Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: rN8Y4lGLCnsuENWwX2lWWn4mHFvrtQQYAQAhfCeDEQQ=
Subject key identifier: D7:1F:14:04:23:B8:07:53:9F:8F:BE:EC:3D:82:90:45:4F:28:A1:83
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 0194C319CE6DEA91C3064D949D5D23EE0725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 0204
Signing time: Sat 01 Feb 2025 20:00:35 +0000
Manifest this update: Sat 01 Feb 2025 20:00:35 +0000
Manifest next update: Sun 02 Feb 2025 20:00:35 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: QwtaMPNHaj/+pLdaLyqL3ATI3QLPprZ7YhxROSfuLP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:ce:6d:ea:91:c3:06:4d:94:9d:5d:23:ee:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Feb 1 20:00:35 2025 GMT
Not After : Feb 2 20:00:35 2025 GMT
Subject: CN=d71f140423b807539f8fbeec3d8290454f28a183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:4f:d3:8a:eb:4b:fe:58:b1:b2:eb:25:e7:
5b:f2:06:68:ab:df:45:3c:7a:f5:1c:26:26:87:38:
05:5a:c8:a8:c9:b4:16:de:3a:f4:60:71:66:fa:a3:
f7:57:86:9d:40:59:aa:25:89:5c:65:4c:81:62:67:
cc:1d:13:14:d1:07:73:8e:2b:2a:6f:f8:f3:ea:26:
cb:0e:8a:04:45:b8:ff:98:42:13:64:e2:89:ff:c6:
8a:82:bb:27:7f:2d:60:85:8c:c7:2f:3c:cc:05:da:
02:97:4b:83:b1:2e:20:ce:d2:6e:44:37:44:26:ec:
ad:6c:43:ab:17:79:a4:88:7e:5f:ac:bb:dd:da:57:
9b:6f:0b:13:12:c5:5c:34:32:f8:17:38:53:d5:51:
5c:62:c6:92:66:5f:a2:b7:cc:51:88:c2:f5:20:70:
20:d2:27:6e:b6:f7:fc:61:86:3a:a4:29:bd:e7:18:
35:99:3c:1f:be:0c:e8:de:4e:37:09:0f:1c:4f:14:
4e:d4:ac:c2:8d:dc:be:50:4a:0f:d5:cc:7f:3c:51:
2a:48:ca:92:fc:5c:df:e3:a8:48:3e:3a:2f:78:ab:
5b:b7:f5:3b:2c:10:f3:b8:71:91:81:1f:26:8d:ab:
f8:4b:00:87:0b:97:ab:59:f3:4d:7c:6b:bf:0c:fd:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:14:04:23:B8:07:53:9F:8F:BE:EC:3D:82:90:45:4F:28:A1:83
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:c9:3b:eb:3a:fa:92:fd:a9:d6:c4:c3:9a:d8:47:3d:86:
5e:de:2b:c6:31:da:b5:f3:d0:a0:37:15:af:19:d8:65:3c:8c:
dc:44:77:cf:94:00:3a:9b:38:90:90:90:63:fd:4f:9b:65:bc:
7d:09:2d:bb:5a:15:ce:49:e2:b8:99:ce:cb:50:a5:f1:48:7d:
9e:1e:6e:ad:8a:96:31:f8:0f:8d:05:4f:5e:14:00:bc:cc:89:
32:f1:57:f3:36:d0:6c:e7:1d:db:44:45:b0:13:87:79:dd:fb:
e2:46:2f:36:14:d5:76:2f:7c:9c:d5:46:07:16:cd:c2:e3:0f:
44:df:ac:3d:8b:ba:04:aa:c2:ce:72:dc:6b:dc:e6:b0:62:90:
7e:90:e6:04:b2:0b:16:36:17:b3:19:41:a8:ca:60:5d:d6:21:
09:6a:63:88:82:1d:4a:31:24:40:27:b2:56:6c:e2:50:0b:79:
e0:cf:e3:1d:d8:f3:ac:e3:44:ba:5c:ef:51:ff:95:a8:c4:02:
fc:89:0c:91:11:60:7b:f2:c4:0c:9c:90:4b:84:f6:d9:09:d2:
78:71:b2:a0:3f:e4:33:68:ff:58:f4:08:53:39:3f:d9:90:b4:
17:31:ff:99:d3:65:24:ff:b0:75:a1:d8:6b:91:96:ac:ef:54:
4d:0b:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:27 2025 by rpki-client