Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: 7TjJQQacWCxU8OqDIIY/OVFsnqsztw5oT9BFalNzJHg=
Subject key identifier: 3B:39:3B:44:8B:F9:7B:ED:13:48:17:2F:40:29:8D:54:2D:13:20:26
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 0194C4634C5CF28AF6A353E403BE3AA29645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0C89
Signing time: Sun 02 Feb 2025 02:00:29 +0000
Manifest this update: Sun 02 Feb 2025 02:00:29 +0000
Manifest next update: Mon 03 Feb 2025 02:00:29 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: Yro2jDT7BftRX4cKdckCOPncCgd3I+R2Qrb01QKNChc=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:4c:5c:f2:8a:f6:a3:53:e4:03:be:3a:a2:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Feb 2 02:00:29 2025 GMT
Not After : Feb 3 02:00:29 2025 GMT
Subject: CN=3b393b448bf97bed1348172f40298d542d132026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:69:b9:35:d5:d1:2d:ff:3a:d2:87:85:7d:
98:60:42:ea:3d:25:90:c0:69:cf:d9:a4:f2:86:d0:
0b:78:4a:29:03:bd:23:de:a6:22:a6:7e:7d:70:a4:
b0:6c:ac:2f:09:98:b6:63:b9:23:ce:13:65:2c:58:
e3:62:ed:55:1d:36:a9:07:8d:97:4a:58:e5:90:9b:
5c:c6:48:0f:7b:e5:e4:e3:01:e6:be:9d:67:e1:30:
8c:b9:c2:bd:82:01:b6:91:f6:50:b8:5d:32:ad:79:
e7:a6:09:dd:1b:6e:ac:06:c6:67:a1:6d:2e:02:f1:
59:d6:e1:fc:a2:e0:46:f7:23:38:7e:9f:0e:4f:ad:
5a:60:82:2d:60:8c:8f:da:ca:cf:a9:58:26:ae:59:
bd:09:7b:ba:df:d1:83:4c:d9:8d:2b:72:07:c7:18:
88:7f:2f:7e:22:97:ee:eb:da:d6:f4:ef:02:5a:eb:
8e:21:09:d7:21:67:d4:a7:73:fc:00:78:4b:97:0f:
35:c6:23:d5:12:f8:ae:fe:b9:7b:01:0e:94:5c:42:
c9:e3:ca:93:36:45:a7:64:bf:a6:af:07:55:16:d5:
24:2e:e5:c7:8d:91:2f:4d:5b:c3:8e:e1:2f:cc:92:
57:39:0a:c8:c0:e4:03:7f:6b:0c:90:38:1e:d9:09:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:39:3B:44:8B:F9:7B:ED:13:48:17:2F:40:29:8D:54:2D:13:20:26
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a7:a4:5e:08:13:02:29:17:2b:35:9e:48:ff:54:66:8b:ba:
94:5e:02:19:09:49:51:a7:dd:9c:75:7d:05:c4:8f:39:a2:3f:
fe:50:c4:f3:30:63:bf:9d:b2:df:0d:dd:d3:3f:ad:9d:0e:90:
cf:a8:c7:a1:00:55:ae:e1:cf:4d:ec:ac:37:62:12:a4:3b:fd:
05:0d:76:bc:52:59:cd:86:d0:de:77:c7:36:ed:d9:20:1a:26:
f2:91:5a:cc:9a:c0:cb:55:b8:5f:bc:c6:31:37:46:47:aa:1e:
2d:6a:0e:bf:33:bb:54:dc:d5:26:47:30:c7:ed:ce:61:af:6a:
1f:af:24:bd:f9:2d:5b:14:50:9f:67:6d:88:c3:c0:be:fe:d7:
b9:24:ae:79:b7:56:33:49:f1:e0:39:33:15:6f:14:84:f7:90:
56:36:c0:77:a5:62:9d:c9:02:bd:8f:7a:52:5d:27:72:7a:e1:
df:b1:d3:18:3b:40:95:c4:ad:7e:6e:02:31:6e:3d:d6:36:37:
f7:be:5e:13:20:b0:f3:ce:42:94:78:11:7f:25:dc:0e:6c:2e:
76:e1:15:ff:3b:17:b5:43:e7:07:c1:0d:ed:11:a2:d1:c3:76:
ad:f2:46:3f:76:be:7d:74:48:6b:bb:87:0e:38:06:4e:19:0d:
36:f1:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:06 2025 by rpki-client