Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: QBOP16ZwByMgYjZWgs2uwe2szl7MuGedPqlOEymtm9g=
Subject key identifier: C8:AB:98:CA:81:A4:E3:7A:4D:70:AD:F2:DD:1E:31:8C:D9:22:3F:0F
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 019510FDBA5A90B85AA5A0E94E84E4F6403B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:18 +0000
Manifest this update: Sun 16 Feb 2025 23:00:18 +0000
Manifest next update: Mon 17 Feb 2025 23:00:18 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: Lf7KHPOTcuUf+EkSbq2Fdexdu5W4Xa+jIoN0aUlC9Jc=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ba:5a:90:b8:5a:a5:a0:e9:4e:84:e4:f6:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Feb 16 23:00:18 2025 GMT
Not After : Feb 17 23:00:18 2025 GMT
Subject: CN=c8ab98ca81a4e37a4d70adf2dd1e318cd9223f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:8d:9d:1b:da:70:4f:af:dd:44:2d:6d:13:
94:3f:b8:c3:8e:9a:13:d3:f8:13:16:b4:20:4b:0d:
43:a9:33:1c:3a:4d:34:97:e0:f7:c8:bb:9d:95:87:
62:45:1c:47:d2:ca:37:a0:9b:2e:03:6a:0e:82:62:
d1:46:b1:a1:a2:5f:cb:84:e2:8d:18:d8:92:d3:9f:
3c:c2:5a:7c:6f:65:19:d5:ff:ef:e4:56:8d:fd:10:
99:88:d8:96:28:06:fd:b4:ad:37:fa:db:1c:4f:a0:
a6:37:88:5f:ba:28:53:2a:d7:46:e1:7a:fc:be:b5:
2e:11:bd:d6:37:11:b6:7e:e4:53:6a:82:9f:6c:4c:
81:b6:09:63:9f:22:d2:45:c1:b9:a3:9b:d7:d4:36:
96:9a:88:d9:32:7a:11:5a:2d:f8:5d:28:ec:7e:39:
7e:4a:cc:95:a2:15:5a:28:d1:3a:13:06:cd:f0:e2:
3f:9b:29:22:5e:c9:b6:e7:34:6e:8d:f1:95:a0:c2:
43:e6:2e:d4:e6:0d:31:41:54:f9:91:7d:ae:34:65:
7d:0b:2b:80:0b:73:40:8e:70:27:a7:75:a0:3d:7c:
18:56:23:9f:61:7d:8c:a4:5a:73:68:78:e0:db:26:
60:b5:81:21:25:5d:55:95:a8:06:b3:22:ff:dd:a1:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:98:CA:81:A4:E3:7A:4D:70:AD:F2:DD:1E:31:8C:D9:22:3F:0F
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:e2:b6:89:50:16:85:f6:1e:aa:1d:f4:c2:83:2a:76:ea:
be:98:c8:28:98:53:c6:d2:df:2e:70:20:73:4b:13:d2:ba:8f:
9a:78:eb:d5:35:8a:ae:8a:c1:67:14:e0:74:da:c7:ce:b5:d0:
80:82:78:99:c0:66:aa:e1:14:87:21:5e:51:b8:bb:d3:de:97:
60:17:18:b9:7c:2b:e0:84:f4:24:5e:c1:a0:4b:63:fc:30:cd:
3c:a3:9f:19:1d:eb:d5:4b:3d:e8:c4:c7:d7:ec:2b:b0:e6:4a:
ec:de:da:60:64:ff:7f:e3:7c:b0:ef:b3:8e:16:72:c0:84:9a:
f6:c9:a3:12:09:ea:a8:74:82:30:62:2c:f7:d5:35:ed:63:0c:
84:e2:6a:a3:9b:7f:86:8a:ca:b4:35:07:5c:c8:9e:37:79:95:
77:da:c2:6f:59:34:9a:53:34:1f:ca:03:f1:5e:ea:f1:3f:6f:
24:f1:f6:1a:d5:47:0d:18:87:e5:87:e5:40:f1:ae:f3:5b:80:
6c:f7:30:e9:7a:9e:da:46:12:a4:9d:a0:37:74:49:ea:c4:bf:
e2:5e:11:49:ac:a8:02:91:5b:03:5a:ad:f3:b9:ef:56:fe:8c:
82:ed:e9:a1:10:96:84:f4:0a:79:5c:21:4a:ef:91:29:6e:90:
9e:09:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:30 2025 by rpki-client