Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
File: t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft (raw, json)
Hash identifier: ygvX+o00PbqE3ymAhl+85ELXFa8WLUAp3YK4uj6UExo=
Subject key identifier: C2:9E:62:ED:AE:31:20:DF:9B:CA:D3:92:EC:98:9F:DB:A0:09:EF:D6
Authority key identifier: B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
Certificate issuer: /CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Certificate serial: 0194C3F59F363D59DE61C03D167DD935431B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
Manifest number: 0A51
Signing time: Sun 02 Feb 2025 00:00:41 +0000
Manifest this update: Sun 02 Feb 2025 00:00:41 +0000
Manifest next update: Mon 03 Feb 2025 00:00:41 +0000
Files and hashes: 1: t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl (hash: VQrQfYzdZbk+opGtXlMYj5AmzMZUA65Ws7GsEJ8FxMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:9f:36:3d:59:de:61:c0:3d:16:7d:d9:35:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Validity
Not Before: Feb 2 00:00:41 2025 GMT
Not After : Feb 3 00:00:41 2025 GMT
Subject: CN=c29e62edae3120df9bcad392ec989fdba009efd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bd:39:d0:6e:56:71:78:52:5b:91:a4:1f:80:
1c:e0:81:1e:f0:08:6d:46:80:f1:d4:60:bf:cf:bd:
37:75:15:a0:e4:a2:71:00:29:61:3d:98:2d:5a:9b:
18:ca:39:d0:98:b6:d0:8d:4a:4c:f4:41:4d:f1:b5:
3c:7b:3c:37:3a:38:7b:ef:55:e4:5e:b7:44:2d:9e:
57:f0:bc:02:a9:0f:16:9e:8b:51:24:98:04:cb:79:
5a:eb:e2:3d:7d:77:b7:80:f9:40:11:40:b6:0b:d6:
27:ad:6d:74:4e:52:4c:76:1e:c7:e9:41:b9:7e:58:
d1:35:b4:1e:3a:21:57:3c:b9:01:73:fb:d0:4f:3b:
58:0f:fc:66:e1:9e:b8:d5:03:5f:3e:d4:d8:98:5d:
6f:f6:80:37:67:84:44:ab:c2:02:ab:b8:93:02:82:
20:1a:f1:fe:75:c1:1f:b5:6a:45:a5:74:fe:8b:db:
8a:0e:52:69:bf:7b:dc:1b:ff:d7:91:eb:6a:59:01:
5d:af:00:bc:52:26:30:75:63:8d:35:00:8b:99:c3:
6e:60:9d:ff:50:cc:25:8a:9f:cb:27:49:2a:03:6b:
55:e8:3c:51:4e:f1:e0:52:41:6e:47:6a:1e:db:39:
ac:93:b2:a9:95:57:aa:79:86:6e:53:f7:ff:3e:6b:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:62:ED:AE:31:20:DF:9B:CA:D3:92:EC:98:9F:DB:A0:09:EF:D6
X509v3 Authority Key Identifier:
keyid:B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:f5:1c:53:d6:71:05:97:a6:4d:f2:60:96:a4:f5:03:d3:
bf:5d:ce:b5:c1:b4:2e:e5:32:5f:99:30:c4:4e:9a:33:19:08:
4b:69:83:71:f8:18:53:53:fb:ba:a2:cb:b9:fa:4a:32:80:a4:
da:a7:ce:b1:23:9e:e3:4e:df:5f:fd:56:ee:30:25:7b:55:bf:
d7:61:62:70:e5:75:77:be:ab:d1:63:f4:bd:2f:dc:1e:53:0b:
44:cc:c1:5e:f5:9f:83:0a:ce:3e:c6:6b:4a:2c:70:cc:b3:67:
6a:ca:77:b2:c0:83:a1:ce:f3:9b:af:cf:01:3b:59:7f:d8:67:
99:03:29:3a:76:5a:fd:dc:e7:d7:93:d4:f6:0e:18:5e:6a:a7:
49:6f:41:76:0a:70:db:d0:8a:5d:f1:7d:b5:66:d6:a6:7e:10:
d7:50:ff:41:48:78:ec:53:02:c5:8e:c7:de:63:2f:34:47:0b:
96:6d:6f:0d:53:84:47:46:bf:7a:b7:0a:6b:46:8b:10:c6:1f:
f8:a5:dd:38:4d:f2:f6:f8:e0:bd:f3:71:61:70:1e:1e:64:96:
ea:bc:5e:f3:69:62:d9:f5:c9:db:1a:2b:26:da:a8:2d:b6:da:
61:20:30:43:7e:7f:ca:3e:b4:45:9d:4b:04:48:8c:1f:24:19:
e8:83:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:53 2025 by rpki-client