer: /CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Certificate serial: 019511A25FAA183BB5DD8AA9196F1A464947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
Manifest number: 053B
Signing time: Mon 17 Feb 2025 02:00:08 +0000
Manifest this update: Mon 17 Feb 2025 02:00:08 +0000
Manifest next update: Tue 18 Feb 2025 02:00:08 +0000
Files and hashes: 1: Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl (hash: 40qBRy21ceCJPcwYe+rVNifmcbQjwtqOxobWA60GovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5f:aa:18:3b:b5:dd:8a:a9:19:6f:1a:46:49:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Validity
Not Before: Feb 17 02:00:08 2025 GMT
Not After : Feb 18 02:00:08 2025 GMT
Subject: CN=85cc2d6091e301ae026eaa28e18c27699e591a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:ea:4c:15:1f:22:61:5c:36:c9:4f:c6:ea:
1a:2b:9a:a3:cf:60:4e:41:fc:91:90:35:fd:42:04:
6c:6a:5d:2d:03:a6:c3:1a:66:58:f8:51:c8:bc:e5:
a6:dd:b9:38:84:8d:30:c2:d5:9f:61:04:43:8c:a3:
be:75:3e:c7:6e:aa:8c:7f:25:72:fb:47:b1:6a:e3:
c1:fb:61:11:ac:de:9b:69:e5:60:fd:48:0f:b7:6f:
ef:11:95:09:a4:9c:a8:48:13:cf:21:54:b6:4b:16:
75:a4:07:18:62:f9:ea:69:d8:27:87:e5:92:9f:4b:
34:3d:d5:66:54:87:f7:7a:c0:dc:28:97:5f:78:81:
cb:f7:e9:f8:27:76:74:cd:73:61:1c:73:71:bb:44:
e0:e7:7e:81:14:e1:8c:b6:33:55:8b:5a:8c:7c:86:
0a:7c:35:fd:15:e3:29:2d:f9:f3:9b:5b:ac:9a:66:
e1:62:d9:1a:82:5d:ba:0b:6b:68:84:5d:dd:40:0b:
ed:81:9c:b5:72:63:25:90:67:a5:36:c2:06:db:5c:
93:f3:be:e4:77:b2:89:45:00:8d:ce:99:82:df:65:
9a:83:2c:99:7f:5c:b5:d3:54:0c:07:3e:23:f8:70:
1b:87:32:f8:2c:e2:a6:a0:24:74:73:74:8f:40:82:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CC:2D:60:91:E3:01:AE:02:6E:AA:28:E1:8C:27:69:9E:59:1A:49
X509v3 Authority Key Identifier:
keyid:0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b7:19:3c:d0:7b:80:5b:f8:25:91:2a:2e:0d:c6:06:5e:8b:
45:fb:30:64:59:74:96:0b:53:a6:9b:f0:be:fb:51:e5:49:b6:
ea:e5:b0:c0:e0:1a:c5:98:46:52:81:46:aa:0a:a0:06:71:01:
0a:d3:80:05:45:4d:a0:21:9f:48:34:5d:3a:a4:ea:f2:3e:ad:
45:3a:85:a6:54:b7:b3:de:75:0c:6d:d1:29:28:b8:a2:37:8a:
1f:1f:26:32:b2:bb:9b:80:5b:2d:1c:94:b6:6e:bc:c1:35:fb:
eb:61:68:72:b3:70:fe:9e:75:6c:05:d7:24:3f:87:0b:27:01:
73:69:7e:fa:e2:17:a8:25:d7:1e:61:ae:5f:64:ee:e4:2c:b9:
f3:39:24:67:83:d3:c4:ab:fa:a4:4e:2f:c3:fb:81:11:a7:24:
83:77:f7:6e:d9:77:86:f7:77:25:f3:82:47:44:8f:45:b2:c3:
c5:c8:7e:38:31:77:20:7b:e8:51:65:0e:f6:d2:84:5e:86:b8:
06:02:45:f0:f6:aa:37:95:5b:9c:72:7c:3c:f6:0f:d6:96:c4:
2e:50:a0:c8:c4:3b:3c:38:75:c0:e6:69:c8:8b:f7:bd:01:79:
4d:0d:73:b2:f7:48:a7:da:69:c3:b2:d1:ca:7d:de:0f:f2:c0:
bd:36:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:04 2025 by rpki-client