Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
File: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft (raw, json)
Hash identifier: 9SIV3ydd3B5FEvgLQ/4P+vWIGdRJKbPyRm6INTgP5JE=
Subject key identifier: D1:47:85:82:15:FF:67:E6:E1:64:E6:63:3E:9A:57:39:C0:10:CF:25
Authority key identifier: 6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
Certificate issuer: /CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Certificate serial: 0194C463AB9D4A64F91E5CA961DDD6332BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
Manifest number: 0698
Signing time: Sun 02 Feb 2025 02:00:53 +0000
Manifest this update: Sun 02 Feb 2025 02:00:53 +0000
Manifest next update: Mon 03 Feb 2025 02:00:53 +0000
Files and hashes: 1: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl (hash: a3suk7qfZ8dob+Vb6MrBXvPuugWEO2NToAXa4lR2sS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:ab:9d:4a:64:f9:1e:5c:a9:61:dd:d6:33:2b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Validity
Not Before: Feb 2 02:00:53 2025 GMT
Not After : Feb 3 02:00:53 2025 GMT
Subject: CN=d147858215ff67e6e164e6633e9a5739c010cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:44:8a:70:39:b4:5d:72:ff:2f:d4:19:17:
3e:e8:cc:f2:e7:c6:fc:7a:83:43:9c:f0:ef:18:a4:
34:41:3d:a0:98:15:8b:36:23:20:94:69:fc:62:6c:
76:eb:06:bc:3e:1e:43:56:de:73:61:31:56:e9:c3:
d1:6d:55:17:b1:ff:e8:1b:09:8e:e9:99:9e:b0:1b:
26:0d:25:44:56:3e:9c:f8:ac:11:96:77:06:c1:3a:
30:37:f0:75:1c:bc:08:b8:b1:2f:02:d5:ed:4e:14:
dd:d8:99:7e:91:d2:2a:9a:ba:5d:01:08:c1:01:14:
bc:74:37:23:d5:94:ff:ca:02:af:1c:0f:e7:07:83:
af:10:4c:bc:79:4c:f8:fa:d8:9d:31:ab:15:73:ab:
59:34:10:a0:1c:e4:9a:0c:0f:7e:b5:a9:8c:82:9d:
82:20:f7:d3:b2:bf:24:96:cd:ee:a7:73:db:ff:44:
b2:8f:02:eb:bc:48:e2:89:e4:43:da:d5:7e:b2:33:
9a:04:4e:62:f1:15:0a:f4:5f:aa:8b:ad:8f:f5:aa:
2f:7e:91:d5:88:aa:66:9a:6e:37:62:09:b6:24:61:
4e:89:ed:74:bc:1e:fc:1b:aa:a1:44:2a:95:fe:2b:
16:cd:c4:76:a7:da:c5:ea:74:56:fd:1c:6e:81:78:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:85:82:15:FF:67:E6:E1:64:E6:63:3E:9A:57:39:C0:10:CF:25
X509v3 Authority Key Identifier:
keyid:6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:52:67:75:ba:06:17:70:02:e4:4f:2d:24:35:d2:3d:6a:cd:
e4:60:29:d1:56:4e:ab:dd:e5:0d:93:65:30:80:e1:d9:0e:6e:
80:a4:d7:2f:fe:26:c0:72:a8:c2:20:01:d0:9d:84:13:a9:1e:
23:ca:f9:e4:26:c2:fe:3c:a5:89:52:35:75:6c:95:fe:b3:1c:
6a:2f:67:5c:8d:33:28:0c:b9:07:c6:3a:59:8c:fd:b0:dd:aa:
3f:ff:50:b6:2f:45:a1:ce:1a:f0:76:ad:31:8c:30:c6:f2:ba:
0d:de:7b:ed:73:c8:16:3e:8e:62:83:db:78:eb:ff:29:38:bf:
af:c4:16:35:88:d8:6e:c3:01:26:88:23:c3:3e:7f:66:ce:6b:
d2:db:74:ae:48:77:ca:c6:15:76:3b:e6:cd:4e:a0:9a:fe:ee:
b0:4e:7d:e1:42:56:b4:6f:d2:f6:2a:90:33:74:b7:b5:b0:68:
d9:c6:82:50:01:7d:61:fc:8f:3b:a0:df:46:13:c5:e4:d1:74:
f5:f5:5d:15:d5:89:21:63:91:55:52:e3:6b:f7:c5:09:2f:1d:
63:9f:0a:d7:f8:f9:c2:27:6c:1f:e9:3b:df:e6:aa:01:cb:54:
ce:76:e9:95:3a:94:38:9a:af:9d:31:54:3d:d3:05:03:f4:36:
ca:e2:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:44 2025 by rpki-client