Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: wocPLWZNyzkMalkl4XoEK7G25wHfCChLhPtjViOQT7E=
Subject key identifier: FC:DD:7B:56:97:07:52:35:13:4B:20:F6:94:6F:2B:67:E6:91:EC:BB
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 0194C387C8FCC0693B4E97F64E814D96ECCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 046A
Signing time: Sat 01 Feb 2025 22:00:43 +0000
Manifest this update: Sat 01 Feb 2025 22:00:43 +0000
Manifest next update: Sun 02 Feb 2025 22:00:43 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: roGnaI3Iw012sCxBtOy/DsG7kwuMQs2OFm9QWM5/cqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:c8:fc:c0:69:3b:4e:97:f6:4e:81:4d:96:ec:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Feb 1 22:00:43 2025 GMT
Not After : Feb 2 22:00:43 2025 GMT
Subject: CN=fcdd7b5697075235134b20f6946f2b67e691ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:b5:89:f6:e0:34:2d:d2:1b:08:00:4c:49:
db:b1:71:ca:49:44:e4:b4:a6:8c:f4:ae:6d:5f:a0:
53:66:46:dc:a2:4c:56:6a:5d:e9:72:2b:d8:89:78:
b3:3f:2f:e1:a2:b8:6c:57:f7:b4:c2:22:0b:01:e2:
e3:78:91:0e:25:3f:a8:9c:89:c7:fd:fe:98:25:0d:
46:ee:7c:b6:08:5c:b2:ef:79:d3:5f:07:ee:8d:2c:
a0:d9:de:bb:6c:e3:ca:cc:74:64:1f:98:34:49:ab:
df:fb:71:6d:06:6a:0f:5d:ce:de:21:e7:5a:ff:34:
0c:c6:e9:d5:2c:2e:84:b7:4a:c2:b7:45:30:ff:34:
32:50:ae:6f:30:3c:3a:c5:9c:ec:eb:b9:90:70:2c:
1d:52:b3:80:d5:25:7c:e0:14:1e:94:3b:e5:8a:31:
19:8a:86:a5:66:f4:13:37:10:32:5f:5a:16:f9:18:
5f:a2:d1:c8:8f:cc:28:a2:39:e0:ff:d1:fa:31:b5:
12:4c:20:58:10:8c:39:9e:a8:4b:67:4f:7b:f6:d1:
91:cd:db:4c:35:21:31:36:cf:20:ff:08:32:99:52:
e3:2a:57:3f:c0:77:16:c1:e8:2e:b4:3e:3f:d1:4d:
80:f2:f3:bf:d4:2a:53:23:44:4a:1b:ad:f6:b3:97:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:7B:56:97:07:52:35:13:4B:20:F6:94:6F:2B:67:E6:91:EC:BB
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:68:c1:20:4b:56:2e:8c:df:49:6c:da:1a:26:a7:b4:d2:
53:19:da:3e:50:3e:e6:68:3f:8c:4c:b6:0d:99:48:7a:51:d5:
3f:5f:ce:fb:e3:c2:5b:11:1d:3f:30:22:c2:1c:7a:a6:d5:36:
5e:3f:9a:83:f3:cd:39:42:1b:d5:b6:6d:ca:7a:ca:70:ea:24:
8f:3b:a0:1e:d2:d2:5d:8f:c3:27:96:7c:e9:4c:b8:34:b1:f3:
f0:1b:91:e7:ab:8b:1c:a7:e3:e4:2d:cb:1a:8b:34:25:ea:87:
38:62:0d:8e:ad:70:9a:98:7d:08:78:45:15:c2:a3:cd:5a:44:
33:11:9c:01:6b:58:a1:9b:b0:af:66:85:74:7a:0d:87:0b:f3:
68:63:fc:2e:5c:f6:9a:df:4c:00:55:4f:9e:0e:04:d6:d2:3c:
94:db:9b:49:33:f4:0e:6e:d1:f9:99:1a:11:60:96:a8:c7:2f:
97:e6:6f:83:ce:d0:19:60:f3:e1:29:07:de:fa:29:0f:ac:e5:
ca:a6:44:a3:63:f7:6d:b8:0f:f5:7f:52:70:3d:60:e9:cd:7a:
ad:15:7b:26:68:df:29:28:8a:76:99:a7:52:48:54:68:69:4b:
48:24:bf:bb:e2:db:38:9d:ad:31:24:fa:e6:02:21:f4:fd:a4:
25:b0:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:19 2025 by rpki-client