Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: 6uQNbAI202Ur8xKACNoh/WkYQxWaFTIuEYOnH1RmHdk=
Subject key identifier: ED:65:A9:45:0E:62:39:0A:C2:E8:0F:75:58:46:D7:F4:FA:D1:46:23
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 0194C38888EBFD922D2C0EAF6A03C2CE67DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 0ED5
Signing time: Sat 01 Feb 2025 22:01:32 +0000
Manifest this update: Sat 01 Feb 2025 22:01:32 +0000
Manifest next update: Sun 02 Feb 2025 22:01:32 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: NVnmtVfIh9mlOv8ypmxPmwnYM5cqVOqDr4f3oY1aHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:88:eb:fd:92:2d:2c:0e:af:6a:03:c2:ce:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Feb 1 22:01:32 2025 GMT
Not After : Feb 2 22:01:32 2025 GMT
Subject: CN=ed65a9450e62390ac2e80f755846d7f4fad14623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:64:b0:a3:4a:f2:da:43:f6:e1:ca:51:f6:
eb:76:6c:46:53:6f:76:39:ad:81:82:9c:f3:cf:cb:
5d:93:fd:f4:6f:6c:14:5b:36:7c:fa:75:5a:85:07:
9a:64:dc:0c:96:55:66:3d:b2:83:f1:9c:93:3b:e1:
4a:49:dd:95:cc:21:15:bf:65:31:df:2e:4b:7a:ed:
73:cd:53:6d:cd:c7:ec:78:03:f7:15:1b:1b:79:68:
8a:c3:73:60:0f:f8:39:1a:0b:bf:b3:2c:41:75:a8:
3a:28:19:2f:f1:a1:16:d4:7a:34:21:9a:8b:f6:62:
43:47:68:19:aa:f6:64:a9:14:7d:a7:99:0b:16:93:
85:0a:70:ee:88:ed:58:23:c5:98:36:e7:de:b8:c8:
6d:9b:1f:12:f9:25:e1:20:bc:01:dd:95:dd:37:71:
b0:ba:fc:58:d9:73:c9:43:a8:a8:38:41:05:45:21:
df:fa:94:85:50:9e:05:30:2e:77:1c:1d:68:27:f0:
4f:aa:6d:d6:93:9d:ae:e1:7a:77:dc:e8:67:45:98:
ef:1a:a0:20:1e:09:db:1d:e7:88:6d:97:e3:82:dd:
57:87:46:43:b3:bb:b7:7c:6d:72:9d:8b:74:7f:5f:
d6:b5:94:29:7a:35:78:cd:37:27:04:c7:99:68:58:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:A9:45:0E:62:39:0A:C2:E8:0F:75:58:46:D7:F4:FA:D1:46:23
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0e:dc:c6:41:5f:2c:80:eb:92:d1:44:47:92:62:af:b5:32:
73:2d:28:7f:13:7c:1d:26:0f:82:5b:9d:f8:e6:00:16:5b:8c:
86:22:d2:b7:2e:03:b1:db:72:4e:a5:56:1e:9c:5c:bf:f0:7a:
83:72:2d:a6:af:87:d0:1c:d0:5a:80:5d:11:3f:b4:ea:1e:96:
88:c9:1f:c5:69:81:f4:f3:38:5d:75:4f:5f:1a:b4:e1:1a:b9:
e6:4d:1d:3c:fc:c6:05:4c:1e:4a:be:7a:fb:8b:0f:ab:2d:cf:
d8:97:b6:08:af:84:40:2b:ec:8e:3e:a2:88:eb:a4:89:13:f0:
16:31:5b:6b:a1:e9:95:50:30:22:f9:af:f8:8e:58:2c:d9:71:
24:ee:15:5b:5d:ef:77:39:6a:29:19:2a:4a:2b:25:f4:b5:7d:
60:11:6e:17:69:3e:a4:a4:f0:0c:b8:97:0e:48:8d:38:f8:fb:
0d:90:1d:63:51:7f:9c:79:d9:32:cf:d2:40:36:9f:64:60:3c:
68:4c:c6:26:89:61:70:0f:10:3a:3e:54:3c:cd:48:ad:0f:e3:
28:92:92:04:08:3c:bd:a6:9b:17:d5:d2:ce:a1:36:80:f3:aa:
e0:a5:48:c6:6e:af:79:6d:d0:eb:e8:42:ae:59:ce:38:98:37:
99:ab:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:28 2025 by rpki-client