Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: 6H+sAFRip2mWaImruhnjueOYSVOM3n7SiEo08zLy3ks=
Subject key identifier: AD:EE:FB:8F:7F:DA:28:EF:A1:43:F7:30:D5:25:24:83:E5:10:E8:05
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 0194BAF27DEA89C8EC069D94A1196AC5566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0443
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: fyr8j5EicECRq9ZNsT8O1uYrkBy1DekdtiuLnc3XE70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7d:ea:89:c8:ec:06:9d:94:a1:19:6a:c5:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=adeefb8f7fda28efa143f730d5252483e510e805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:52:0b:2d:7f:1f:06:f0:04:82:e9:7f:61:
e1:58:2a:2f:1b:6e:57:37:19:a5:54:d8:85:c8:12:
d2:d6:07:02:60:c1:49:ee:2e:39:c5:d2:de:ce:3c:
91:43:7d:4e:66:ab:66:66:cb:e5:c1:f0:24:43:e6:
fa:ec:62:e3:7d:e8:23:c7:57:01:70:55:ec:78:fe:
d2:d3:fa:ff:ca:a6:62:04:27:fd:bb:72:9e:a2:83:
bd:56:c8:9a:e8:a3:03:4a:ab:bf:8b:55:f0:47:68:
d8:5a:0a:d9:36:40:b5:70:1c:91:c7:bb:00:e2:36:
96:87:aa:44:f7:1e:82:9b:8b:6b:55:d9:a4:80:3b:
43:73:42:3b:56:76:e3:63:a1:11:1c:e3:11:f0:4a:
27:74:64:aa:e3:86:10:75:1d:9b:0a:22:91:77:f2:
1b:3e:ae:a7:3a:e4:f7:67:36:2e:a0:71:25:8e:c1:
2b:cc:91:34:4a:e1:68:d7:17:95:b4:2d:61:04:2f:
50:a1:a9:cc:32:f9:5d:59:88:7e:6e:af:2e:5d:ef:
7a:8c:c0:5c:91:59:3b:fb:eb:84:5a:76:2a:92:bc:
9c:64:b9:d7:a5:2e:3b:33:9a:a2:2a:3d:38:7f:b9:
da:67:cc:1b:1a:aa:a2:f4:26:10:4f:c9:9a:7f:bf:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:FB:8F:7F:DA:28:EF:A1:43:F7:30:D5:25:24:83:E5:10:E8:05
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d1:47:16:da:19:5e:52:95:81:7d:38:a8:55:52:cd:5b:ef:
54:61:22:5a:25:a9:24:06:b7:60:4a:4e:3c:0f:5f:8c:ef:8a:
27:a5:99:e6:89:4c:37:8e:6f:74:8c:53:50:cc:57:04:ff:42:
2a:4b:32:75:e2:5f:a1:fa:0e:ba:8e:c9:50:ae:22:c4:78:33:
f8:e7:6d:07:4a:15:10:ee:ad:93:6c:11:8a:81:4b:3b:df:48:
43:70:45:09:e2:1e:f3:7c:8c:a3:5d:84:c0:a5:56:14:8b:6e:
a4:7a:88:64:f3:a8:f4:bc:46:8a:71:dc:5b:42:41:3c:04:5e:
7a:02:08:6b:43:1d:5c:38:ff:a2:95:3d:59:13:ac:da:94:3d:
55:dc:09:82:2f:16:98:67:eb:65:2b:c6:26:25:0b:06:55:d2:
67:5b:e9:cd:8a:05:2e:6a:be:3c:39:e4:56:c0:c2:ee:e7:70:
f8:8f:fa:06:66:b9:9a:a5:b7:d1:bf:a4:85:0e:04:14:a6:a3:
5d:0e:f1:94:4e:f1:26:a3:41:32:85:79:c0:6e:6c:e1:b2:9d:
57:0c:50:7c:03:16:4f:9e:ab:7f:ce:22:c1:2c:ea:af:6d:15:
da:b1:d1:e6:3a:e2:a0:b4:33:12:34:26:bd:31:17:d2:08:4f:
40:3c:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:15 2025 by rpki-client on console-fra.rpki-client.org