Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: PavkQ/Cyn/V9RhpoGbogG1KkzgyUM1yBcti4zfjYDKU=
Subject key identifier: 1C:F5:61:C6:2F:09:9F:BD:22:6F:00:0B:F8:4E:7D:56:94:D0:C0:2A
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 0195121093A1482FC28555D7DA2FDABB6A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 02A0
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: rL0c45UFGFDaMVB9MxXNrZ7555QMhA7TPgvMu4/OlSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:93:a1:48:2f:c2:85:55:d7:da:2f:da:bb:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=1cf561c62f099fbd226f000bf84e7d5694d0c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:68:d4:99:99:60:7b:8a:d4:bd:c4:77:98:
d0:72:be:55:6f:1e:e1:65:49:32:3f:3d:0a:7b:ef:
b0:ed:96:b2:04:17:b9:14:75:ee:8d:3e:d0:2b:87:
79:8c:86:09:58:5c:b1:67:2b:02:86:8f:6a:ea:61:
7f:70:d2:0d:30:4d:05:dc:95:a5:1e:ad:44:6f:9c:
50:04:e7:62:63:e8:3d:28:09:e4:b8:24:00:e6:03:
75:17:bd:f6:4b:ad:a5:41:97:68:af:6d:48:bf:68:
46:cc:71:dd:5e:5d:bd:cf:b5:ef:16:ba:4c:0d:85:
ff:4d:bf:8d:f5:6f:34:1b:8f:d8:fd:28:a2:96:0f:
9a:26:70:73:a9:9f:76:cc:7f:1e:6a:28:9b:86:33:
c9:21:d3:50:ac:29:73:44:3a:90:cc:80:41:87:6f:
e2:ae:ce:05:a0:12:a0:2f:f5:23:f5:0e:a7:67:83:
1e:15:67:10:94:24:91:b4:16:58:d9:e3:97:a9:79:
16:0a:12:24:ae:95:da:76:1b:1d:13:0d:67:ce:37:
ab:d4:1b:9f:6b:d7:95:24:b1:69:88:3b:58:ff:78:
b3:fb:17:51:d6:64:62:20:1f:a8:81:43:91:59:69:
fb:78:d8:37:37:b1:02:e1:e6:a5:a9:eb:e8:08:fc:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:61:C6:2F:09:9F:BD:22:6F:00:0B:F8:4E:7D:56:94:D0:C0:2A
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:6e:31:82:15:b2:a0:46:e4:d2:f1:2f:3b:99:f4:ad:4c:
76:c7:b9:fe:c8:72:d4:15:8e:1a:80:11:00:da:36:4e:c4:ef:
b2:b6:8c:6a:54:48:62:e9:14:bd:bb:59:6a:4a:4e:36:d1:fa:
f3:34:64:f4:55:10:34:11:c4:ad:2a:d7:a1:96:ca:32:6c:30:
d7:e0:96:ef:9c:00:92:ea:b9:6f:9a:36:89:8f:a6:2d:e1:8a:
ce:7e:56:48:47:df:fc:56:71:12:de:9b:a5:1d:34:ee:aa:c4:
11:46:33:72:e2:70:88:f5:0f:1d:e6:cb:d8:a0:ab:25:2e:23:
3c:a9:c9:69:d3:db:8a:61:0e:5e:70:6e:c6:2a:68:d0:44:46:
99:8c:5b:75:a0:92:ed:b7:c2:35:0d:5d:32:84:0c:a9:86:c8:
2e:02:bb:74:68:2a:03:a5:aa:91:97:d2:41:d4:da:2d:4b:43:
68:c7:11:c8:d8:f9:79:51:7a:ea:c8:92:9f:db:35:d0:c6:9c:
f9:03:94:9b:05:51:22:23:73:81:f8:85:fa:d4:71:63:17:de:
61:c2:0b:9a:5e:6d:b2:ab:5b:67:49:7a:1b:be:60:7b:cf:cd:
66:46:d2:b3:b2:9b:a1:67:5a:f4:9b:42:89:8f:8f:c7:38:f0:
b5:bf:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:28 2025 by rpki-client