Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
File: Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft (raw, json)
Hash identifier: cp3df6k7jxlskmcq+jRU+fkJk0cNOhG+rVKttNhvo7g=
Subject key identifier: 40:AC:4A:6F:3B:F2:F7:3B:54:75:99:B7:17:4C:4F:E2:EB:27:FA:A0
Authority key identifier: 2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
Certificate issuer: /CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Certificate serial: 019511A2B213727D5305F8AE068E626B5BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
Manifest number: 047A
Signing time: Mon 17 Feb 2025 02:00:29 +0000
Manifest this update: Mon 17 Feb 2025 02:00:29 +0000
Manifest next update: Tue 18 Feb 2025 02:00:29 +0000
Files and hashes: 1: Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl (hash: o1C3r2sSNBHdtJIAL/s1Wm88wsc2oEpgNl708svekso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b2:13:72:7d:53:05:f8:ae:06:8e:62:6b:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Validity
Not Before: Feb 17 02:00:29 2025 GMT
Not After : Feb 18 02:00:29 2025 GMT
Subject: CN=40ac4a6f3bf2f73b547599b7174c4fe2eb27faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:a7:8e:53:22:db:0c:aa:a5:39:84:69:11:
4c:88:36:5f:28:d5:1e:2b:80:d5:e5:43:13:07:41:
8f:02:21:06:62:27:c4:f9:1c:31:f4:3d:ae:b4:08:
da:3b:54:ef:a7:55:b6:75:1d:74:c2:d8:17:cf:50:
87:ec:9b:89:2f:7a:ca:fd:c2:d9:b6:0b:07:5f:79:
17:72:17:5a:d8:47:94:40:8a:b7:1b:46:31:41:79:
73:5e:40:24:52:2d:ae:8c:87:35:6c:75:56:e9:b9:
3c:ca:15:54:68:e1:b4:23:19:8c:a5:f0:56:20:46:
db:93:63:be:f8:db:7d:c2:3c:d6:16:b1:88:bb:67:
61:8b:38:a2:bc:39:c3:fa:4f:53:94:f2:8e:d1:2f:
1d:d0:9d:ea:a8:ff:d3:2e:d6:80:f9:c3:8b:9b:6d:
d6:5d:d4:b3:ed:47:32:e5:27:5e:32:6b:76:8e:1f:
13:c1:aa:e9:93:65:73:a9:71:82:a1:87:d1:b0:aa:
b6:ff:a4:14:bf:09:73:f7:db:3a:70:3f:fc:6b:d3:
b0:ef:c1:7f:73:8b:4e:bf:0f:1b:74:17:0c:48:bd:
c9:55:00:bd:21:a8:bc:12:5e:73:ea:88:15:64:65:
a2:37:e6:2a:34:69:e2:63:63:84:ed:6f:03:4e:94:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:4A:6F:3B:F2:F7:3B:54:75:99:B7:17:4C:4F:E2:EB:27:FA:A0
X509v3 Authority Key Identifier:
keyid:2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f7:e3:af:4c:4d:c2:fc:dc:c5:67:62:26:4b:6d:ac:6a:7c:
41:e5:f5:ed:aa:2c:c1:a3:73:65:b8:a5:a2:fe:7a:d5:dd:af:
a9:76:1d:4b:f9:a4:36:a3:8a:23:63:e5:09:8b:12:71:14:b3:
87:48:56:63:59:5f:c7:6d:4d:4e:d8:66:4a:a3:8f:78:48:2e:
30:d4:db:ef:64:78:32:c6:5c:db:6c:73:ae:72:26:7f:ce:a2:
ae:f1:00:98:b1:43:88:25:c5:ee:62:58:1e:a2:b2:4a:8f:fa:
ee:e7:18:e0:be:f5:e6:a3:57:20:af:c4:eb:d0:26:d4:f3:38:
58:b3:a5:28:5b:68:3e:11:0d:fc:72:f6:f6:62:39:33:74:fb:
cc:83:98:45:10:83:64:f9:96:40:56:aa:b5:6b:58:67:13:64:
ee:ba:58:a0:02:4b:d5:be:dd:d1:e2:5e:0a:b3:b9:36:f4:01:
15:11:33:0a:57:09:d7:10:d5:32:69:1b:cf:43:c4:05:17:27:
b9:37:ca:02:75:8f:d5:e5:dd:7a:69:d3:9d:ee:89:2e:32:b2:
2e:ee:01:48:df:ff:27:66:63:e7:6c:d8:ae:34:63:19:db:d0:
85:4a:a9:26:10:9b:e3:d7:ac:90:7e:42:d9:ef:5a:32:3c:fc:
ab:c4:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:25 2025 by rpki-client