Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: kbKUU1No6M6lUgcaJ74O8udXQrpCVlT4EQOTmlzpscw=
Subject key identifier: C4:E7:23:B5:0D:88:9D:B6:87:BB:E6:F9:F5:0D:1C:D4:36:7F:58:A0
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 0194C42C5479036849D59FD922B8EC019C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0639
Signing time: Sun 02 Feb 2025 01:00:27 +0000
Manifest this update: Sun 02 Feb 2025 01:00:27 +0000
Manifest next update: Mon 03 Feb 2025 01:00:27 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: PRqK3PO4rqve5PW0VCJGa3SfsNqXLETkRMesmTevxeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:54:79:03:68:49:d5:9f:d9:22:b8:ec:01:9c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Feb 2 01:00:27 2025 GMT
Not After : Feb 3 01:00:27 2025 GMT
Subject: CN=c4e723b50d889db687bbe6f9f50d1cd4367f58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:79:b2:33:aa:5c:8a:17:38:e2:40:07:0c:
2a:7e:9b:5d:b3:7d:95:39:71:12:b9:c5:53:1c:3c:
4f:37:fb:1b:84:d3:77:c0:f8:7c:1d:6c:0c:59:4b:
59:28:cc:ac:3b:d5:13:ab:a8:2f:e6:e0:9d:ca:5e:
a5:c4:80:51:37:8d:0f:18:37:e9:82:52:a1:81:c5:
a9:39:a3:d9:a4:49:df:d0:34:8d:2f:81:b2:21:47:
da:43:ad:70:06:a4:3c:58:1e:7d:19:19:35:15:74:
9d:72:e6:b7:41:19:28:d4:e4:a6:09:da:25:28:00:
a6:62:bf:e9:1a:97:53:6f:69:c1:e4:32:79:54:43:
a9:c7:18:d1:2d:d4:8f:9b:50:76:e7:be:4e:89:a7:
55:67:73:d9:61:38:ad:5e:e9:0c:55:dd:5f:d7:76:
34:dd:6b:02:46:de:6b:ae:22:3f:9c:eb:d7:bc:35:
21:43:db:4e:50:a4:38:96:2c:02:d7:92:0d:27:f2:
6a:11:83:2f:5e:31:e6:50:12:41:b7:85:fc:ef:e7:
5e:b7:8a:a7:fc:df:0f:9d:3b:e2:3f:61:fd:cc:e0:
e5:02:ae:ee:56:99:9f:50:e6:29:c9:e3:eb:d1:8b:
78:7a:63:eb:7e:17:a4:ca:0f:8f:80:ed:bb:e0:26:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:23:B5:0D:88:9D:B6:87:BB:E6:F9:F5:0D:1C:D4:36:7F:58:A0
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:42:dd:f2:3e:7b:7d:0b:bd:5e:36:30:22:a9:bb:91:31:fd:
46:b8:82:5c:d5:e7:4d:53:70:4a:fb:a6:c7:8a:73:f8:e6:12:
80:d6:85:d0:c0:66:64:ee:40:5e:5d:bc:ef:23:4e:3c:ac:49:
64:0d:a5:35:e5:0b:cb:b5:eb:b1:75:d5:ae:9c:58:ef:18:bf:
27:19:26:84:de:de:4e:3f:c6:74:db:78:7b:f3:a9:62:d9:65:
55:6d:5a:da:47:cc:50:bd:bd:2d:9b:53:a9:88:2d:ed:c5:ca:
96:1c:62:33:8a:8d:15:90:ac:68:5e:9d:4a:1f:22:17:58:c2:
9a:d2:ec:f7:fb:0d:28:db:63:99:6c:48:e7:6b:f1:38:9b:59:
34:bf:9b:4a:32:4b:61:9a:a7:0b:e4:16:16:ac:2a:d8:2c:6b:
77:42:9a:3b:82:97:31:da:53:bf:91:43:7f:ea:4b:0e:04:b3:
2e:9c:47:9e:fc:87:bb:74:17:e4:8b:9e:d1:77:dd:1a:eb:6d:
a0:35:48:bd:81:db:76:22:21:f9:85:80:c3:ae:36:1f:03:37:
aa:d6:6e:f0:11:3a:25:96:48:4f:a1:5a:8b:fb:7c:aa:79:09:
ea:55:f5:7b:bb:97:8d:bc:8a:19:03:15:cb:ac:d7:ea:9b:f3:
52:a3:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:08 2025 by rpki-client