Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: 5Wes4pWtEwu/XX/E8efrYRRsdns3HdlgcCvwqxlWlQc=
Subject key identifier: 5D:C3:3E:30:77:23:24:8B:F0:36:4B:E3:1D:6A:3C:86:38:CA:A7:C0
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 0194C387610C243C033ABDE73213AE4EED8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0A94
Signing time: Sat 01 Feb 2025 22:00:16 +0000
Manifest this update: Sat 01 Feb 2025 22:00:16 +0000
Manifest next update: Sun 02 Feb 2025 22:00:16 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: AWNAvY78NNZ8xXl6S2qUbahw5FZds0r0KRqQ2E/EUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:61:0c:24:3c:03:3a:bd:e7:32:13:ae:4e:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Feb 1 22:00:16 2025 GMT
Not After : Feb 2 22:00:16 2025 GMT
Subject: CN=5dc33e307723248bf0364be31d6a3c8638caa7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:4b:43:0d:92:6f:74:c8:2d:d4:14:53:2a:
dd:2d:8d:5f:93:b9:3c:d9:a4:77:ff:5b:20:45:da:
ce:53:b2:b8:eb:1b:d1:96:48:ea:a6:f1:e6:3c:ff:
c1:a0:70:97:49:b0:5a:de:fa:b0:29:47:5b:87:33:
1d:42:56:ae:ae:41:d2:c7:40:d6:74:b2:ab:1b:f6:
3f:7b:ed:4d:df:b9:7b:4e:fc:ab:5c:07:97:c1:24:
3b:50:04:85:1c:32:53:2b:8a:46:75:7a:4c:c3:73:
10:2f:be:c0:f0:a8:85:b7:37:2e:6e:64:5d:c1:01:
e2:c7:18:cd:69:73:dc:9a:85:85:18:d0:ac:3f:2f:
73:d5:56:b9:38:45:47:c4:23:21:39:3d:3d:a1:68:
a7:ff:5a:31:2c:7c:b6:26:0d:52:49:75:67:86:78:
5d:78:ca:7f:c7:82:f2:31:67:d9:4d:19:7a:9d:9c:
47:39:a7:62:f9:97:8b:57:a7:0b:07:4c:b7:45:d0:
07:f7:78:06:3e:1c:b4:ec:72:17:a9:3a:c8:65:81:
8c:31:94:e4:3c:70:92:7f:61:60:a4:43:3e:7b:4b:
a1:44:bd:5e:f7:82:51:1a:69:e0:6e:50:bb:63:cd:
96:3c:65:1b:4a:54:dc:86:52:ca:cd:81:09:8a:1c:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:3E:30:77:23:24:8B:F0:36:4B:E3:1D:6A:3C:86:38:CA:A7:C0
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:30:9e:89:74:53:3f:f4:16:7e:7f:14:cd:ad:12:94:48:
b9:12:b7:dc:87:49:19:cd:2f:26:08:03:9d:28:8e:f2:7d:e5:
e8:d3:2a:27:82:29:a9:09:9e:d8:f7:88:68:c6:2a:54:c6:25:
49:7b:8e:e9:04:e3:82:29:92:1a:4c:96:c5:e1:b4:71:79:fd:
e1:49:55:40:31:3f:7c:99:e5:c9:16:4c:0c:88:f6:85:fd:16:
a2:94:c7:cd:1d:b5:b3:49:51:4c:66:2e:4e:b3:9b:51:7c:cb:
f7:52:0e:c0:48:6a:d2:e9:ad:78:51:38:f0:ff:1e:89:28:c2:
d2:4a:76:45:4f:de:9f:9d:3f:05:de:7c:2c:97:c9:6c:15:44:
5e:36:5e:2a:07:37:7d:24:6c:b7:a4:64:00:30:72:31:43:b8:
ef:a9:e9:4c:4a:3d:43:ef:50:9d:e2:2b:08:a9:a8:4c:09:2d:
25:27:dd:0c:ea:ec:38:14:b7:b9:ad:ff:a0:47:82:bc:9e:07:
1f:3a:5b:02:64:34:92:b0:57:e4:b3:49:52:da:b3:03:d2:c7:
a2:64:1e:e6:7e:05:01:5d:b8:c3:5a:51:15:62:ca:15:26:2e:
4b:2b:36:27:d0:16:72:f7:57:88:9b:49:ee:1e:e0:a3:49:44:
af:22:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:23 2025 by rpki-client