Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File: ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier: hY5RwH3D//OiRL44AvwQYHOlJxBZEams4rpEYU25VS4=
Subject key identifier: AA:E3:28:91:98:FE:85:86:6B:91:67:74:0D:52:D9:57:0D:0A:4D:B1
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer: /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial: 0194BB971C5150E489FC42ADAEF90AD4AE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number: 0352
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: HCOeaVkmNzOBpPo66SsnEvn7nyeLzYB++VQ+87+miIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1c:51:50:e4:89:fc:42:ad:ae:f9:0a:d4:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=aae3289198fe85866b9167740d52d9570d0a4db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:33:e8:a3:ad:e7:b2:44:f0:ce:8b:da:e6:
70:79:51:ea:6c:9f:fa:26:d4:bb:46:18:77:1f:b0:
36:4d:21:d3:27:25:cd:36:a9:75:e6:7f:77:1b:6c:
06:6d:a2:dc:7f:a4:82:83:66:12:03:dc:10:5f:4f:
6b:d7:fb:f9:b5:3b:ca:4e:4d:31:98:0b:c0:d1:cd:
e2:f1:ac:6e:d1:73:3f:1d:46:5e:d3:93:c4:bc:37:
c8:87:e4:31:e2:c1:29:b0:4d:13:96:32:c8:d2:8a:
bd:32:62:62:cf:ee:e0:96:92:79:0f:00:7a:21:cc:
01:24:79:4f:33:95:ba:40:59:a9:f2:1e:7a:88:20:
70:9d:6b:d9:f8:b0:8b:15:31:27:1f:09:c1:68:bb:
53:9c:b9:fe:e3:f9:15:88:fe:d1:de:d3:2b:fd:7b:
70:4a:e0:aa:ed:4a:82:9e:e5:08:cc:3b:c9:f0:d4:
7d:e6:2b:d6:7a:e7:c1:80:ac:31:39:ea:ac:8b:2b:
1b:0d:3e:ea:76:99:bb:c0:6a:c1:99:9f:0d:f8:03:
7a:21:0c:f2:cc:3e:16:e3:86:99:e1:94:c5:88:0c:
1c:ba:fc:7b:60:cc:41:0a:4f:b5:f4:84:76:76:2f:
ed:7f:86:47:3b:2c:d2:e3:36:8a:4f:4f:20:ff:00:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:28:91:98:FE:85:86:6B:91:67:74:0D:52:D9:57:0D:0A:4D:B1
X509v3 Authority Key Identifier:
keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:64:30:6c:6c:e9:30:fb:fa:5e:3e:88:17:42:3e:f9:9a:
2e:f8:a7:68:f0:ec:02:87:82:0e:01:ea:84:7d:fd:17:d0:43:
1a:b4:25:59:2d:f4:f4:96:64:c2:8e:41:50:3d:69:62:c9:6d:
bb:ca:41:2e:08:86:d3:21:1a:33:d9:79:34:59:2d:73:42:e1:
79:cb:0e:8f:88:76:8b:1f:9c:b6:6a:b7:f4:e8:ee:89:20:db:
82:86:49:57:58:04:97:31:c7:33:c1:f1:ac:f4:39:73:58:09:
04:c8:c9:56:f0:3e:a7:14:00:b0:05:57:13:b5:92:57:04:cb:
c5:20:9a:7a:2e:46:4f:7c:ac:fc:5b:fa:71:45:55:d4:f0:e4:
6d:10:54:08:16:82:e7:24:02:49:0f:b1:0d:6e:ba:60:87:b1:
8a:53:c7:9b:42:d3:95:d8:e1:9d:df:79:bb:6f:ac:37:34:b5:
4d:7f:34:be:9c:75:f1:6d:3e:dd:24:b9:b6:f5:1f:55:76:45:
ad:d0:71:9e:f0:c4:fe:f0:e7:e6:a1:19:88:7f:4a:af:7e:d8:
3b:a7:20:fe:c3:99:00:62:8b:a7:da:3b:a0:0a:a3:68:88:b7:
5b:bc:4e:f7:74:76:44:6c:2a:68:97:ea:b0:d9:ed:84:4f:35:
75:5c:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:36 2025 by rpki-client on console-fra.rpki-client.org