Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier: tERk42ypEWU23qt3iYoV4wLyDGcDz3MyQFH/2OGLedU=
Subject key identifier: 5D:77:D0:17:01:66:EC:AB:9B:92:27:A5:EF:4D:50:18:AA:AC:96:86
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer: /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial: 0194C4D0F3C14B9BE4B73EE0BA2AF00E788B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number: 15
Signing time: Sun 02 Feb 2025 04:00:15 +0000
Manifest this update: Sun 02 Feb 2025 04:00:15 +0000
Manifest next update: Mon 03 Feb 2025 04:00:15 +0000
Files and hashes: 1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: ddBNoNe/pqKhHX1aMAVY+rz8U3sBBvLjQvsNnvyJ6uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f3:c1:4b:9b:e4:b7:3e:e0:ba:2a:f0:0e:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Validity
Not Before: Feb 2 04:00:15 2025 GMT
Not After : Feb 3 04:00:15 2025 GMT
Subject: CN=5d77d0170166ecab9b9227a5ef4d5018aaac9686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:0b:c6:19:c8:30:06:99:8c:2a:e7:8f:c7:
51:91:39:ab:33:97:be:89:d5:e1:0c:f9:7f:fb:ae:
6c:6a:6f:3b:bf:16:0f:2b:0a:a8:b8:43:5c:f4:7c:
27:74:28:b9:95:0a:2b:30:ba:ee:98:b5:04:2d:64:
16:2a:10:51:5e:06:e7:57:1e:2e:9b:ae:d1:3a:22:
35:4b:6b:7d:54:c2:55:63:0d:70:25:2f:e6:8b:e8:
93:01:ad:fb:52:f0:1a:90:f0:6d:50:6c:b5:da:49:
91:5c:a3:e2:cc:c0:13:f1:6b:85:75:37:7e:bf:73:
33:62:8f:2c:3f:70:f7:84:59:46:fc:37:e7:c1:74:
15:54:7e:9f:e9:6d:2d:b5:a0:75:63:29:ee:43:52:
c9:cd:13:7b:b5:72:df:5b:55:06:fe:ac:e2:e9:22:
ba:e0:17:5e:f3:f7:1f:ac:9c:7b:ad:67:9e:7b:c8:
b0:83:ea:cb:a2:20:6a:94:1e:f6:3f:42:a8:c0:54:
0d:67:e2:c5:c6:2f:41:f5:f7:ea:61:1d:a5:1b:ad:
ad:24:83:2e:39:3f:33:ba:24:e1:6c:a9:49:9e:3e:
99:67:88:a8:3c:48:7a:98:7f:cf:e5:83:20:4e:c5:
d3:73:b3:23:05:69:00:34:b9:ae:e0:a1:03:5f:ff:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:D0:17:01:66:EC:AB:9B:92:27:A5:EF:4D:50:18:AA:AC:96:86
X509v3 Authority Key Identifier:
keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:aa:da:e6:89:d8:03:7f:68:a2:5d:8b:9e:24:7a:db:3b:
0a:e1:54:16:53:98:1e:37:eb:1f:04:93:2b:88:55:92:7a:b4:
91:3a:59:11:22:80:25:5c:f3:22:a7:43:2a:08:08:ac:a7:1c:
8b:1e:49:86:76:94:e2:ae:b5:de:c3:2a:7d:62:d2:27:57:7c:
65:6a:5f:d1:84:68:bf:12:d6:57:58:02:db:1f:79:73:40:71:
a1:70:76:ce:75:1a:6a:6b:8a:6b:31:72:f0:78:e2:14:a9:1c:
e9:38:02:ba:ca:ce:7e:97:ee:48:91:6b:7d:bd:67:4f:e5:1b:
5b:51:b1:e3:6f:8b:58:eb:eb:4f:37:00:dc:61:01:00:93:e0:
7d:6a:70:07:80:59:48:4f:c5:df:72:dc:4e:a4:21:69:c2:24:
81:34:6d:95:40:46:54:85:a9:5f:be:fb:7f:f3:2e:0d:95:72:
dc:2d:0e:4a:af:0d:74:33:c2:a1:ed:2e:29:d0:77:da:03:95:
a4:1e:31:bb:01:a5:e2:8e:83:db:df:5f:65:8e:40:e4:f1:5a:
51:d3:15:24:28:86:34:d7:2e:ed:eb:28:54:f7:2f:54:5d:5e:
fc:18:18:4d:61:06:8a:ac:3b:10:08:21:33:7f:43:c6:dc:94:
f7:31:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:22 2025 by rpki-client