Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: 4MOBcx9Y85A1CL9Uy94WPwkZ35ytd/udhvWnMLcRfME=
Subject key identifier: BA:95:19:CF:6D:49:A1:A6:9C:07:40:4E:2B:45:86:3F:5B:A9:05:C4
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 01951134FAD590CBD18033FB3C737AF0CFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0A56
Signing time: Mon 17 Feb 2025 00:00:39 +0000
Manifest this update: Mon 17 Feb 2025 00:00:39 +0000
Manifest next update: Tue 18 Feb 2025 00:00:39 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: nTWf9ajTO9tkLPRNbKGI+P6WFWX1hglkRud5esI8TSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fa:d5:90:cb:d1:80:33:fb:3c:73:7a:f0:cf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Feb 17 00:00:39 2025 GMT
Not After : Feb 18 00:00:39 2025 GMT
Subject: CN=ba9519cf6d49a1a69c07404e2b45863f5ba905c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:1b:11:17:c2:da:4c:84:82:4f:63:18:8a:
31:69:a0:a7:31:34:f1:f8:0d:3a:4d:7b:fc:15:d1:
fc:eb:9b:30:83:6a:f0:84:89:58:bf:69:93:b9:1e:
43:bb:77:ae:a9:43:22:9e:b0:35:fd:bb:a3:54:c6:
61:7b:ac:ae:fd:11:e6:06:b3:bd:79:18:4e:e8:ce:
b1:92:10:1b:a6:83:39:39:bc:11:aa:66:9d:84:04:
4c:a1:4d:cc:27:3a:6a:6f:ec:0e:4d:7f:d6:a0:49:
83:6c:bb:0f:80:d3:e0:1e:a9:30:0e:29:05:31:66:
cf:ab:1e:92:8f:15:1f:6d:b2:b9:d5:b1:c5:40:14:
bc:d0:84:0f:cc:ec:69:2b:d7:4e:2f:a0:e9:eb:14:
64:34:87:2e:2f:a1:17:b7:5b:c5:83:2f:16:0c:8d:
57:3b:40:a6:9a:c5:06:f0:45:61:47:5f:c6:3a:f7:
f5:0d:52:3e:c7:bb:04:65:56:d3:c8:7b:d4:25:17:
ad:86:3a:75:68:b7:bf:ff:c0:fe:e4:89:de:be:f7:
18:79:42:b4:f1:eb:53:e1:a1:9f:ac:cc:83:f9:df:
e8:ab:6a:ee:f7:7d:0c:d8:51:d7:cd:8e:30:67:1c:
b1:d5:dc:e0:83:cd:f5:02:95:1f:23:0c:86:64:ad:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:19:CF:6D:49:A1:A6:9C:07:40:4E:2B:45:86:3F:5B:A9:05:C4
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:70:38:00:77:79:63:b1:a2:f0:7e:bc:5f:75:94:41:93:0e:
af:32:fe:de:68:65:37:63:aa:3f:cb:79:5f:da:48:8c:65:54:
6d:92:2d:90:2a:02:c2:fa:f9:a9:d1:3a:62:99:2b:74:fa:96:
23:69:be:58:65:0c:c4:8f:b8:00:f7:fe:b4:32:8d:95:0a:b5:
c3:bb:6c:22:83:0d:00:dd:6d:e4:c1:47:9a:d0:ce:cb:58:0a:
87:0e:02:1a:06:aa:e2:59:09:f6:8d:6b:5d:68:0c:27:e7:1a:
33:60:69:17:dc:36:e9:2a:aa:bd:4a:ca:64:ea:8b:8a:1d:d6:
e6:5c:7a:50:c5:12:e7:6e:6b:96:c1:c0:5d:7a:bb:11:e4:18:
56:e6:2b:8a:aa:d4:a5:41:a5:8d:5c:f9:c6:39:ad:f6:cb:04:
81:a1:99:68:61:37:21:b7:db:d9:01:b3:3d:86:00:9e:cc:0d:
dd:3a:f9:f7:7b:5c:96:03:d2:c4:11:37:b3:d8:84:cc:08:bc:
ec:51:b0:3d:05:4a:be:b1:c8:42:a4:1a:40:23:4f:ee:cd:7d:
57:78:96:66:ed:35:7f:eb:73:90:3c:0c:d1:dc:22:ba:f3:44:
13:e8:f2:c2:b0:b9:47:2b:85:47:86:98:e7:d0:78:05:75:cc:
e2:d3:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:33 2025 by rpki-client