Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
File: RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json)
Hash identifier: DtkJ1O/5pPgZLQiOzDI0hCNl5LtOHqniqAcVqktwWAk=
Subject key identifier: AC:9D:9A:CB:E8:D4:C4:E7:A8:67:0D:E0:C3:51:27:9D:51:8B:4F:13
Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
Certificate issuer: /CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Certificate serial: 0194C4D129ABAD66B39D8F58C3F4F2F26283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
Manifest number: 05FD
Signing time: Sun 02 Feb 2025 04:00:29 +0000
Manifest this update: Sun 02 Feb 2025 04:00:29 +0000
Manifest next update: Mon 03 Feb 2025 04:00:29 +0000
Files and hashes: 1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: 6A+xgcXsRKxqxcN7QmM8GYmMLtb3Zs9XT2Jb6ErmNa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:29:ab:ad:66:b3:9d:8f:58:c3:f4:f2:f2:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206
Validity
Not Before: Feb 2 04:00:29 2025 GMT
Not After : Feb 3 04:00:29 2025 GMT
Subject: CN=ac9d9acbe8d4c4e7a8670de0c351279d518b4f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:de:8e:c7:87:b7:46:9d:2e:d8:81:e9:0d:
8f:12:dc:38:c8:36:8f:a3:52:d6:01:8f:64:84:9d:
20:b3:63:1c:67:e3:1c:dd:76:a4:2a:31:fe:d4:d0:
0a:40:47:cc:72:e6:7f:db:d5:79:eb:92:a8:78:52:
09:34:e0:be:79:22:a6:86:42:0f:1d:02:98:a8:12:
78:dc:18:78:48:0a:6f:8a:26:06:0c:1f:94:04:3f:
04:c3:6c:38:df:b0:4f:db:8b:13:64:d9:e9:6f:53:
5c:4c:46:03:0c:53:47:8e:4f:6f:e5:e7:63:89:56:
22:86:97:a9:d7:78:16:46:ac:ae:12:5f:ef:7c:20:
8b:ab:2d:c3:13:18:61:f4:90:6b:1c:7b:d2:84:f6:
da:c1:a8:61:46:da:47:ef:26:84:0c:26:fe:c6:79:
3e:79:58:1e:e3:f2:d6:9d:66:e1:65:ce:f2:72:e5:
8d:66:c5:c9:78:ac:8b:d5:0b:ee:24:22:43:29:94:
fa:3e:9e:8f:d1:b0:81:3d:c4:4b:a6:85:19:6d:79:
51:7a:59:58:b7:c0:8e:4a:20:9c:78:45:1c:4f:8c:
f9:d3:0c:f9:2a:59:82:cb:5c:e5:17:4e:59:2d:7b:
af:c8:08:4b:43:4c:67:3a:6f:8e:76:48:e2:61:8f:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:9A:CB:E8:D4:C4:E7:A8:67:0D:E0:C3:51:27:9D:51:8B:4F:13
X509v3 Authority Key Identifier:
keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:c2:a1:c1:7b:88:f3:a8:ad:92:d6:e0:de:64:13:0c:31:
fe:0a:52:b1:91:5e:c9:35:e6:16:34:2f:16:b7:6b:90:7b:e7:
bc:97:36:6a:42:92:49:63:0f:b9:16:87:7f:9c:32:34:d2:76:
98:42:56:98:4f:ca:57:46:14:bc:0c:82:c7:56:d0:39:f7:f7:
d8:a6:5f:c0:0c:d6:11:ba:51:9b:73:6f:7f:22:00:76:c6:9d:
f8:f1:ce:ed:c6:ad:3e:c2:94:ad:40:a1:a3:ff:ae:db:d6:6b:
af:1e:23:d2:a3:1c:da:a3:63:d5:dc:62:4c:1c:18:ce:fe:33:
cb:d8:13:1c:e7:8a:eb:a7:4b:3c:0b:bd:ef:4a:96:92:38:96:
28:81:fc:7a:2c:09:ca:25:dc:fb:00:c8:32:46:c7:c0:e6:93:
87:9d:29:d4:30:2d:18:1d:17:51:d6:df:41:67:54:35:a9:f9:
48:0e:be:62:4a:b7:31:6c:43:c3:5e:5c:29:2e:4e:4c:c0:a6:
2d:36:cd:0e:10:0c:d2:4d:9b:31:ff:e0:1b:a3:49:e2:3c:06:
1b:fb:c0:4a:3c:d1:da:6f:23:e6:99:44:fb:b9:9c:b5:4f:29:
0f:e4:5b:2e:e0:39:25:40:41:1a:fa:b9:98:d4:5f:de:2c:6a:
82:1d:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:46 2025 by rpki-client