Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
File: doLdOwLxwpVedAMvV4kT9s6WMCM.mft (raw, json)
Hash identifier: LOI5zckmxGfIKLzVxwPbbyfakxwtzq1fzgMgNRUBxOQ=
Subject key identifier: 0C:A5:41:0E:40:19:27:F7:75:7E:6B:AE:49:06:F5:DB:2F:D3:23:DC
Authority key identifier: 76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
Certificate issuer: /CN=7682dd3b02f1c2955e74032f578913f6ce963023
Certificate serial: 019510C7EF168C895BD7C36E1AEFB8A48DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
Manifest number: 0B4A
Signing time: Sun 16 Feb 2025 22:01:33 +0000
Manifest this update: Sun 16 Feb 2025 22:01:33 +0000
Manifest next update: Mon 17 Feb 2025 22:01:33 +0000
Files and hashes: 1: doLdOwLxwpVedAMvV4kT9s6WMCM.crl (hash: 2LEqIJTi9/gxee54Xr9vxdoRZJHNpbxhFC/ctFA7s7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ef:16:8c:89:5b:d7:c3:6e:1a:ef:b8:a4:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7682dd3b02f1c2955e74032f578913f6ce963023
Validity
Not Before: Feb 16 22:01:33 2025 GMT
Not After : Feb 17 22:01:33 2025 GMT
Subject: CN=0ca5410e401927f7757e6bae4906f5db2fd323dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:f3:d6:da:07:ed:96:f5:f0:a0:69:9c:fd:
82:fa:a1:a2:ad:04:9a:be:e4:ef:22:4f:a4:0e:a0:
03:49:92:4e:c9:dc:96:7c:c1:07:ee:97:66:91:27:
64:7e:c8:85:44:99:7d:1b:29:8e:4d:61:f0:05:27:
cd:dd:fb:f0:27:5f:58:62:92:a0:54:04:f8:0b:ab:
de:f0:f4:28:33:c7:44:22:ae:6c:c0:17:c8:83:14:
1b:df:33:b0:c1:c0:7a:06:01:a3:33:ed:41:dc:f9:
4e:7a:c5:e0:14:f0:4a:40:3e:31:33:d7:67:f4:71:
1d:09:5b:a6:6d:30:c0:e7:4f:f0:da:48:e7:62:97:
5a:41:a0:85:61:fd:15:20:e6:33:e7:f5:9b:79:5c:
24:b1:bb:f5:ff:33:7e:47:62:26:4f:89:30:ba:5b:
12:9f:c6:b5:33:38:01:28:f4:3c:53:08:ba:1d:65:
fc:3f:f3:b0:6f:8f:d6:a2:9a:ba:0d:01:ce:a0:29:
59:4a:ad:42:b1:0e:f1:a5:0b:eb:35:e1:19:55:c3:
56:c8:16:f3:b1:58:cf:17:71:de:04:cb:cd:90:7b:
76:e5:73:11:32:6f:e1:e6:68:1a:0e:40:14:90:86:
36:63:f7:31:3b:9b:51:58:06:cc:6d:15:a4:79:89:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:41:0E:40:19:27:F7:75:7E:6B:AE:49:06:F5:DB:2F:D3:23:DC
X509v3 Authority Key Identifier:
keyid:76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:bf:ec:ec:03:1e:62:55:c7:80:db:e5:45:f1:2a:1c:89:
9b:dd:58:0a:b5:12:df:f6:52:e1:dd:29:04:93:07:df:7f:cd:
3d:fa:6c:a0:24:39:a0:ee:ce:e9:b0:4c:90:50:77:38:67:b4:
38:68:71:b9:0d:f0:e8:73:f6:a4:87:8d:77:ab:75:89:19:ec:
a6:01:78:e7:3a:22:8f:02:34:f1:ff:7c:01:af:54:bd:de:a9:
27:29:11:ba:8f:d6:54:83:85:b9:fa:66:7b:82:64:7e:24:e7:
5e:9f:3e:c7:05:49:19:5a:bf:ac:95:04:98:26:7a:41:ff:5b:
78:ef:b5:df:65:3c:68:84:54:90:5d:d3:de:9b:f3:c2:c1:50:
23:dc:b2:df:b2:f7:44:89:73:64:b5:03:1b:ef:4e:46:f2:19:
aa:ad:6f:f5:85:50:96:cc:2b:67:36:25:85:6d:97:a0:87:13:
4b:5c:32:8f:08:51:6b:5f:07:ae:c4:26:94:84:29:5b:65:27:
c8:a9:63:0e:65:b0:32:89:fb:fe:11:e4:94:15:79:01:52:6f:
f9:a9:b9:79:dd:62:22:0f:8b:fa:7a:29:12:e2:d1:d3:61:d3:
e7:42:09:30:9a:7b:e6:72:15:85:14:b0:36:90:ea:ba:32:4b:
7d:42:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:58 2025 by rpki-client