Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: Z/cRbcPY27eDyLQz0rTgS/fr6UJ/Q0dJ3XgXe+6RYvc=
Subject key identifier: 6C:E8:00:A1:0A:CF:15:4F:61:92:07:2E:8B:65:ED:2A:D4:C4:08:23
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 0195116C0C918C6A1B90DF9155F3CD465613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 1301
Signing time: Mon 17 Feb 2025 01:00:48 +0000
Manifest this update: Mon 17 Feb 2025 01:00:48 +0000
Manifest next update: Tue 18 Feb 2025 01:00:48 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: cOH06C1vlrE7+LbDhYQwdPqs8IBehnnrD/E8czS0CzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0c:91:8c:6a:1b:90:df:91:55:f3:cd:46:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Feb 17 01:00:48 2025 GMT
Not After : Feb 18 01:00:48 2025 GMT
Subject: CN=6ce800a10acf154f6192072e8b65ed2ad4c40823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:3b:95:5a:f1:e3:43:c3:1a:4e:1b:11:59:
d5:20:b1:01:9d:e7:92:65:67:b5:a1:5e:66:bc:95:
c5:c1:4a:a0:9c:d1:43:c3:ee:90:db:b8:6e:8f:8b:
54:e8:ff:4b:1c:69:44:ef:43:33:72:0e:c8:32:73:
8b:3d:8c:17:a1:47:d0:66:1a:48:81:a3:97:15:c8:
e7:f8:e8:53:69:0a:47:09:5c:29:14:81:0e:01:22:
58:f5:2c:2b:48:8d:85:d0:73:8e:c0:81:0d:70:b0:
24:c7:e7:76:e7:91:e8:d0:40:9e:6d:54:fa:73:a1:
16:88:4b:12:e1:16:46:64:4f:f5:a8:87:9a:07:13:
82:28:cd:85:c6:70:42:4e:21:f5:ef:fa:67:fe:e6:
40:67:96:46:09:ce:bf:a5:64:1b:d6:ba:7f:17:65:
a8:d4:50:1a:78:27:b3:35:03:e8:16:2e:5d:2e:81:
a6:a8:d3:d3:80:24:ea:44:f9:a4:42:b0:d8:4c:be:
fa:29:b4:52:76:c2:f5:a7:14:35:c8:ee:f4:e5:c6:
fe:ea:b3:39:0b:3a:e1:d8:d3:34:ea:65:cc:cf:bb:
67:ab:04:56:25:52:6b:4e:82:53:16:ca:55:e4:e9:
02:ae:9f:d8:c7:fe:d8:9f:85:b4:d2:a3:da:f6:4d:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:00:A1:0A:CF:15:4F:61:92:07:2E:8B:65:ED:2A:D4:C4:08:23
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:56:65:5b:79:65:07:cd:77:8f:06:56:69:90:c9:79:82:
19:12:ab:ff:69:81:3f:75:0b:a6:c0:4c:61:54:55:70:c1:3a:
f2:5c:b9:19:33:ea:ad:8d:08:95:3e:ad:37:d2:af:d3:04:58:
c4:2f:28:3b:33:08:63:16:8b:e6:92:61:dc:5e:d0:73:1a:b3:
7a:35:0c:cc:f9:6e:39:8a:90:96:86:20:7f:e1:4a:be:92:2a:
87:2c:d4:bb:35:30:3a:83:d0:03:6c:f8:32:89:50:a1:f1:e3:
9e:b7:3f:55:5f:a1:7a:c5:a6:7a:28:b3:5d:4d:e4:a6:85:05:
67:d8:db:22:4e:ee:7c:f4:4e:64:a3:2f:fe:de:9a:5e:b2:e8:
7e:e8:e8:8d:73:5c:6f:ce:39:66:63:ad:03:fb:3c:6b:e4:2d:
8f:1d:56:07:23:d2:b5:4d:71:3a:48:8f:b9:d9:a5:c9:61:5e:
c5:b9:32:22:7b:3b:3f:51:dc:a8:bd:dd:b3:d3:51:ad:93:35:
b6:89:fa:11:6a:d2:46:b8:19:73:a0:24:bd:d8:c5:25:a8:f6:
e4:c5:61:20:2f:2b:51:43:91:76:3d:c8:17:56:f2:c0:13:4b:
a1:e7:62:f9:85:0d:66:f8:1b:d4:64:2c:0a:62:06:6d:14:f0:
40:83:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:41 2025 by rpki-client