Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: iVka5De2eaRIL85BwQBy0AmpRjEUCVCutlZl6lfj23c=
Subject key identifier: 03:7F:92:79:8B:1C:B3:53:B4:78:34:38:2F:4D:0A:5A:AF:01:4A:08
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0194BB2959FBC2316DD5B175C3427F986F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 12FC
Signing time: Fri 31 Jan 2025 07:00:36 +0000
Manifest this update: Fri 31 Jan 2025 07:00:36 +0000
Manifest next update: Sat 01 Feb 2025 07:00:36 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: KXKzn3JkFCtSyP8C0CS9mgxONFDCqefbLli3Mp7Kdzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:59:fb:c2:31:6d:d5:b1:75:c3:42:7f:98:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Jan 31 07:00:36 2025 GMT
Not After : Feb 1 07:00:36 2025 GMT
Subject: CN=037f92798b1cb353b47834382f4d0a5aaf014a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:42:4b:66:2c:4d:4e:15:87:88:74:c6:5d:
ca:23:d6:c3:10:d7:77:c7:16:e0:bc:a3:21:f2:12:
95:14:49:49:59:46:7f:12:80:e2:d1:82:5b:2c:23:
9e:01:9c:93:5a:e1:a2:58:d3:dd:50:29:c6:c5:5c:
0c:81:60:f4:c4:a6:d6:2b:03:69:f3:44:1a:81:d2:
06:ea:2e:5b:38:39:a3:ed:ef:d8:a1:96:88:9c:30:
c0:9d:75:77:a8:c8:3d:d9:c1:b4:68:14:d4:34:39:
4d:0f:38:a9:2e:65:f3:dc:b3:2e:25:1b:a0:1d:2b:
ea:e3:dc:99:22:c7:ae:45:13:dc:b3:f7:0d:ec:96:
e5:33:59:53:04:e7:ce:98:57:36:3e:ff:a7:82:e6:
7c:2a:54:3e:60:ff:a4:be:f9:c9:41:36:7b:8d:e0:
5d:10:61:38:fc:a4:0a:e8:67:08:ae:85:9e:c0:c0:
e5:27:f5:e5:87:3f:2b:9e:00:16:ca:68:b2:4e:49:
73:b0:0f:0b:e4:0c:69:62:47:16:d1:70:c1:ac:39:
5f:12:ae:7a:fe:21:c0:65:4a:65:0c:e5:58:bc:f9:
8d:bd:fc:bb:ef:12:81:7e:66:30:84:c6:40:b1:b9:
84:7d:37:d7:fe:2a:6a:d9:8a:a4:95:e2:e3:0a:60:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:92:79:8B:1C:B3:53:B4:78:34:38:2F:4D:0A:5A:AF:01:4A:08
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e7:bd:5d:80:fe:1f:f4:1d:27:a2:7c:93:b4:ec:a6:0d:77:
9a:e6:f5:5a:eb:6e:b7:d7:f0:3d:75:fe:8a:64:ef:4d:33:4b:
db:2a:fa:b7:85:6f:9a:c3:df:e4:48:fd:e9:67:41:a2:8c:ae:
e4:64:40:73:6b:1f:40:7e:cc:23:b2:b4:5f:cb:f8:4a:eb:49:
0e:86:93:ed:a6:28:42:63:72:c7:75:5e:67:98:c0:f2:cc:9b:
c5:82:89:1a:e2:8e:b9:05:af:bc:96:c4:e3:b9:bb:12:1b:78:
ed:14:7e:af:06:29:22:4e:d3:50:7b:2e:28:03:9d:ef:24:bf:
86:eb:c4:94:9b:20:1d:e4:c8:14:73:f3:59:7f:13:ea:90:19:
d4:1e:c0:7f:97:a8:05:cf:11:b5:c5:b8:90:99:fe:cb:07:62:
f7:15:43:3e:fc:ca:ad:b0:53:61:8f:7e:91:b0:db:53:b6:d9:
b3:56:2a:f6:c2:bd:54:9a:ab:b7:46:71:51:b3:69:af:9e:47:
e8:a7:ee:82:6c:a2:36:68:8f:7f:be:3a:09:7a:7c:87:62:c9:
68:ab:61:2a:d2:a1:d0:fc:4c:2c:25:b8:91:f7:70:e3:8b:76:
40:3f:77:83:58:cd:74:e4:f6:1c:13:cd:1f:72:ef:d1:ec:ab:
3e:b5:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:38 2025 by rpki-client on console-fra.rpki-client.org