Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File: e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier: 2w4l8Q+wBbf9PhSOuG/HRsPplWgIKBbHTjWpkJAlHxw=
Subject key identifier: A2:60:8D:10:56:06:5B:36:DA:D7:5C:0F:C1:12:C9:15:D5:6B:EB:94
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 0194C42C77E30A677801CFF21DF158AEDFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 01:00:36 +0000
Manifest this update: Sun 02 Feb 2025 01:00:36 +0000
Manifest next update: Mon 03 Feb 2025 01:00:36 +0000
Files and hashes: 1: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: djt4Lgh3Sh6+9s6o1ZKAj7z1kBlzfGszAL3Ins/kjAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:77:e3:0a:67:78:01:cf:f2:1d:f1:58:ae:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Feb 2 01:00:36 2025 GMT
Not After : Feb 3 01:00:36 2025 GMT
Subject: CN=a2608d1056065b36dad75c0fc112c915d56beb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:9f:03:27:be:ac:81:07:a5:13:eb:c4:a2:
7e:69:f8:91:e4:6c:73:64:2f:a9:48:da:b9:58:cc:
5d:8b:25:c4:44:d3:6b:8b:96:a5:a8:6e:b6:a1:ea:
df:a8:38:81:09:54:9f:1b:8a:6e:c2:7b:50:3d:33:
d8:d9:96:57:91:80:cf:a2:39:ac:fc:f0:56:db:05:
4a:e9:39:39:53:cc:08:30:55:0f:84:d8:6c:fc:71:
16:b8:32:d9:06:66:7d:92:7d:84:d7:80:48:c5:7a:
7a:81:7d:32:13:69:dd:7b:c6:aa:8c:91:ef:66:39:
fc:59:2b:43:e7:4e:67:f2:38:37:24:38:75:0a:b2:
22:c4:e3:5e:0a:b9:aa:94:82:7b:ce:d5:c9:c6:a9:
39:6b:51:53:18:cb:e2:88:c6:8e:9c:71:66:c2:f7:
33:aa:3a:86:5b:34:ee:8b:06:ab:f9:41:e7:9c:7c:
68:df:82:90:d9:96:58:ef:f6:ae:dc:2f:d2:fe:1e:
38:94:be:4d:86:58:69:60:69:b4:23:ca:64:2f:7c:
3d:e3:3b:2c:f2:75:71:fb:1c:1f:e8:84:b1:e7:4e:
16:5a:8e:dd:74:84:f4:81:c4:c6:96:0a:74:98:04:
11:4f:2b:4a:33:85:b3:e3:8d:88:66:84:68:de:5f:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:8D:10:56:06:5B:36:DA:D7:5C:0F:C1:12:C9:15:D5:6B:EB:94
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:48:c0:c0:b4:85:b5:26:fd:23:1d:5d:71:83:e7:91:2f:75:
e8:4b:bd:bc:da:db:e2:4e:25:97:49:da:94:d0:c4:4d:ea:55:
2c:03:e6:ed:16:6a:57:01:33:88:c6:af:88:f1:54:2e:f1:0a:
11:36:43:05:a3:62:2b:0a:b6:63:83:7a:50:1f:60:5a:7d:26:
dd:0c:ef:5c:43:e5:e4:43:6c:b7:78:af:37:7b:09:0f:34:6a:
ed:06:0a:50:ce:fc:17:be:14:fa:d0:b1:45:6f:ed:c0:75:5c:
48:67:90:c0:66:4f:06:e9:b0:fc:70:81:5c:d1:20:2b:39:eb:
19:ea:a3:9e:be:0e:b7:a4:c3:ed:e0:70:d1:46:31:d0:fe:fc:
e2:b2:42:95:2e:7a:fe:ee:ca:04:32:4c:ee:12:06:1c:09:60:
f7:95:31:0e:8d:56:bb:8b:a9:9c:86:54:c8:f9:24:8a:2b:a1:
ba:35:45:ee:25:9d:cd:2d:40:db:1e:d5:bc:66:45:16:97:2e:
10:a4:8e:16:ae:ea:97:18:17:3c:b0:59:66:fe:8a:02:fb:49:
7b:78:c7:ef:7f:74:51:e2:22:70:bb:8a:da:1c:a8:a2:7d:d6:
8a:0f:da:20:6f:c4:0d:e9:34:84:96:bc:56:c0:23:1e:47:cc:
7c:d0:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:06:51 2025 by rpki-client