Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File: 7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier: I1DrYKipbbswpkGAvD3bSbHMEEnHC8qIZbroTofNwTg=
Subject key identifier: 3B:3A:73:6A:69:7B:67:C4:9C:4F:38:FD:DD:92:22:BA:99:86:21:82
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer: /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial: 019511D994E4CF5E1C2B558566E093100351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number: 0448
Signing time: Mon 17 Feb 2025 03:00:26 +0000
Manifest this update: Mon 17 Feb 2025 03:00:26 +0000
Manifest next update: Tue 18 Feb 2025 03:00:26 +0000
Files and hashes: 1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: aOMisxomIGGMEnHJPLLLH6OGOqBeF+Kn5FSsg2oGAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:94:e4:cf:5e:1c:2b:55:85:66:e0:93:10:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Validity
Not Before: Feb 17 03:00:26 2025 GMT
Not After : Feb 18 03:00:26 2025 GMT
Subject: CN=3b3a736a697b67c49c4f38fddd9222ba99862182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:97:89:88:bd:a4:ec:0b:bb:79:7c:4a:8e:
97:00:8b:9d:00:09:0f:fb:10:b4:57:09:a0:35:d7:
cb:02:08:c0:82:1a:26:b5:27:8c:72:a8:2a:ff:a3:
cd:b0:2b:0c:78:3e:05:40:f3:b7:3d:91:1a:34:89:
fd:26:15:28:cb:ab:56:e1:82:ac:9a:d4:82:1a:52:
18:75:8e:3f:88:dc:22:b2:a4:9d:b2:59:2b:25:96:
11:a1:13:e5:6e:da:61:26:cf:bb:73:60:29:3f:f2:
36:2b:a9:db:ee:ee:3e:dd:bd:ca:4a:04:b8:11:d6:
5c:e1:c2:a8:b5:70:56:b0:16:f8:bd:d5:30:4f:1f:
35:ce:52:ac:dd:dd:8b:32:5e:4a:61:56:b1:7f:06:
bb:b2:bc:07:28:bf:dd:15:fb:55:37:0c:62:8f:18:
cc:bd:c4:26:ee:40:3b:6a:fc:57:d8:e0:19:5f:f9:
76:07:f3:fc:7f:72:07:31:7b:6d:8e:e7:bb:1a:40:
74:30:29:a6:b8:d6:0d:c9:ef:a8:18:05:2f:2f:77:
e2:7e:f6:68:c2:1a:a5:e5:1c:2d:f3:5d:99:6c:b7:
e5:ff:e4:2e:67:22:97:92:a6:d7:3a:c3:6b:10:66:
49:ae:64:7c:07:0d:0a:f8:8c:32:e3:10:85:06:56:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:73:6A:69:7B:67:C4:9C:4F:38:FD:DD:92:22:BA:99:86:21:82
X509v3 Authority Key Identifier:
keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:79:9b:0f:17:d6:6f:2a:dc:e0:ea:42:c0:b7:b9:b5:05:
2f:34:a3:cc:a3:85:0c:ff:63:fe:27:99:e4:26:02:c9:a9:6a:
8e:e2:c8:bd:d2:1d:9c:1d:a8:8c:63:32:ca:6e:58:69:a6:6b:
3d:65:f3:e0:34:cb:15:47:7b:d3:5d:25:ec:5d:41:db:25:6b:
7c:ec:f2:75:1f:be:6d:79:51:e9:90:1d:d0:6a:4c:00:70:61:
7c:4d:0b:7f:6c:4d:64:e6:af:c6:90:b5:6b:11:3d:22:88:65:
c9:e9:cd:91:c3:b9:ff:5f:9c:7d:0b:ff:29:78:2f:79:ed:8d:
a6:95:95:d5:fa:f1:f3:76:d0:31:86:56:64:01:2d:9c:87:25:
72:92:06:4c:da:54:59:b1:a5:5c:b2:66:ff:fe:fe:0d:35:90:
e5:0f:f8:36:62:20:31:f9:b9:79:69:4b:f8:83:fa:29:02:8f:
c2:08:09:31:9a:7d:d8:69:76:6a:f5:43:80:47:bd:69:c7:1d:
b8:14:a4:ab:79:78:d8:dd:9e:e1:13:9d:35:91:43:62:1b:9b:
f6:81:e0:98:89:94:b9:96:11:4a:38:3d:02:cd:32:3a:8a:4d:
71:78:0c:b3:d1:3a:d2:ed:ee:f0:25:e7:6d:fc:22:e5:5c:43:
40:84:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:57 2025 by rpki-client