Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: qzxT4UMkjChVtIGu05ZEZPSp/Z4EEp3jC6flddG8NHs=
Subject key identifier: 67:10:AB:AE:D5:E5:DB:45:AE:68:53:5E:75:B8:5C:A7:CE:4C:22:F2
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 019511D99564CC9C3DE5C49D1A3491D56177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 03F3
Signing time: Mon 17 Feb 2025 03:00:26 +0000
Manifest this update: Mon 17 Feb 2025 03:00:26 +0000
Manifest next update: Tue 18 Feb 2025 03:00:26 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: JQ4Ur8CF/mdoKieJEZvRJDiWe+YgAdbS/4b8ZIkXyF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:95:64:cc:9c:3d:e5:c4:9d:1a:34:91:d5:61:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Feb 17 03:00:26 2025 GMT
Not After : Feb 18 03:00:26 2025 GMT
Subject: CN=6710abaed5e5db45ae68535e75b85ca7ce4c22f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:c5:27:32:41:1b:c7:10:0a:d2:bd:4c:ba:
0a:24:d2:56:ff:ac:5a:a0:b4:66:ea:53:2f:60:17:
0a:9a:bd:8c:30:fc:0e:03:bb:94:39:35:eb:90:5f:
fc:26:bc:12:1b:99:50:05:a5:3e:9f:a4:de:f2:5e:
78:4a:97:24:63:b2:32:2c:36:ce:35:2a:a0:dd:7d:
33:f8:64:89:8f:c7:76:4e:aa:53:51:51:f1:7b:cc:
69:4d:cc:f4:c2:07:d2:aa:8d:74:27:36:26:ba:a1:
54:4c:f5:41:e7:66:a9:56:c5:4a:9b:54:2d:06:01:
5c:28:b1:e1:cb:41:51:71:5c:5e:46:93:70:87:66:
4b:38:e1:68:d4:0e:f2:cb:bf:3d:97:97:a0:6b:b4:
28:ee:c1:cf:25:87:41:36:07:be:aa:f8:be:58:0b:
ad:5e:82:b5:3c:6c:c4:1b:78:a4:e5:a4:51:2b:db:
49:f6:00:ab:c9:5f:96:82:1b:c7:ac:92:66:60:58:
53:c9:10:b1:b2:0a:4d:63:ce:4b:c4:e5:57:71:12:
da:c6:19:34:48:37:3a:a7:d6:af:de:89:2d:a0:57:
d8:28:4a:29:64:69:5a:f8:2d:8f:83:ed:75:41:bf:
8a:e8:23:f9:1b:49:4a:fa:05:3a:56:4a:22:84:d8:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:AB:AE:D5:E5:DB:45:AE:68:53:5E:75:B8:5C:A7:CE:4C:22:F2
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c2:e3:6f:d1:bf:93:01:0b:c0:ee:c0:f2:e0:07:5e:82:12:
e8:8d:f4:e8:14:41:eb:04:39:56:e0:09:b0:5a:ee:56:10:7e:
2b:cd:b1:4d:03:57:a4:e1:c7:33:ad:90:2e:81:38:0a:8c:b2:
a6:cd:8c:9a:97:f2:b0:50:93:24:2f:49:50:7f:41:8e:2d:df:
93:5f:12:99:e9:3c:47:0d:d6:4e:be:e2:bb:fc:00:41:6e:f2:
f2:1c:d9:f0:9b:72:28:bd:90:14:dc:1e:c3:92:61:06:f8:25:
7e:30:e2:6a:5d:16:0a:c5:2c:ee:f4:3c:a2:f4:d0:59:3d:18:
d5:56:34:69:bf:bd:6d:52:83:77:56:6e:c5:3a:56:fc:7f:cf:
5a:4e:61:46:e2:a5:18:61:ee:55:6a:f0:e3:d3:60:3a:09:41:
c4:2b:a9:80:5c:a7:eb:ef:9d:c7:55:84:56:23:a4:d6:aa:c6:
25:cb:99:f1:57:02:9b:06:b6:8b:02:80:f8:2d:44:70:d4:e5:
49:04:03:48:6f:8f:0d:d5:90:c6:db:e9:0e:90:f6:23:73:b4:
27:80:ca:65:cd:30:e4:2c:5f:0a:47:40:8f:e9:0c:c7:48:d0:
ca:98:36:ba:af:c7:82:1f:a5:b5:f9:0b:89:a7:96:ce:ae:12:
7f:48:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:55 2025 by rpki-client