Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: ym/ZBSzp0x3n3dQOykuOAm6pBgYfEFkwulI48pQfiuA=
Subject key identifier: 6D:58:0E:FE:A9:AC:C1:50:29:2D:E1:19:27:DF:CF:0A:FA:58:0D:E3
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019511A28B0BA3EAC985E8BA89620DACEC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0B36
Signing time: Mon 17 Feb 2025 02:00:19 +0000
Manifest this update: Mon 17 Feb 2025 02:00:19 +0000
Manifest next update: Tue 18 Feb 2025 02:00:19 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: y8resqwhdrYk5tAKlNpoxM/oWUGT2PCtHthQUqLrp6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8b:0b:a3:ea:c9:85:e8:ba:89:62:0d:ac:ec:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Feb 17 02:00:19 2025 GMT
Not After : Feb 18 02:00:19 2025 GMT
Subject: CN=6d580efea9acc150292de11927dfcf0afa580de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:89:2e:a9:d7:91:c7:77:ed:5b:68:34:c8:
d0:9b:f7:d5:66:01:b3:7b:f3:23:07:77:87:35:1b:
4d:26:5d:0c:d7:51:65:b0:87:51:7b:13:b7:ee:f0:
66:49:ce:5a:c3:19:3f:b2:44:c9:05:83:01:b5:98:
7e:cb:55:ea:66:12:22:a8:94:a5:9e:9d:5f:83:1e:
51:b5:27:f6:7d:77:db:1b:a0:2b:bd:a5:7d:91:5d:
1d:5b:98:7b:6f:4d:a7:74:3b:65:c6:42:af:b8:a6:
76:07:58:46:48:79:e1:f7:0c:99:3c:3c:af:01:8e:
ee:f1:95:a2:36:6c:57:e8:db:26:d5:60:1f:f4:e0:
c7:cb:42:02:2d:7b:10:50:93:88:04:a2:2b:e6:e5:
74:d9:47:91:e5:07:73:ef:ff:13:6f:5e:14:aa:c4:
a6:ea:c7:6e:8e:65:f8:59:88:86:9b:46:1e:9a:6a:
f1:be:dc:09:38:52:51:0c:13:a7:e4:76:f8:49:33:
68:17:47:73:1b:13:8f:11:f5:36:b0:b7:6c:65:64:
15:e6:6c:a9:70:7c:54:91:c5:d0:8e:b6:04:a1:0f:
c8:6a:d8:d3:c3:bb:46:3d:dc:a3:f6:7c:47:89:1b:
57:c1:dc:42:39:fe:93:72:4f:a6:46:da:85:ae:b9:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:0E:FE:A9:AC:C1:50:29:2D:E1:19:27:DF:CF:0A:FA:58:0D:E3
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:a4:43:b9:de:2c:76:f7:81:4e:5c:14:29:b1:55:ea:19:
f3:03:83:e3:b6:01:1b:33:f8:1c:aa:28:80:f8:f3:c5:64:9e:
fe:72:77:2e:aa:a8:a6:c7:54:5b:f4:c7:17:78:30:8d:67:ff:
cc:f0:1a:b1:bd:f9:9f:53:7c:ad:1b:b1:17:29:69:96:93:3a:
64:eb:aa:a7:fd:cc:ca:87:47:80:c2:8f:c8:43:b5:41:fb:89:
9b:15:07:16:9b:b8:9e:8c:f3:aa:da:51:6f:99:39:35:f1:0b:
aa:33:26:63:49:7d:19:1d:bc:d1:9e:62:2f:a1:a0:d1:79:16:
e3:6a:50:93:3c:5e:a7:03:44:7c:22:4e:25:31:c6:4a:20:c3:
44:63:c8:28:87:d0:5e:28:c0:d4:f0:a8:1e:dc:29:61:37:0f:
3e:23:1d:0e:c9:fc:2a:b5:60:c1:1d:80:2f:36:6c:c1:9b:10:
98:f0:32:fd:40:ff:c4:75:4f:77:f9:3f:1b:56:7d:65:6e:17:
09:b5:74:a2:6e:8c:04:dc:40:66:00:bc:b8:79:4f:58:5c:f3:
52:5e:76:3e:2e:6e:28:ec:fe:3d:63:dc:92:66:5a:de:a6:22:
91:72:ef:31:f4:86:d7:34:08:b2:d5:86:aa:fc:9c:16:85:e1:
da:10:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:28 2025 by rpki-client