Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: 7lMO6Juh9PSIQFqigeAz7hdwME3Qil1k8FrQN4+8rR8=
Subject key identifier: EC:2F:BA:36:CA:7F:93:E1:68:89:27:6C:2A:7D:49:AE:E7:5F:53:11
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 0195116B9BFD2F18DDB7A67EC97C9F32AC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0B74
Signing time: Mon 17 Feb 2025 01:00:19 +0000
Manifest this update: Mon 17 Feb 2025 01:00:19 +0000
Manifest next update: Tue 18 Feb 2025 01:00:19 +0000
Files and hashes: 1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: eOtEScKU9YORSRp0UeS/uWAocegwhmQSRgcub7sygQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:9b:fd:2f:18:dd:b7:a6:7e:c9:7c:9f:32:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Feb 17 01:00:19 2025 GMT
Not After : Feb 18 01:00:19 2025 GMT
Subject: CN=ec2fba36ca7f93e16889276c2a7d49aee75f5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:eb:04:8b:ee:12:c2:98:4b:62:ad:ac:37:
01:f8:b0:ce:b5:6d:b5:11:35:fd:f9:eb:87:85:94:
e2:c7:15:c7:99:41:2e:57:7f:d8:d4:6f:be:01:06:
0d:60:06:de:74:b4:ff:2a:eb:b0:df:47:f6:ea:d0:
33:1d:a2:20:2f:fb:f5:81:9e:d4:e1:8e:9d:9d:ab:
53:34:3e:bd:50:b7:3a:51:74:2e:d6:af:28:f3:24:
56:00:77:fc:71:76:47:d9:3d:5a:9b:be:d1:11:02:
30:1e:ce:88:ad:f6:b2:2f:99:5d:7a:0f:e5:f5:62:
9a:43:c5:77:17:4e:f2:d2:8c:58:62:06:5c:bd:2a:
b3:d6:f9:3b:84:f2:13:a4:10:06:c6:13:db:64:d1:
22:f9:6b:ef:67:89:4c:f4:af:7a:a2:e3:a0:69:c0:
4b:b3:dd:01:0d:71:2e:a1:0b:08:9f:7b:b5:60:4e:
dd:b0:5a:3b:0b:a8:ce:d8:ea:86:44:62:20:64:bd:
fa:99:f8:1a:ea:ac:19:19:64:44:43:8f:60:a5:5e:
d0:7b:f5:11:aa:6d:ad:48:ce:5f:76:18:3f:7d:54:
f0:2e:45:ef:c6:45:97:0e:27:db:b8:96:5d:bd:db:
12:12:87:81:57:5c:dd:a3:d3:b1:b9:ea:d0:f9:16:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:BA:36:CA:7F:93:E1:68:89:27:6C:2A:7D:49:AE:E7:5F:53:11
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:eb:82:00:93:46:e9:2e:61:24:71:34:f6:2b:a7:c4:8b:
94:86:0b:22:87:af:36:6e:2e:d5:93:e9:97:c7:c4:6e:c9:36:
f8:2f:0d:2a:d9:ab:ec:b1:c4:0f:9d:41:85:e6:2a:c8:89:cc:
72:17:19:f4:d6:54:64:d2:43:28:8b:b4:de:4b:17:09:26:ad:
ef:c0:c5:20:47:c7:a5:ea:f8:cb:17:8a:c4:be:07:00:58:6e:
c8:23:41:f9:25:eb:d9:ec:71:9d:a1:c1:ae:0a:cc:e4:65:0f:
e4:d3:a1:78:24:cc:9f:93:46:85:fa:01:00:3b:0f:6d:7b:22:
bd:72:cd:25:d3:05:a9:40:4a:04:5d:fd:22:8a:6a:36:80:20:
fd:81:cb:87:e8:23:b1:ae:65:d1:e7:53:92:fe:de:14:0c:4d:
71:ce:b2:3d:6e:0c:5e:ea:a3:b5:e7:5f:0a:0f:08:5a:99:0a:
ce:81:0b:f3:b4:b9:06:44:04:87:a2:75:6b:a7:c0:ff:c7:99:
6d:b5:7d:56:8f:e9:f6:42:da:24:8f:9d:ca:d9:ad:74:18:d6:
ff:be:5e:5d:f1:a4:af:6e:67:9b:fc:8f:f2:13:5a:6c:83:e3:
75:bd:75:7f:28:c2:fa:e3:0e:fd:0e:8f:f9:99:6c:6d:17:13:
ba:67:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:29 2025 by rpki-client