Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: ZzmGLHl4+o4BeVhcgqwldBG+VrZLbZTMa7teKlN6uls=
Subject key identifier: 17:DB:CA:D5:0E:59:1F:B3:1E:B4:A5:0E:32:A1:45:F0:28:2B:6E:D0
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 0194C3874ADE56556EE4DBE37253CA8974E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 10DF
Signing time: Sat 01 Feb 2025 22:00:11 +0000
Manifest this update: Sat 01 Feb 2025 22:00:11 +0000
Manifest next update: Sun 02 Feb 2025 22:00:11 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: ZXqGJDUzqS61HmL83V4c5BO+hTxKMyGwdr9O2K34tLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:4a:de:56:55:6e:e4:db:e3:72:53:ca:89:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Feb 1 22:00:11 2025 GMT
Not After : Feb 2 22:00:11 2025 GMT
Subject: CN=17dbcad50e591fb31eb4a50e32a145f0282b6ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:75:0d:04:66:a2:5b:5c:4d:65:31:62:46:
9d:38:03:72:03:c8:81:a1:45:94:10:e8:1b:72:4b:
0b:f4:a6:07:01:86:4c:d6:bc:db:16:7c:34:8b:2c:
f4:ff:76:d6:65:ff:e7:92:b9:f5:b3:f7:07:ea:e4:
52:e0:f5:f9:60:97:1c:33:00:3d:54:54:f6:c3:3d:
c9:4a:9e:e7:c5:3d:9b:03:60:b7:7c:bf:d4:66:c1:
57:97:5b:99:fc:85:10:bb:bf:c9:25:86:54:50:e9:
e2:72:5a:9f:2d:68:bb:e4:d6:c7:df:c8:ac:59:64:
3d:db:87:f9:81:06:de:ea:5e:c8:ed:0a:23:80:65:
34:4b:2f:16:ac:b3:f8:02:b4:63:c0:c0:66:7a:a2:
a0:79:46:b8:59:a3:22:33:a3:ba:6d:c1:e5:0e:83:
b1:96:16:aa:f4:0b:f9:f7:10:f4:a8:c7:28:a1:fa:
5c:e2:c1:54:0e:df:5d:d8:9e:e1:e2:74:06:d6:a1:
90:31:15:14:50:ea:a6:a7:11:f5:e8:98:fa:5b:ae:
be:a4:6b:bc:6a:2e:c5:1c:49:92:2e:dc:fc:07:e8:
ca:80:6e:04:7c:ab:5b:a5:fc:bf:a0:98:f6:08:d6:
fb:dc:ba:36:95:9e:f4:37:be:4e:01:cf:e7:6d:e7:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:CA:D5:0E:59:1F:B3:1E:B4:A5:0E:32:A1:45:F0:28:2B:6E:D0
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:46:ad:8e:4b:a8:1a:8a:d8:71:ab:e4:77:39:4c:af:04:96:
61:38:78:30:7e:f5:be:bb:84:53:78:08:28:40:44:0c:ca:91:
39:cf:31:a6:60:27:8e:2f:05:d1:c3:f9:03:8a:d7:0e:7e:2c:
83:fe:09:6c:50:f9:4d:57:87:09:f4:1c:1e:fa:04:e6:9b:98:
d6:b1:6e:8a:96:c4:99:f8:9f:ae:d9:93:a8:41:1e:7c:22:28:
9c:e4:2b:1c:2a:1f:dd:dc:50:45:5f:e3:ed:ed:f4:64:87:95:
26:a7:d6:16:04:71:3a:9e:b4:0a:dc:0a:00:6f:43:e4:5a:12:
44:44:92:97:e8:76:b7:53:57:50:16:df:2f:4e:63:b6:e3:0f:
e7:a8:cd:66:76:8c:ef:1e:dc:b2:21:2e:e7:d8:e9:9f:2f:fe:
b8:76:0b:a1:72:6f:8e:e9:0d:f2:c4:4b:08:77:17:41:d2:55:
0f:e4:16:ac:97:b4:be:8b:2f:b1:f4:78:9e:94:04:26:f5:b3:
3f:f7:c1:05:c3:12:ba:62:bc:01:a1:d4:5f:ee:7e:6f:4f:0b:
d8:15:ed:93:94:c2:1e:f8:e4:e5:be:3d:99:0a:f2:0f:a1:4b:
12:63:a6:a3:e3:e6:4f:4c:d2:2a:77:82:65:19:48:42:6b:3a:
3e:e4:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:54 2025 by rpki-client