Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: UdeqPaYb0pcn8h0PwtMaayuY9rE22lQ/T0RZFjLnipg=
Subject key identifier: 4A:3F:98:B8:3E:E1:25:98:EC:D4:14:02:10:6A:88:8F:86:F1:D8:C0
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 0194C3882E25852EAAD8D67A2F5334448A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0B72
Signing time: Sat 01 Feb 2025 22:01:09 +0000
Manifest this update: Sat 01 Feb 2025 22:01:09 +0000
Manifest next update: Sun 02 Feb 2025 22:01:09 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: mIdiQzXcWWHCoyH+PZ4zrhzlXm1XRRs1kH+RHwdJAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:2e:25:85:2e:aa:d8:d6:7a:2f:53:34:44:8a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Feb 1 22:01:09 2025 GMT
Not After : Feb 2 22:01:09 2025 GMT
Subject: CN=4a3f98b83ee12598ecd41402106a888f86f1d8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:e6:56:14:bb:cc:a4:eb:a1:10:50:c0:64:
5e:be:12:c4:43:fc:54:f7:6a:5f:82:ae:b2:c0:d5:
a7:67:b9:d6:1c:08:0b:22:27:b9:55:69:63:c2:fe:
00:7b:dc:17:71:fb:86:95:2d:78:94:15:84:d6:ae:
42:a3:8c:31:42:71:50:df:e3:49:00:0f:2c:a2:46:
a1:b3:f4:8c:95:c1:51:e9:32:d4:13:b9:9c:ef:26:
d4:51:1b:0c:06:46:56:00:93:0c:72:23:2c:88:8f:
ac:94:4e:85:91:3f:e4:9e:ed:b3:fc:71:bf:a3:1d:
f0:5a:0d:49:29:13:b1:18:5c:8d:55:c6:b5:f0:e5:
79:50:03:ad:7f:d8:a3:f0:39:95:ba:10:b6:db:73:
8b:d5:c6:b6:ab:d5:35:2c:83:73:36:b2:3e:86:75:
86:9e:4c:86:3b:cf:66:38:71:b3:2e:9e:ee:63:ba:
b3:3a:4a:ec:ea:db:8b:1c:25:81:7a:ce:53:d9:fe:
49:1b:cf:c9:a3:12:1d:20:7f:7a:3c:68:9e:ac:30:
a9:41:3f:10:d8:d7:b8:d0:17:3b:a1:ef:62:f6:8f:
9c:f7:df:c3:20:75:68:43:cf:00:66:41:c4:3a:a1:
2f:f3:3e:4d:21:04:c1:48:5c:96:62:09:a4:17:cf:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:98:B8:3E:E1:25:98:EC:D4:14:02:10:6A:88:8F:86:F1:D8:C0
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:c6:20:56:55:b1:a2:08:22:ee:df:8c:35:f4:6d:44:84:
2c:73:f7:af:6d:1b:49:0d:ad:c8:b3:c1:4b:8a:1a:45:d6:66:
47:56:d9:37:71:ba:7d:de:5e:40:e9:29:77:27:42:92:e5:0e:
03:49:26:f5:f1:29:53:41:48:4a:4b:bd:57:d0:7e:5f:6c:2a:
79:9a:78:95:0e:ce:28:6f:2e:4b:6a:b6:9f:60:15:04:c6:16:
06:10:1e:dc:ba:0a:76:82:8b:93:bb:aa:76:49:89:46:16:6c:
ca:e7:e9:df:af:19:b5:7e:b5:b9:26:95:02:7d:e7:a8:70:e9:
b9:d0:5c:60:e6:fd:c1:0a:1f:43:1d:8d:21:d8:68:24:d9:25:
91:de:22:8a:45:83:86:2a:d1:87:04:e6:df:ce:81:86:80:a7:
36:dc:6b:37:fd:f5:33:91:79:b5:e1:8b:58:54:2c:23:7b:59:
9c:d5:37:b7:71:67:ee:5c:2b:3e:67:ee:db:e1:9f:88:b8:cf:
19:76:ea:4a:33:a1:50:73:18:82:da:63:94:2c:f3:e7:78:08:
fa:21:c7:4c:d9:eb:47:70:e8:a4:8a:8e:90:05:81:4d:ef:f3:
7e:f0:af:77:e7:bc:1d:c9:3f:68:67:23:ac:72:37:2f:47:1d:
56:ff:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:32 2025 by rpki-client