Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: 718Sp14IYHsNotsBzaTneF9C2pvkHxOb8v+si4cqDaE=
Subject key identifier: 8B:66:87:63:B7:7B:AE:92:53:F0:D6:BE:97:58:A4:A1:4F:38:E6:8D
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0194BBACB071BA5FF6E6CBABB5263374663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 01
Signing time: Fri 31 Jan 2025 09:24:04 +0000
Manifest this update: Fri 31 Jan 2025 09:24:04 +0000
Manifest next update: Sat 01 Feb 2025 09:24:04 +0000
Files and hashes: 1: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: kaUDWhhnyKlvw7pdZ5T39FyviTXMdOpohbUMDRam0K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ac:b0:71:ba:5f:f6:e6:cb:ab:b5:26:33:74:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jan 31 09:24:04 2025 GMT
Not After : Feb 1 09:24:04 2025 GMT
Subject: CN=8b668763b77bae9253f0d6be9758a4a14f38e68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:89:25:3c:0d:90:e7:fd:37:73:0a:62:79:
17:eb:68:b1:f6:0a:dc:2c:3a:9d:1e:52:7b:24:2d:
7a:41:31:08:b2:c9:98:85:b8:8d:7f:46:75:db:23:
48:81:c5:69:6f:83:ed:95:35:9a:75:ce:49:d3:f2:
9c:08:71:20:8d:8a:cb:d5:9a:80:30:8c:ba:67:65:
fe:f8:6e:07:a8:a2:52:8d:c6:50:37:9b:6e:f5:1a:
d1:62:44:3d:28:fc:f0:92:0c:be:1b:9f:00:e3:4e:
2c:f4:92:e6:10:dc:27:ca:1b:26:62:cc:cf:da:e2:
0c:02:03:65:25:63:01:4a:8a:55:0f:0a:59:24:09:
5b:ac:b3:4c:6c:8e:60:ec:79:9a:a0:4c:68:b9:0b:
80:07:a6:71:fb:c7:6e:37:64:d4:1e:a7:ed:4c:8d:
49:b7:f0:f6:18:a2:24:d5:2e:e4:8b:2d:a6:ed:5e:
00:87:44:70:9f:bc:5c:33:de:b5:35:c7:53:32:34:
e8:41:69:8e:c1:0e:f0:fd:14:c1:00:6e:82:05:3e:
37:1d:ce:d4:63:ba:09:3f:04:82:a0:48:e0:73:06:
df:43:2f:94:70:b0:4a:4b:23:3d:6a:0d:a7:1e:0d:
59:89:12:6a:d3:5c:6d:e9:5a:2e:c4:6a:8b:18:2f:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:87:63:B7:7B:AE:92:53:F0:D6:BE:97:58:A4:A1:4F:38:E6:8D
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:53:ed:cf:4e:8e:06:0a:4a:ec:52:76:4f:f6:4e:05:08:af:
ff:d2:37:2a:ed:e0:80:a8:ee:1f:42:21:f7:8b:a8:82:e1:86:
b1:c4:e4:c6:7d:12:f5:58:48:1f:36:0d:53:eb:98:c1:5d:f5:
ef:69:65:c0:5c:00:55:1f:81:4f:4f:39:9c:18:6e:92:19:f7:
e6:07:b5:e4:fc:a0:2b:81:a2:df:1d:49:3f:be:ca:f7:01:7d:
c6:9d:dd:c4:8b:05:ea:fd:2e:6e:da:c5:d9:ac:88:81:cd:2b:
36:d7:6c:f4:88:d3:65:50:33:4a:38:52:66:0f:8e:66:a1:ad:
1f:34:e1:35:95:db:3d:6f:62:80:70:89:b2:2b:d6:c1:55:2f:
7e:c3:79:92:3e:28:60:e9:72:fe:10:01:cd:41:21:87:c7:e1:
9b:b6:5f:78:cf:13:8f:17:2b:23:6f:e3:82:91:6c:66:34:73:
2f:15:29:fd:bc:98:97:53:70:80:d5:07:ca:2f:c2:fc:b9:4f:
3d:70:d2:7b:fe:17:2b:ae:32:c8:db:d1:8b:6c:c5:76:d1:23:
2b:c8:ff:bf:77:1c:06:36:8f:63:16:31:29:02:a4:f9:b8:6d:
a3:3c:14:f4:19:37:6b:c2:45:2f:04:2b:78:ae:ac:cb:22:d6:
49:f6:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:36 2025 by rpki-client on console-fra.rpki-client.org