Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier: FyXMz47Ktn8lJy8mMR7WoLXfFl0MseXvZcMFVLgnz5o=
Subject key identifier: 4B:2E:53:A4:72:F1:CF:81:DD:0D:DC:25:08:8C:C2:09:E3:C5:12:08
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial: 0194C3879AE4D661E4EA1B9105D25D707F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:31 +0000
Manifest this update: Sat 01 Feb 2025 22:00:31 +0000
Manifest next update: Sun 02 Feb 2025 22:00:31 +0000
Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: cc3fD70LmgIG4QrblW9P88hm9IljXroTuaJlmDzToMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:9a:e4:d6:61:e4:ea:1b:91:05:d2:5d:70:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Validity
Not Before: Feb 1 22:00:31 2025 GMT
Not After : Feb 2 22:00:31 2025 GMT
Subject: CN=4b2e53a472f1cf81dd0ddc25088cc209e3c51208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:25:e6:b8:24:a0:ce:22:e7:0f:fe:0d:f1:
cf:8f:60:a1:6e:fd:ec:a7:54:14:92:32:5b:4f:ce:
0c:d6:a9:ab:e9:ba:09:52:25:b5:c6:3b:3a:b6:ac:
98:e9:cd:83:37:15:30:3b:34:62:d0:99:d1:ae:05:
99:96:d2:77:e6:59:51:f2:02:ed:d9:f5:90:7c:8e:
c3:d8:4b:f0:49:5c:d0:68:74:52:59:6c:77:0e:a5:
c5:ad:8b:dc:4f:7a:a0:a8:a4:c6:b1:8a:29:60:58:
f9:31:21:ab:e9:fe:d1:fe:57:08:d4:b8:63:ac:e2:
6d:93:bc:74:f1:6f:f9:38:45:f3:e7:29:c5:95:09:
da:d8:74:83:e5:b4:e5:9c:f1:4b:81:e6:d2:ba:cc:
79:2e:0c:ac:13:10:c2:77:d4:ca:d9:ad:6d:2e:4f:
fb:c9:18:27:78:8a:f6:86:37:c6:07:a0:5f:cc:4c:
b7:46:6c:59:20:49:b7:e7:e2:f9:c7:9b:37:20:3a:
4e:73:1f:5b:5c:ca:0a:99:16:ff:68:9e:1e:19:e8:
65:40:6b:bc:8b:ad:f0:92:dc:94:79:bb:9b:54:e2:
7a:80:90:5b:b5:fd:d5:1a:7c:27:db:19:de:46:94:
77:d5:0f:90:02:74:59:4e:be:25:4c:b7:43:6a:da:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:53:A4:72:F1:CF:81:DD:0D:DC:25:08:8C:C2:09:E3:C5:12:08
X509v3 Authority Key Identifier:
keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:5a:e2:39:7c:b9:b8:c6:7a:54:15:11:13:f7:e0:fa:a6:
7b:2f:de:33:44:7e:fb:78:c6:88:67:f7:67:06:5c:35:9a:59:
2b:0b:e2:e8:38:ab:51:2e:56:22:97:c1:e0:92:e3:15:07:0a:
f3:f6:35:9a:1e:64:76:f4:41:c0:f4:8e:82:fb:1e:c6:18:6c:
f3:a5:44:f8:04:ef:6b:d1:71:98:79:e1:99:27:a5:68:32:55:
d0:fc:b5:20:08:4d:0f:e2:ef:60:b3:79:ab:c7:35:35:f4:f0:
50:67:e4:18:3b:8f:df:51:24:aa:c0:7b:be:37:47:cd:08:8c:
e0:e8:dc:77:38:4a:22:37:17:9f:e7:33:d4:d0:54:1a:d7:bd:
02:7d:d4:d1:32:68:72:d6:a4:d0:87:04:9e:0f:97:30:e7:a6:
7c:65:a6:c2:14:63:ff:33:40:be:c1:e7:24:0e:ad:6a:ec:c7:
84:ca:93:80:d0:08:09:65:fb:c2:de:ad:6a:0d:dc:9d:59:d4:
db:01:5a:88:fd:ea:27:ef:0b:d8:84:3d:3d:03:2d:66:c5:68:
fd:70:fb:3e:2e:6f:ae:13:8d:00:3e:41:c8:4e:fa:9a:d8:4c:
48:bc:6b:a1:97:24:56:6f:44:2d:ef:b5:0a:fe:8c:f4:d8:bf:
68:78:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:01 2025 by rpki-client