Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.mft
File: oW1VV8n5s0ZvpqStXriAEIR5FbU.mft (raw, json)
Hash identifier: P3zQXCPWdHX9rikIQrDIZSLyhabW+GH64DIhtnfgj6A=
Subject key identifier: B4:35:6D:77:29:F5:EB:42:47:2C:35:0D:18:DE:C3:DC:69:70:F1:E9
Authority key identifier: A1:6D:55:57:C9:F9:B3:46:6F:A6:A4:AD:5E:B8:80:10:84:79:15:B5
Certificate issuer: /CN=a16d5557c9f9b3466fa6a4ad5eb88010847915b5
Certificate serial: 0194C4D0D9DCFBF3D38F554642293CE9DBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oW1VV8n5s0ZvpqStXriAEIR5FbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.mft
Manifest number: 60
Signing time: Sun 02 Feb 2025 04:00:09 +0000
Manifest this update: Sun 02 Feb 2025 04:00:09 +0000
Manifest next update: Mon 03 Feb 2025 04:00:09 +0000
Files and hashes: 1: oW1VV8n5s0ZvpqStXriAEIR5FbU.crl (hash: abvDnsV1AWzG41shhabP42Tny9A7qEROYa5hpgUdl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oW1VV8n5s0ZvpqStXriAEIR5FbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:d9:dc:fb:f3:d3:8f:55:46:42:29:3c:e9:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16d5557c9f9b3466fa6a4ad5eb88010847915b5
Validity
Not Before: Feb 2 04:00:09 2025 GMT
Not After : Feb 3 04:00:09 2025 GMT
Subject: CN=b4356d7729f5eb42472c350d18dec3dc6970f1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:e3:a8:9d:49:fa:00:97:6b:06:7a:d9:ea:
87:c9:fa:a6:96:4b:a2:73:94:3e:98:24:88:97:94:
b7:cf:e0:ae:30:4c:54:4a:d7:21:3b:8d:0d:ac:34:
d0:69:44:c8:c1:e0:2c:c9:cf:9b:cd:26:8d:db:f3:
cd:fa:61:54:f0:cf:3f:6a:20:99:58:18:1a:d6:a1:
14:2d:f0:e8:07:b5:3a:97:68:8d:de:00:11:a7:30:
be:1d:23:3b:a6:39:37:22:02:05:c3:3a:8e:28:ad:
9e:08:76:1b:32:85:d5:96:34:a1:1e:57:b8:3e:a0:
8a:f6:e4:2b:a0:bd:3b:21:53:dd:90:d9:71:eb:91:
7d:40:75:0d:e2:b8:f6:3b:e3:45:68:58:49:e6:5c:
82:56:9f:81:45:0a:c5:69:37:36:c9:0e:98:c1:64:
7c:67:13:29:a5:46:f7:5b:04:58:61:c1:4e:5f:5c:
3d:a7:60:82:fc:f8:54:a5:61:91:c4:2c:26:fd:81:
8f:f1:86:3a:2f:bd:fb:c1:b9:49:b4:85:f6:97:20:
20:79:98:28:60:67:a3:73:a4:0f:54:dd:76:a3:d9:
9c:4e:82:7f:d8:85:dd:82:9e:0a:e7:4e:a0:6e:aa:
40:cf:09:68:fb:df:11:b0:9f:a6:de:52:24:dc:ec:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:6D:77:29:F5:EB:42:47:2C:35:0D:18:DE:C3:DC:69:70:F1:E9
X509v3 Authority Key Identifier:
keyid:A1:6D:55:57:C9:F9:B3:46:6F:A6:A4:AD:5E:B8:80:10:84:79:15:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW1VV8n5s0ZvpqStXriAEIR5FbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c498fa-ce8d-4a28-a23e-a1030334884a/1/oW1VV8n5s0ZvpqStXriAEIR5FbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b8:b1:e8:d1:ed:71:8c:c7:13:9c:91:3c:96:84:28:37:19:
c4:21:21:04:dc:79:52:b8:3b:f1:89:0d:a6:f4:a5:ba:3e:b5:
2a:63:17:82:b4:98:cb:00:93:23:17:01:a9:0c:ee:f1:df:61:
26:67:8b:a1:07:c3:f7:e7:95:55:1e:54:d9:b8:b0:2e:79:07:
4b:1a:f7:ab:cc:20:86:9b:5c:26:66:bd:f5:9d:25:14:75:1c:
35:8b:62:ce:d4:65:8f:87:94:3c:b6:7c:88:6a:52:da:2c:c9:
37:7d:fb:88:2b:15:01:1e:a0:6e:c4:db:37:48:e1:e4:e7:1c:
f9:ea:61:83:20:58:cc:6b:43:35:b3:38:46:df:2d:58:e5:5d:
c4:1c:38:76:16:63:e6:9e:35:8a:5e:30:31:c3:c0:b4:95:59:
a5:4a:0b:48:84:ed:18:88:f5:24:76:5e:89:f0:a1:72:70:e1:
f1:a0:89:4d:4c:1b:fc:b1:b1:0b:ab:6d:67:08:67:14:95:18:
e1:4b:c5:4b:18:11:01:e6:3b:0c:ff:e6:21:f1:71:2c:00:19:
cb:a0:df:57:73:70:17:65:1f:82:c2:27:8a:d9:66:1d:5f:28:
26:f9:54:04:da:0e:63:f8:97:ba:fc:95:6f:f4:d4:5c:eb:3d:
1f:62:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:51 2025 by rpki-client