Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
File: ThDafpumSZaP9RoB5aLULyK35N0.mft (raw, json)
Hash identifier: XWSKPxeP+IECNTT8NJLbhuVNnHrOdYGdOarmCWssePc=
Subject key identifier: 14:07:02:01:12:63:8B:6F:96:48:43:94:67:D8:D6:F4:7F:75:78:94
Authority key identifier: 4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
Certificate issuer: /CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Certificate serial: 019510C726F852075E98158D41262A72EAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
Manifest number: 06FB
Signing time: Sun 16 Feb 2025 22:00:41 +0000
Manifest this update: Sun 16 Feb 2025 22:00:41 +0000
Manifest next update: Mon 17 Feb 2025 22:00:41 +0000
Files and hashes: 1: ThDafpumSZaP9RoB5aLULyK35N0.crl (hash: MQf6fagmMS2SgIkAEdV4KxXZ/DMme2hBSkYH31bxExI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:26:f8:52:07:5e:98:15:8d:41:26:2a:72:ea:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Validity
Not Before: Feb 16 22:00:41 2025 GMT
Not After : Feb 17 22:00:41 2025 GMT
Subject: CN=1407020112638b6f9648439467d8d6f47f757894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:3e:de:93:6e:57:97:94:4d:74:f7:fb:b1:
e6:77:94:1d:c8:9e:db:0c:6b:bb:df:43:a1:6e:75:
b0:fd:b3:a4:09:03:2d:07:9b:bd:62:99:9b:58:9e:
82:cc:24:88:43:71:d5:ef:48:36:99:c6:14:0f:57:
49:b8:f7:95:1b:7f:ae:c2:80:2f:50:60:22:11:e4:
3a:f9:cd:67:53:cb:d9:1e:6b:f1:90:2e:58:99:12:
8f:97:a1:e3:89:09:81:0a:ff:26:d5:8d:ef:59:1f:
cd:2e:df:9f:d6:27:31:e3:9f:39:b4:c7:7b:b9:94:
d5:90:06:93:79:57:14:8e:5a:45:28:7a:a5:83:95:
5a:cf:3b:ca:34:7d:f0:3c:96:82:10:be:98:c9:e5:
97:e7:b9:1d:37:e0:09:17:9a:9a:c1:09:92:73:5d:
d6:bc:d0:b4:a3:c6:d3:de:d8:aa:7a:85:f1:c9:2f:
ef:17:f7:c0:2e:4a:f8:77:1e:75:5d:e3:41:d4:72:
43:f2:64:5b:6a:63:c7:71:0a:e9:e5:5a:45:21:10:
8d:c5:4b:11:6d:15:67:65:cf:0a:51:c9:3b:bc:d3:
15:72:d0:2b:cb:8e:32:a1:c7:7c:e8:fb:93:70:06:
ab:bb:d3:44:44:a6:7c:e5:1e:2b:e5:cb:f6:6a:9f:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:02:01:12:63:8B:6F:96:48:43:94:67:D8:D6:F4:7F:75:78:94
X509v3 Authority Key Identifier:
keyid:4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:17:ef:22:8c:79:a7:3f:67:1a:2b:bc:25:36:85:df:10:
0b:c5:43:85:62:5c:01:ce:52:8c:a1:9f:18:6a:38:1b:7c:2c:
ae:77:27:90:76:a8:a6:b7:d7:0e:18:b7:d9:9f:b3:1d:b6:cb:
9f:42:15:b4:e9:20:35:e6:4c:8f:ca:9d:2a:67:3b:33:eb:a4:
04:53:98:fd:1d:06:21:98:ee:2b:4d:34:f3:48:38:99:7c:b4:
3d:b2:b8:aa:ba:73:08:f3:58:62:b4:76:f6:0b:2f:cd:de:4c:
19:58:64:ac:a3:61:56:77:8a:0e:30:e8:ea:cb:38:c9:e4:1e:
d1:a5:87:00:4a:8d:3a:49:cb:b3:29:bb:38:38:d5:2e:3b:ff:
a6:0a:b0:dd:22:d9:92:fa:cf:57:d5:ed:2d:1e:f9:a6:46:c0:
71:60:22:2c:70:64:13:86:bc:03:12:d8:1e:bf:a9:f7:05:00:
47:ed:61:97:d8:6e:c1:fe:f1:11:e7:7d:4d:ab:31:c0:f3:07:
78:92:d4:4d:87:80:58:30:47:6e:16:85:80:e9:8c:5f:b0:eb:
73:a7:9c:87:bb:52:b9:d2:d9:78:a8:ab:f6:90:db:6c:fe:66:
4c:e6:db:3e:9a:87:be:33:ba:e5:09:e0:12:6d:87:db:b5:69:
c3:06:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:58 2025 by rpki-client