Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: UTJCWNt3DVW4p2Ba/MAcnGZJ01rfdNW7oQHWEuTyExs=
Subject key identifier: 6A:11:FE:04:7E:BB:3A:4A:A7:03:4C:DE:71:DF:FA:3F:F9:9C:DF:5C
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 0195116BFAA090C747186B1D8102DCD3AE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0435
Signing time: Mon 17 Feb 2025 01:00:43 +0000
Manifest this update: Mon 17 Feb 2025 01:00:43 +0000
Manifest next update: Tue 18 Feb 2025 01:00:43 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: LN4oK88jXb23K5svj6uMJYHTwhHNbvn6bfIlfIn8MSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:fa:a0:90:c7:47:18:6b:1d:81:02:dc:d3:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Feb 17 01:00:43 2025 GMT
Not After : Feb 18 01:00:43 2025 GMT
Subject: CN=6a11fe047ebb3a4aa7034cde71dffa3ff99cdf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:50:97:74:ec:d7:d6:00:68:57:fc:a9:da:
0a:c8:27:48:48:3e:2c:60:6c:5d:ab:83:22:ae:ac:
87:5a:fa:64:9f:76:da:ac:af:76:b7:c5:e4:1d:ae:
3e:62:22:67:e4:f7:94:54:a6:c3:db:3d:de:aa:e9:
1b:2b:5a:bf:4c:89:b8:8f:9c:27:c9:01:b1:29:55:
e2:bf:ff:44:77:78:b4:ac:1f:85:8c:7a:e2:62:26:
3c:6e:af:72:0c:20:84:1d:28:92:3d:ab:f7:17:c7:
5c:92:3b:eb:dd:14:1f:d9:7b:52:4b:59:27:d9:86:
04:7f:18:fd:42:5f:d6:55:33:c4:7c:80:dd:b3:1f:
9b:3c:09:59:8b:b7:6a:ce:1e:37:f4:30:77:e5:70:
25:51:51:b6:fd:80:ae:05:ea:3c:9a:b7:2f:e6:f0:
64:f1:20:a3:9c:42:1f:81:f5:d2:7d:74:8a:a2:9a:
41:2a:f6:d9:19:b6:16:b4:6f:23:57:92:b4:1b:74:
5a:58:0b:2d:5b:64:be:4d:e5:d0:44:4e:3c:4c:5c:
fe:62:e9:27:0d:f2:64:a1:a6:c4:71:21:6f:4c:95:
18:19:d2:70:f4:9f:a8:ee:cc:92:20:41:a8:dd:ed:
fd:e0:fd:2c:c4:64:c6:15:8a:6d:ce:e8:b2:f2:78:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:11:FE:04:7E:BB:3A:4A:A7:03:4C:DE:71:DF:FA:3F:F9:9C:DF:5C
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:81:40:37:e8:3c:4e:16:7e:84:ce:66:37:d6:02:66:23:
3b:e9:00:18:09:40:94:54:9d:a8:47:31:c6:1b:0a:ea:c5:0b:
4e:7d:4d:cf:39:69:de:27:93:9f:de:2b:24:3d:e9:d7:31:8e:
0c:4c:ab:32:6d:88:ba:46:48:73:3f:69:0b:ac:48:02:c5:61:
39:d7:fe:b6:14:99:50:07:cc:b2:06:98:da:14:7a:2f:02:e2:
d9:31:3c:40:fa:19:4e:eb:44:f8:25:00:12:6d:ee:03:c2:56:
ec:77:1a:59:c5:16:ef:d7:4b:94:1c:fe:28:c6:27:72:a7:8b:
57:1e:c2:8c:da:7c:62:75:82:16:70:fc:4f:ed:ba:95:d2:04:
83:96:76:28:45:9e:16:e9:bd:c3:fe:33:f0:a1:f7:9e:ba:95:
e2:04:5f:65:de:f9:1a:db:7a:3e:4a:09:23:87:c6:1a:9f:0d:
80:91:85:14:5b:da:72:3b:e6:6c:ff:d9:fb:58:06:6b:1d:7f:
d6:24:76:d9:ed:c4:1d:c5:30:8d:e5:37:7f:67:b2:11:d3:2f:
b2:49:f1:63:97:2a:db:b0:22:f0:5d:95:cf:63:74:13:44:19:
99:ed:c2:95:76:28:1e:85:67:bc:94:ea:87:06:f6:e5:ec:72:
1c:b2:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:43 2025 by rpki-client