Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: m0L+FIkPi+uMAkWWRL6+cDwU98hkqGdUoxbDDslihtA=
Subject key identifier: BE:09:07:85:A1:2C:D6:A3:E8:82:A9:8C:15:97:09:C8:29:58:15:C6
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 019511D9CF876B5DEA359BFE120E25705A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:41 +0000
Manifest this update: Mon 17 Feb 2025 03:00:41 +0000
Manifest next update: Tue 18 Feb 2025 03:00:41 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: KtU1xFyx77j6UXZgRtDb27RN5nx16+jLXGMXI76YSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:cf:87:6b:5d:ea:35:9b:fe:12:0e:25:70:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Feb 17 03:00:41 2025 GMT
Not After : Feb 18 03:00:41 2025 GMT
Subject: CN=be090785a12cd6a3e882a98c159709c8295815c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:03:44:8c:27:a1:c6:dc:90:4f:7b:3a:29:
56:c2:46:82:b0:4f:f4:96:fa:71:78:a3:3b:1c:ae:
3a:04:88:c4:15:34:21:3c:e4:65:08:d3:d6:88:db:
00:5a:37:52:22:33:a7:e5:5f:fe:69:fd:1f:b2:43:
43:eb:f4:d3:98:4f:f5:0e:4e:ff:df:d0:c7:9a:0f:
b0:8c:fa:b0:0f:22:8f:9f:98:05:f4:7f:96:e8:71:
c5:9f:61:f8:ef:30:a2:82:0f:b9:dc:c8:74:d0:5b:
31:3e:26:bd:dc:50:72:5f:86:4f:de:05:b9:30:4f:
e4:b7:74:5a:df:e6:11:07:36:30:ae:40:f6:dc:08:
44:ee:69:43:42:8c:72:a1:21:4d:b2:26:81:9f:0e:
6a:1a:1f:84:fb:f0:a8:d9:be:3f:a8:e0:b5:29:18:
d4:6a:81:66:80:6a:e3:36:3d:13:07:0d:92:47:e5:
4f:88:e0:c5:ff:e1:20:b7:5c:ab:a4:17:1c:27:25:
e5:51:5b:e4:4b:4d:81:e7:ba:75:71:a2:00:89:d3:
3a:76:a3:e6:7a:0f:43:0f:3d:ce:9d:e2:30:aa:c8:
f8:70:88:92:22:c7:7d:ac:a2:bf:20:a8:3b:cd:53:
9b:75:fe:bd:f9:15:cd:73:9f:68:77:96:60:49:5b:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:07:85:A1:2C:D6:A3:E8:82:A9:8C:15:97:09:C8:29:58:15:C6
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:4f:48:c6:78:db:24:07:f0:5d:66:ff:99:98:c6:f4:44:
ef:81:8e:69:08:ab:9c:43:9e:75:80:0d:71:59:0a:0b:9c:f5:
b9:ac:cb:f3:80:33:cc:fc:9a:54:21:a0:72:9c:c2:ea:db:36:
42:cd:da:c1:c0:a0:ae:a9:33:2e:c6:79:2d:25:af:77:d9:ef:
59:7a:9d:05:c9:c5:fb:7b:d8:51:31:49:de:4c:9e:3b:6c:82:
0a:2a:98:a9:de:6c:9e:0d:93:21:e1:3a:27:15:b6:2a:75:08:
4c:53:72:d6:62:98:bb:0f:37:f9:4a:f1:bf:af:83:94:10:1d:
7a:79:96:56:04:39:e8:94:d0:aa:ce:23:7e:7a:07:d9:ea:6e:
6c:b4:d8:c3:3e:54:4c:55:85:72:16:85:d5:f7:56:3c:da:85:
eb:af:be:9b:0c:a4:8c:7e:6f:85:67:d6:8d:10:f2:c8:3a:02:
bb:f1:b4:89:2f:f5:fa:63:e3:fa:be:79:1e:85:ad:9d:18:bc:
f1:65:03:b5:2d:dc:a0:14:c0:d3:90:4d:d7:35:b5:c8:fa:f0:
99:79:b2:14:dc:f7:25:99:f4:bc:4d:0d:e1:04:72:d0:01:f7:
de:35:30:27:b2:60:bc:94:61:35:0f:05:02:e8:67:3b:5d:1d:
44:d1:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:11 2025 by rpki-client