Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json)
Hash identifier: DdoFOejbkeT6uMkcPggIiO3uUtdv6IEMfQ3LrBCFMys=
Subject key identifier: 60:A9:EE:D5:44:A2:C6:58:9C:F9:FE:DA:28:E4:1F:D4:F2:33:B5:2E
Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Certificate serial: 019510C7B2986880E9E8C79A1AE324961694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
Manifest number: 0924
Signing time: Sun 16 Feb 2025 22:01:17 +0000
Manifest this update: Sun 16 Feb 2025 22:01:17 +0000
Manifest next update: Mon 17 Feb 2025 22:01:17 +0000
Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: FqIbd4tF5G4hYqGOOalxh2vBkwZWYbGWM/cVCO0Cn38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b2:98:68:80:e9:e8:c7:9a:1a:e3:24:96:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407
Validity
Not Before: Feb 16 22:01:17 2025 GMT
Not After : Feb 17 22:01:17 2025 GMT
Subject: CN=60a9eed544a2c6589cf9feda28e41fd4f233b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:ca:66:a5:05:6b:84:e6:a8:9d:05:9f:f2:
cc:82:d0:c5:c1:ac:72:ec:33:49:0e:3d:94:bf:a9:
82:22:7a:fc:04:fa:78:8c:23:74:b1:b4:9d:8d:ac:
bf:e9:0d:e6:ad:97:7a:9c:28:30:c1:b4:2a:ec:da:
9d:4b:07:d4:a5:e5:63:4f:39:d7:64:36:9a:de:38:
42:2b:18:ac:c3:06:65:19:8c:e6:34:87:2a:3a:5a:
c2:bc:0b:b3:47:68:fd:b9:c7:58:0d:0f:61:00:2c:
a6:9e:2c:30:2c:25:13:91:37:b1:17:34:8a:8d:d5:
de:d7:60:ff:ed:35:aa:ad:50:40:4e:9b:92:d4:3e:
96:20:c7:cf:f7:48:90:59:99:f7:08:32:01:18:34:
aa:4f:88:47:8f:b4:03:c6:10:34:3e:94:0f:60:30:
d1:2d:f2:c9:54:b4:8f:e1:9c:72:3c:8a:7c:45:86:
fd:68:8a:b1:1b:91:d9:63:7d:db:c7:13:14:b4:fc:
3f:37:69:63:52:52:fe:43:31:82:e8:ce:8f:a4:fb:
83:ab:db:95:db:69:61:83:71:de:8c:8c:4c:d4:6c:
f7:76:5e:58:5a:9f:9a:62:03:1e:27:83:1c:3a:e8:
6b:0f:14:9c:e8:7b:e1:9b:5b:cb:95:20:9c:cd:cb:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:EE:D5:44:A2:C6:58:9C:F9:FE:DA:28:E4:1F:D4:F2:33:B5:2E
X509v3 Authority Key Identifier:
keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:77:b0:af:f8:77:cb:85:21:7e:65:8b:ee:cb:de:d2:22:
05:cb:21:47:40:b9:06:15:3c:5b:85:d1:05:9c:75:09:43:fd:
fb:2a:d2:92:1c:3f:32:2c:b0:ca:4a:b5:5e:93:65:b4:51:6a:
ca:6e:b7:14:b0:b3:12:29:37:37:13:d3:44:91:38:d6:d1:13:
24:47:79:a2:ea:3f:61:8d:ae:a5:28:6c:49:36:41:cb:40:32:
4c:0f:37:ec:db:b5:85:22:3e:f1:db:29:8e:9a:6c:d9:64:0e:
98:14:54:49:78:0f:9f:1f:9f:be:67:23:e7:62:53:3a:8d:6c:
95:9b:5f:2c:50:de:55:e7:3a:56:39:3f:2a:6a:3c:bb:82:54:
27:33:27:4c:93:42:2c:da:88:27:0c:5b:fc:80:5a:82:61:fc:
ae:19:8d:0d:7e:80:cc:4d:f7:5d:55:1d:4f:f9:d8:b8:b3:15:
a4:b1:ab:e9:64:55:56:23:78:7c:3b:f6:17:2f:bd:64:e8:4b:
e2:0a:60:90:c3:76:bb:23:54:8d:ab:4d:d0:48:f9:63:9b:d1:
54:57:2a:bc:6f:fe:ca:4a:7a:40:1a:24:f9:b9:5e:58:27:61:
4d:b5:f5:7e:1b:71:a7:bb:68:81:f9:37:55:6d:05:f6:c1:da:
84:0e:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:39 2025 by rpki-client