Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
File: hDGpmcvwQL00DSk12JlhtS8EpEU.mft (raw, json)
Hash identifier: 3udB59Y1+mtQ3Ma435jz6VHey11O6TuYbZ4+sBq4HpQ=
Subject key identifier: CE:22:7F:89:30:F5:B8:A0:DA:18:55:0C:6D:D1:49:D8:58:26:99:6C
Authority key identifier: 84:31:A9:99:CB:F0:40:BD:34:0D:29:35:D8:99:61:B5:2F:04:A4:45
Certificate issuer: /CN=8431a999cbf040bd340d2935d89961b52f04a445
Certificate serial: 019510C68F4390397CDBE72750ED3F91776B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDGpmcvwQL00DSk12JlhtS8EpEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
Manifest number: 0788
Signing time: Sun 16 Feb 2025 22:00:02 +0000
Manifest this update: Sun 16 Feb 2025 22:00:02 +0000
Manifest next update: Mon 17 Feb 2025 22:00:02 +0000
Files and hashes: 1: hDGpmcvwQL00DSk12JlhtS8EpEU.crl (hash: /IcHndiVJjZu09sc25rbO/enP/uNEKpb9IlMlVX5CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDGpmcvwQL00DSk12JlhtS8EpEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:8f:43:90:39:7c:db:e7:27:50:ed:3f:91:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8431a999cbf040bd340d2935d89961b52f04a445
Validity
Not Before: Feb 16 22:00:02 2025 GMT
Not After : Feb 17 22:00:02 2025 GMT
Subject: CN=ce227f8930f5b8a0da18550c6dd149d85826996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:c4:58:04:a8:2b:5a:64:99:ff:69:d5:b1:
be:d1:64:3a:63:c4:72:77:38:04:ec:da:8b:b5:4a:
f0:f5:0f:13:fe:1d:4c:6f:c7:c8:39:8e:d5:30:db:
32:7d:18:9e:2a:ca:c8:d0:f4:cc:dc:7e:06:7b:56:
4e:d8:a3:60:cd:e1:43:9c:01:32:69:bf:82:91:eb:
e9:0e:b7:65:c5:78:f8:42:e4:e4:75:e0:87:0b:da:
15:e5:b3:0f:43:b9:59:8d:68:49:49:e5:3c:44:fa:
ce:1d:d0:c1:4b:f8:b7:68:a7:0a:5e:63:6a:27:e8:
d4:fa:38:84:a8:8b:26:c7:7b:d7:f9:40:c1:6a:cb:
ac:e7:06:c3:79:9a:80:2a:21:62:e3:d7:d7:af:55:
59:9f:54:6a:86:cd:83:66:19:e7:e9:4b:3d:7c:2b:
79:2f:bf:0a:a2:fa:96:55:4f:d8:b7:5d:4b:31:54:
31:dc:c5:b0:8f:b3:b8:b4:bd:e7:2d:87:93:26:2b:
41:32:82:a1:99:63:6a:fb:3a:23:54:cc:bf:27:42:
fd:48:c4:a1:7b:b1:32:cc:16:7a:0e:53:ba:60:d7:
ac:60:77:73:ec:ac:19:d2:dd:e7:6c:bc:c9:a6:55:
6f:f0:24:7a:be:5c:ab:72:05:6a:b4:9a:dc:e8:b7:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:7F:89:30:F5:B8:A0:DA:18:55:0C:6D:D1:49:D8:58:26:99:6C
X509v3 Authority Key Identifier:
keyid:84:31:A9:99:CB:F0:40:BD:34:0D:29:35:D8:99:61:B5:2F:04:A4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDGpmcvwQL00DSk12JlhtS8EpEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6c2c7a-fc16-4911-83ff-13d9ba27e51f/1/hDGpmcvwQL00DSk12JlhtS8EpEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:da:83:88:06:b9:fe:75:d9:b4:74:81:5c:8e:12:fa:fa:
68:ab:64:73:cd:50:76:0a:ed:68:5b:de:62:85:48:da:04:2d:
6f:f7:72:2c:dd:3c:87:84:89:23:ad:90:ca:97:bd:af:75:6c:
c1:7b:69:12:09:3c:46:1e:c9:aa:f1:61:e8:2e:64:ee:f0:f9:
d1:59:94:31:ed:1e:ca:3f:aa:3c:99:34:50:b8:e2:73:f1:18:
9a:87:6e:4b:da:7a:94:88:d9:1b:e6:ba:c1:bc:e1:a0:81:24:
7e:a6:8f:ad:bd:eb:f3:ff:33:ec:4c:f9:be:14:6c:1e:16:09:
5f:ad:ce:1a:d7:91:e1:0c:7b:c9:ce:a7:f7:ce:c5:4e:fe:f2:
24:63:de:4d:c0:fd:03:68:db:f4:c0:c4:4f:64:d3:65:e8:b1:
4c:c5:7c:20:83:29:00:8c:97:cf:0b:6b:c5:2f:85:db:6e:d8:
66:14:0b:c8:0a:06:63:a0:26:94:0a:0e:d5:f4:e1:c1:5b:42:
bb:aa:39:15:2f:63:b2:3e:c5:36:88:67:37:34:ca:2a:f1:b6:
83:1b:6e:87:f6:a9:56:35:50:ef:73:af:f4:1e:50:f0:97:cb:
34:24:db:4e:d1:82:21:3a:9c:41:da:43:6a:1d:12:52:79:29:
1b:59:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:49 2025 by rpki-client