Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: NBwi8FPLnBmY6R5jXFRCKdNvN///6qiA6JU+vsrMe9w=
Subject key identifier: 2E:C8:37:CB:52:92:05:6B:61:81:F6:48:91:5D:01:12:36:F1:5C:11
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 0194C4D0F9A0358D2F07C02196E87EDC2337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 0F2D
Signing time: Sun 02 Feb 2025 04:00:16 +0000
Manifest this update: Sun 02 Feb 2025 04:00:16 +0000
Manifest next update: Mon 03 Feb 2025 04:00:16 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: TAn4uk9boSbDJBj3v9W4icI6bm8ZtuHhoR/hvaxKEJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f9:a0:35:8d:2f:07:c0:21:96:e8:7e:dc:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Feb 2 04:00:16 2025 GMT
Not After : Feb 3 04:00:16 2025 GMT
Subject: CN=2ec837cb5292056b6181f648915d011236f15c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:0a:4a:c6:44:40:47:18:d2:c4:ce:18:b0:
c6:d1:7b:8c:37:46:4c:b3:96:09:e4:97:52:40:59:
8e:96:e2:be:7c:88:7a:63:cd:37:95:38:25:5f:bd:
a1:ef:6c:02:01:8c:37:25:e8:ae:b4:42:01:2e:40:
69:3f:f4:c3:b3:1c:78:44:ad:32:4f:d8:f9:2a:65:
2f:4f:49:be:2c:64:9d:3f:17:6b:6b:56:38:b1:68:
4b:1c:07:9b:21:ba:b3:f8:d0:06:4b:84:93:d0:a7:
ec:dc:36:bf:9f:eb:4a:2d:f9:dc:23:58:68:d9:3c:
72:90:ce:97:d3:51:be:06:ef:cc:49:d1:c4:60:20:
cc:d5:30:a3:82:98:6c:bd:69:1f:a8:cd:6f:be:30:
5a:55:5a:79:56:b6:d5:85:d4:7b:f5:24:a8:9c:cb:
d7:87:df:5a:fc:95:7a:9d:89:23:e1:fc:7b:63:76:
55:d0:08:41:a1:27:f4:c7:6f:07:77:64:eb:0c:ee:
c8:e2:16:98:4b:84:33:ea:7a:f9:bb:3a:da:e4:53:
18:83:ae:c8:fe:8f:3f:82:2b:31:73:39:49:3c:08:
07:58:50:64:85:4a:a4:dc:1d:41:a6:ae:d7:b6:b8:
1e:1f:ad:ef:0f:19:2b:2a:ac:10:75:50:1c:10:0b:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:37:CB:52:92:05:6B:61:81:F6:48:91:5D:01:12:36:F1:5C:11
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:53:78:ae:d3:14:fb:a0:8d:51:39:46:e0:89:e0:d5:3f:
64:0d:1f:21:03:32:cc:58:3a:e0:ef:35:a6:4e:f3:71:8f:d9:
45:e1:92:ba:17:50:ab:72:01:e3:d4:da:7c:0e:78:35:1d:e7:
26:34:c7:39:3c:49:bd:21:ca:30:00:21:8d:13:5c:4d:2a:2b:
86:1c:3d:7d:b2:27:0a:a9:0e:0e:99:12:c8:32:8f:1e:33:80:
ae:4d:14:5d:a5:5b:b6:f1:26:4f:2b:41:73:05:19:0e:ad:68:
de:df:d6:b2:a7:15:ab:cd:6a:a7:70:ca:60:6a:74:7f:64:8f:
94:57:38:b3:a1:f3:8a:58:80:ec:dd:e6:93:65:86:4c:c4:60:
fd:b8:37:88:39:78:04:66:51:3f:78:cc:e8:2a:dc:ef:6a:03:
9a:93:92:a4:fb:d0:90:e9:c8:31:7b:43:a7:e1:5c:3c:42:c7:
75:30:38:8e:11:17:a9:aa:e3:e1:e1:60:41:cc:8a:24:f8:6d:
b8:90:27:bd:9b:14:8d:33:0c:e9:3e:86:23:8e:58:b8:2e:1c:
42:0b:10:b0:e4:d7:aa:46:27:c6:9a:ec:72:66:aa:96:d2:e0:
07:ff:ff:15:3a:77:f8:85:6e:cd:72:39:90:c9:d7:72:31:27:
c4:b9:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:35 2025 by rpki-client