Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: FE6mgtZ9aCnwOMCGxgxOMTm5ktfuWzUh8nmZqQ/kUa4=
Subject key identifier: E4:BA:46:03:C2:61:D7:67:76:1D:BA:80:64:A1:AD:96:A7:70:69:F8
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 0194C42C2520F7993FD9900CDF9B6F57BCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0273
Signing time: Sun 02 Feb 2025 01:00:14 +0000
Manifest this update: Sun 02 Feb 2025 01:00:14 +0000
Manifest next update: Mon 03 Feb 2025 01:00:14 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: kkSfkSfTOYXVbR2Hv9V8v3/HkhDXWB5DQpgZy53O0XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:25:20:f7:99:3f:d9:90:0c:df:9b:6f:57:bc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Feb 2 01:00:14 2025 GMT
Not After : Feb 3 01:00:14 2025 GMT
Subject: CN=e4ba4603c261d767761dba8064a1ad96a77069f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:e6:25:f9:78:22:24:64:39:17:f5:28:34:
c7:50:42:22:9b:6d:52:e7:0c:09:30:7c:c0:1d:86:
62:d1:08:19:4a:4f:17:cc:4b:ea:03:cb:6f:f9:ca:
e8:00:7b:2e:02:ca:0b:63:d6:bc:c8:e9:c1:9d:5a:
9e:6e:46:d7:be:bc:2c:0b:c0:c4:93:50:20:0b:94:
40:a2:a5:a3:05:03:2d:b1:f2:c2:4d:09:28:c8:2d:
1a:70:1e:ed:68:2e:50:9b:05:c2:70:ca:2c:d8:f9:
1b:d5:91:36:d2:f9:6d:0b:8f:80:bf:a0:52:89:d9:
b8:bf:20:67:f2:2d:4b:c1:30:26:5a:8f:cc:bc:7b:
10:6f:53:69:e3:c2:b2:e7:6c:5e:10:23:fe:61:f4:
72:29:60:5d:da:61:b5:99:12:8f:0a:fc:5f:bd:b7:
cc:c1:6f:71:7e:fb:a4:a8:f4:11:dc:f5:5e:17:ce:
e9:eb:a2:b3:0d:a7:52:86:74:c4:b5:cf:ca:82:2f:
61:13:79:58:90:1c:80:46:14:c4:a3:b7:38:eb:63:
f1:d7:d7:89:de:f2:0a:1d:97:48:47:f1:ef:bd:76:
76:e7:a7:ea:f5:22:e3:27:17:fb:36:d1:17:66:13:
61:49:f9:1c:fd:4b:7b:32:40:70:18:bb:f7:c7:3c:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:46:03:C2:61:D7:67:76:1D:BA:80:64:A1:AD:96:A7:70:69:F8
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b3:2c:12:a0:88:6a:e1:fb:f3:40:ad:24:39:e7:ec:87:cd:
75:47:fa:70:46:06:4c:49:42:67:eb:b5:bd:d3:11:54:2f:97:
10:24:b4:7c:ae:50:45:33:ec:cc:88:8e:f3:1c:a5:42:2a:3b:
b8:3c:65:f7:4a:97:03:d2:a0:e8:32:ce:be:d0:8f:63:d6:bb:
48:94:7e:ac:65:ec:52:16:f7:53:bb:44:3b:bc:ff:18:b4:87:
bf:cc:66:7b:89:69:87:5b:7b:b6:c0:83:a0:0e:8f:ec:13:6d:
5c:f9:28:17:3a:bf:b4:a6:05:f5:0b:36:1d:74:8c:3f:67:09:
2d:b8:de:06:22:dd:16:b7:21:e5:f9:ac:15:98:5f:d0:9a:1a:
a3:5e:68:82:ad:3b:b5:f8:c2:4c:f2:39:3b:c7:9f:f5:ff:04:
a8:dd:94:40:d2:d5:6f:b3:d8:5f:19:a1:af:7b:a3:72:fc:5a:
32:5c:d7:6d:48:92:3d:9e:fe:94:15:8a:03:76:12:1f:7f:60:
d3:d7:3f:b5:77:33:22:37:19:68:8a:ae:35:10:0d:68:b4:a6:
31:70:30:1b:af:8a:b2:c7:ff:ca:71:89:fe:0f:16:2b:02:3b:
2f:6a:00:a4:c6:71:fa:71:60:d5:d9:c6:83:21:fc:2b:e3:47:
7f:27:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:23 2025 by rpki-client