Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: rQ0Lz6ers4EOJslvm9z4VlG9sxTN3h7xEDlnhG56wik=
Subject key identifier: CC:9C:BD:0E:B4:A3:57:0C:1D:D0:93:B9:57:94:73:BC:8B:E0:F1:0E
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 019511A2CEDCE3D0451BD2858587E84299D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 08CC
Signing time: Mon 17 Feb 2025 02:00:37 +0000
Manifest this update: Mon 17 Feb 2025 02:00:37 +0000
Manifest next update: Tue 18 Feb 2025 02:00:37 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: 0Pz0iNnp6KpXCNbblRF1t+Hrevy5rIeFY9StKpIvT0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ce:dc:e3:d0:45:1b:d2:85:85:87:e8:42:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Feb 17 02:00:37 2025 GMT
Not After : Feb 18 02:00:37 2025 GMT
Subject: CN=cc9cbd0eb4a3570c1dd093b9579473bc8be0f10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:2f:38:a6:e7:66:be:61:20:de:6d:65:ab:
8d:21:48:f2:a3:96:4b:93:e9:aa:59:01:9e:99:11:
58:bb:2b:9f:b6:38:cc:b3:e1:de:a2:7a:5c:71:0a:
35:c8:fb:a2:00:59:0e:25:8d:c1:df:14:e4:07:6f:
b2:58:5d:fe:ec:29:4f:fa:48:a7:ae:41:94:48:a4:
b3:06:9f:fa:60:d3:3a:96:52:84:d3:1d:61:50:c8:
d1:61:b0:03:47:8c:e1:dc:9e:f9:70:1e:dc:4e:f6:
00:25:a5:be:38:b4:0e:a8:ce:a2:46:35:ce:3f:dd:
14:27:fd:9c:e6:3b:e2:83:7b:90:7f:b5:c0:ca:25:
86:c7:d6:a1:75:78:b4:d1:db:6d:c4:f6:dc:02:54:
ed:fe:2a:42:e7:cb:01:72:5c:09:cf:76:20:81:24:
9e:a5:d2:79:64:5e:30:c1:c9:99:1c:e6:dc:02:6f:
32:b1:37:34:97:70:89:4f:58:39:53:f3:a2:41:88:
87:1f:8d:4b:cd:b1:ed:06:85:06:c9:37:3a:fb:ab:
c2:fa:c0:e1:fd:bc:58:f0:ed:55:fb:a2:3a:09:75:
73:b8:66:43:85:40:5a:75:ab:68:2b:87:ca:15:1e:
b0:c7:16:ac:5b:fc:ae:ad:b4:8b:e5:1e:54:0f:2e:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:BD:0E:B4:A3:57:0C:1D:D0:93:B9:57:94:73:BC:8B:E0:F1:0E
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d1:c9:ac:98:bb:b6:a8:16:ba:44:38:af:31:f2:8e:90:93:
9e:f4:48:0a:1e:d2:b6:8e:30:d2:24:d9:54:48:62:7e:10:8b:
62:4f:bf:45:e9:21:e7:69:d3:4d:1d:55:dd:b5:8b:07:78:a5:
b9:99:35:fe:fc:e1:7f:da:e1:38:6f:d7:c7:c4:f7:65:85:d8:
91:39:53:36:56:15:a8:ee:ec:ad:19:92:e4:1d:53:e5:96:76:
30:7a:95:96:02:b1:3b:86:97:ef:1e:47:9e:8c:cc:79:b1:51:
67:e2:8a:18:71:0b:e8:3a:7d:8e:d2:ed:e3:29:b2:0a:46:4a:
52:ef:59:26:ac:f9:d6:0b:26:8b:3e:99:dc:1e:9c:ae:3b:c9:
9c:59:87:9d:0e:b8:4e:b1:76:ee:17:9b:e0:f8:49:44:1b:6d:
62:1b:f6:1a:63:8f:92:56:59:c4:55:82:de:05:58:04:3b:b4:
44:a4:8a:05:08:20:c3:c1:bc:22:80:43:d1:f7:79:1f:67:c4:
d5:40:eb:e4:96:af:12:56:f9:1e:51:33:7d:0a:e5:2e:e3:f7:
94:95:bd:bb:cc:3e:da:05:34:c0:17:b6:85:28:bf:c5:36:9b:
17:e7:6f:55:5a:02:4e:e6:1a:95:7d:eb:b2:92:3a:0b:0d:94:
21:b3:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:50 2025 by rpki-client