Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: kNe/rbvsqNtkIAjpFX5Axbxu5jejP0HNp8jNtFfKDJ8=
Subject key identifier: 2A:61:F6:64:4F:94:86:A5:42:FE:D3:4E:1E:FF:EC:67:86:B4:E0:59
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 0195127E4BA85F951FAE9C733558B64DBF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 08B8
Signing time: Mon 17 Feb 2025 06:00:21 +0000
Manifest this update: Mon 17 Feb 2025 06:00:21 +0000
Manifest next update: Tue 18 Feb 2025 06:00:21 +0000
Files and hashes: 1: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: UeuOEJ4LO8JqIMxMQq+1INZuCJVZTncLPRyCCxo/Rqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4b:a8:5f:95:1f:ae:9c:73:35:58:b6:4d:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Feb 17 06:00:21 2025 GMT
Not After : Feb 18 06:00:21 2025 GMT
Subject: CN=2a61f6644f9486a542fed34e1effec6786b4e059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:ea:06:31:d1:f7:0b:91:f4:df:70:b6:69:
69:66:21:93:b3:1a:ac:56:1c:77:38:5b:d6:7e:62:
d1:3e:45:fc:a1:31:d5:42:8e:53:82:29:b7:0d:61:
22:1b:a4:a2:fa:de:aa:24:b0:0d:46:cd:db:18:98:
b4:82:4e:2a:6b:98:f5:0e:49:d0:0c:95:01:2c:d3:
b3:2c:0c:1e:5c:4f:d5:c9:fc:ba:73:30:70:de:56:
60:53:e9:a5:ed:d9:40:20:e1:db:20:94:eb:82:ae:
32:6f:ac:70:41:4c:14:6c:ba:1e:aa:18:6b:9c:55:
cb:8f:68:3e:bd:16:a5:1c:50:65:a2:d0:cf:92:b5:
4c:ac:82:52:08:c2:d0:1c:d6:f7:73:07:02:83:89:
54:85:0f:a5:f6:68:b9:73:83:d6:3f:03:49:04:f3:
e6:0a:95:37:26:b8:91:87:6b:e4:5f:9e:a1:44:fc:
57:9f:57:d0:39:c8:ec:eb:b9:d3:0e:d5:78:ef:7f:
79:ee:e5:5d:79:3d:b1:49:bc:29:ed:f0:90:7d:e7:
bc:9e:72:fb:26:1e:0b:f5:87:6e:7c:64:3d:37:ad:
a5:d3:73:58:5a:09:23:72:95:da:9d:d7:56:f5:d4:
85:ea:47:de:8b:bc:d4:1a:a2:97:52:6f:2c:23:3d:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:F6:64:4F:94:86:A5:42:FE:D3:4E:1E:FF:EC:67:86:B4:E0:59
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5b:38:c3:bd:3d:9f:eb:01:11:a5:77:71:50:33:c7:e7:e1:
c5:ef:8e:f1:2e:75:5f:7a:82:6c:82:c9:3a:de:50:d7:00:5f:
43:4a:e8:96:b4:37:ec:1c:2c:53:49:3b:89:81:b5:61:4e:2f:
f4:8b:8c:b0:a1:31:ad:ec:c9:c2:b1:7e:5d:65:6b:8e:42:00:
1c:f9:91:33:03:b7:d1:0b:a9:22:ee:1a:e3:3d:64:e9:70:ab:
c2:d8:40:85:7b:f6:8b:bb:78:8c:57:12:48:b3:ed:1b:79:cf:
8f:9a:e7:62:e2:ed:2c:fc:23:00:52:a7:79:7e:ba:00:1f:81:
9c:3f:be:f7:b7:c2:56:0d:68:b9:28:04:b0:c4:d8:41:78:d0:
cd:18:6d:16:53:f3:75:28:b0:75:45:ad:6c:d5:03:c7:75:e1:
c3:b3:15:86:e9:75:ed:8c:cb:e8:4f:27:b3:83:4e:9e:53:56:
fe:f2:13:c8:49:29:bc:e8:05:1e:cd:ff:d1:56:4d:63:85:55:
6b:6a:16:ee:04:4a:0a:65:60:b2:50:9e:66:05:10:db:0e:16:
46:e9:14:91:dd:05:8d:0b:6b:64:1e:dd:70:d7:5e:fc:e7:ff:
53:5e:72:52:13:ff:02:4e:d9:6d:1d:80:56:ff:e5:56:02:99:
ad:fe:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:21 2025 by rpki-client