Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
File: sBblecxJQEjsEqI_8lOacAS7duU.mft (raw, json)
Hash identifier: 1ZfuoEoFzwD6GXzUKw+mXY6w6ch1D65UB1FP8EI7JEs=
Subject key identifier: 7E:91:7A:ED:6C:30:6F:AB:EC:FD:32:1C:4A:E5:F4:FF:20:5E:BD:AD
Authority key identifier: B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
Certificate issuer: /CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Certificate serial: 019510C726E232C90A5445AFBE4831A0D5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
Manifest number: 0C9A
Signing time: Sun 16 Feb 2025 22:00:41 +0000
Manifest this update: Sun 16 Feb 2025 22:00:41 +0000
Manifest next update: Mon 17 Feb 2025 22:00:41 +0000
Files and hashes: 1: sBblecxJQEjsEqI_8lOacAS7duU.crl (hash: 64AADQgS3vo54G7U5w5qXNbJtufBTeNKJW3kq/jfEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:26:e2:32:c9:0a:54:45:af:be:48:31:a0:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Validity
Not Before: Feb 16 22:00:41 2025 GMT
Not After : Feb 17 22:00:41 2025 GMT
Subject: CN=7e917aed6c306fabecfd321c4ae5f4ff205ebdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:39:5b:48:bf:21:c1:eb:e3:ba:a4:10:2b:
56:c8:67:79:0c:99:f2:8c:19:64:09:05:87:be:aa:
fb:ec:0c:41:83:b1:d2:f4:de:ee:2f:21:c1:a8:2b:
96:fe:f6:49:b0:3e:24:3a:97:51:a0:c8:19:ea:d7:
ae:87:e4:98:1f:3e:22:32:7f:99:12:87:88:f6:40:
49:86:4b:08:34:62:8c:57:50:00:83:53:8e:af:f6:
cb:c6:f5:ed:d3:40:b5:88:62:06:91:af:36:8c:e7:
61:95:01:32:ff:9b:ff:b5:ff:37:f0:50:cf:a9:de:
66:cc:79:9e:af:46:03:0d:87:fc:4b:b0:32:bc:84:
31:f2:07:66:41:01:9d:15:51:97:cc:a4:35:8f:1a:
71:26:b5:73:de:45:ed:ee:96:d4:98:0e:77:33:e4:
85:d8:43:0a:73:fb:7d:bf:4f:44:38:91:90:06:fd:
5d:12:b9:e6:4c:cf:4f:f3:3d:c5:6a:8c:e0:28:f3:
e0:73:a0:bd:7e:ff:f4:40:a2:e5:0e:61:f1:a0:7f:
53:13:74:19:95:74:62:20:2d:bd:9d:ef:81:8e:80:
8a:c5:a3:f5:7b:fb:8e:5e:38:78:3e:97:9c:26:c1:
99:32:6c:f6:d6:2e:c9:c2:56:fa:ac:ec:ac:26:13:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:91:7A:ED:6C:30:6F:AB:EC:FD:32:1C:4A:E5:F4:FF:20:5E:BD:AD
X509v3 Authority Key Identifier:
keyid:B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c3:a8:37:60:b2:c3:34:ed:dd:34:ec:8d:8f:32:6d:58:0f:
a7:d9:15:f6:df:36:86:88:2e:7b:da:01:27:31:eb:c4:ec:4b:
02:f4:2c:83:d0:07:15:3f:a0:1c:95:20:17:09:f6:f2:c0:22:
37:ef:67:e2:63:f6:34:c5:89:79:7f:20:c8:ab:a7:f7:f0:f3:
38:13:fe:88:96:5b:42:11:14:ab:52:12:e9:8b:47:a4:0d:ca:
ae:b7:3f:2e:d4:d6:23:da:0b:c4:55:e9:d4:0a:ad:3e:46:28:
cd:77:a7:5e:c4:34:5f:75:3f:ae:cf:0d:b8:39:56:ab:de:5d:
8f:98:ed:0c:60:72:19:04:af:58:1f:6f:28:fa:f7:da:9b:7d:
d6:f7:67:b3:9a:c5:55:98:f3:e6:20:e7:96:ce:de:5b:78:25:
a2:df:fc:8a:07:19:80:36:1a:f1:5d:bc:65:5a:15:64:e8:e4:
00:39:08:ad:96:78:2c:ab:b3:df:46:ba:bc:25:c5:d7:95:f9:
d3:16:c9:40:e6:fa:86:a9:85:f1:e8:18:67:c2:25:e8:4c:74:
84:d4:b5:46:28:e4:3b:23:a3:0b:dd:f5:bf:01:13:4f:13:23:
40:76:d2:ee:7a:95:a3:96:f6:53:dc:56:f6:9b:66:51:b0:07:
c1:39:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:21 2025 by rpki-client