Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: QUhrdM5Jg3i2OeTAM54QnPhxpTpPlpQHK4vXiBLIsj8=
Subject key identifier: 8A:69:4D:E9:7A:91:73:DC:11:49:29:E8:9B:D5:5B:8A:EB:61:91:67
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0194C49A3702AC04E641676BDC91FCA07BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0F
Signing time: Sun 02 Feb 2025 03:00:28 +0000
Manifest this update: Sun 02 Feb 2025 03:00:28 +0000
Manifest next update: Mon 03 Feb 2025 03:00:28 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: VDuciub5jzSKpo97Jb4241yCt3jM9zveu7UW+rHhVA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:37:02:ac:04:e6:41:67:6b:dc:91:fc:a0:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Feb 2 03:00:28 2025 GMT
Not After : Feb 3 03:00:28 2025 GMT
Subject: CN=8a694de97a9173dc114929e89bd55b8aeb619167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:e4:2c:cb:01:ae:80:30:2f:d2:34:23:e9:
7e:91:9d:0d:c2:1a:28:21:c3:b9:6d:90:a3:ab:8c:
e1:08:15:63:d5:ad:11:4d:6d:29:07:2e:b2:dd:f1:
39:44:f5:a5:ac:6a:5d:bd:b1:e6:f2:0f:8f:90:1d:
aa:fc:97:7e:f0:b3:4a:41:5b:6c:33:d8:42:4a:23:
26:8d:08:2d:79:68:9c:c3:cb:dd:25:0a:c9:89:5b:
fc:6c:00:e1:c7:55:8e:1a:ca:38:93:25:17:5a:0f:
cc:e3:74:bd:d9:0e:88:4c:ca:38:d6:13:38:35:2c:
f6:1b:b6:86:60:96:cb:76:2a:35:f7:73:6d:41:62:
e5:f3:a1:cb:6d:52:92:40:4a:9d:45:0f:a4:25:52:
45:a4:1f:b5:00:ad:59:a9:2a:f6:3d:e8:8b:74:7a:
64:38:92:b3:9e:99:2b:c5:a4:6d:13:23:7b:18:cb:
d5:ef:5e:c3:91:04:4c:e9:8f:ec:68:f5:ea:c6:a6:
e0:89:84:4b:0a:aa:df:98:a8:2c:43:51:87:08:f7:
dd:f0:eb:71:eb:89:71:95:97:a4:2e:c4:a1:13:16:
13:74:99:fe:89:58:8f:d9:3c:92:72:43:9b:b5:f0:
ff:c2:07:f7:62:00:51:76:7a:0c:6a:f9:67:0d:49:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:4D:E9:7A:91:73:DC:11:49:29:E8:9B:D5:5B:8A:EB:61:91:67
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3a:82:1f:d8:b8:c3:55:3a:6a:93:38:9f:41:db:84:66:6d:
1d:b1:52:3d:7d:54:4b:93:37:e1:fd:34:06:69:71:4a:ab:ed:
d6:f5:68:2d:74:8a:2e:7f:fb:d3:37:ad:4f:f5:eb:c3:32:f1:
a2:98:2a:e4:00:71:ff:eb:59:ed:19:c3:7f:06:64:38:ed:ee:
cc:b5:ce:7e:b5:c4:d2:2e:c4:3a:a0:17:b2:06:3e:3d:59:61:
5b:85:86:ea:f4:d6:8f:d0:ee:58:26:cb:78:65:08:4b:7c:9d:
b9:1a:55:d0:d2:2d:f6:15:c3:e9:d9:18:ea:5f:d0:b3:ca:94:
8f:08:5f:f3:d3:ac:6a:f0:2b:fa:df:f8:f7:6e:a9:7d:33:43:
28:69:bc:d5:14:9c:72:17:d0:a2:63:ad:e7:db:e3:93:b3:9c:
45:7a:73:2f:7f:1b:06:6d:d1:6a:be:01:0b:3e:bf:4b:8b:2c:
73:1b:ba:97:8a:53:49:d8:6b:16:08:6e:d9:96:df:44:60:e8:
9c:e9:33:77:f1:8e:1f:cb:58:03:1f:66:a8:49:6c:be:dc:76:
2e:80:df:c9:85:2b:57:71:82:81:0e:51:72:77:30:76:2a:f8:
88:b6:57:ed:3c:3d:b0:b8:ec:62:1f:02:8a:81:cf:dc:24:d8:
ee:8e:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:33 2025 by rpki-client