Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier: GKFxRF92t7fnSfHN5pGTb1Nk0X62JDKE2tX5Q+LfpA0=
Subject key identifier: B0:54:5D:C8:1B:57:20:8F:04:B7:C9:52:8A:FB:5F:C5:1E:58:98:EB
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial: 0194C499FC6B94E8273E7FFFCD9EDD6F8272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number: B5
Signing time: Sun 02 Feb 2025 03:00:13 +0000
Manifest this update: Sun 02 Feb 2025 03:00:13 +0000
Manifest next update: Mon 03 Feb 2025 03:00:13 +0000
Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: iHir9cRhJaR7zO8YXK3IjrdRas05zV6mq5usFgJmrX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:fc:6b:94:e8:27:3e:7f:ff:cd:9e:dd:6f:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
Validity
Not Before: Feb 2 03:00:13 2025 GMT
Not After : Feb 3 03:00:13 2025 GMT
Subject: CN=b0545dc81b57208f04b7c9528afb5fc51e5898eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:50:b3:b5:f9:c4:59:79:5c:d4:7e:42:8d:
8c:d1:bb:d7:32:45:57:e4:e5:50:4a:f1:b1:1d:3f:
90:b1:a3:ea:a8:0f:36:c6:98:c5:0a:7f:50:40:e2:
76:38:2a:e8:59:d2:e4:33:e4:05:ff:29:2a:cd:57:
34:84:2e:f7:18:70:01:53:8e:bd:14:9f:71:54:14:
92:5e:7c:6b:9e:27:11:e5:82:c9:fd:95:2a:af:70:
89:0a:e5:7c:2c:7a:65:75:d8:d2:0e:64:cf:6a:4a:
28:4b:f4:d6:fe:82:55:4b:d3:c1:55:c1:c3:49:f1:
66:82:f7:d4:6b:ce:ac:f5:ec:9d:1d:5c:cf:e8:b7:
35:99:b7:bd:7a:c3:cd:9b:25:a0:fa:17:92:ca:f1:
f1:f0:24:a9:cd:3a:bc:83:9f:1a:7c:e7:2b:b4:39:
cf:d4:6f:61:be:31:f7:97:27:67:51:37:6b:b4:81:
51:c7:47:07:ca:36:c2:9f:a3:84:0d:1e:0c:e5:20:
68:21:3b:68:5f:18:28:26:fb:be:df:e1:ba:9e:ea:
60:df:79:aa:25:97:31:60:1d:2f:8b:f7:76:cf:53:
a3:78:2e:91:2a:01:b6:fc:98:9f:f2:33:72:25:64:
2d:bd:e5:67:e5:b7:01:25:e9:72:61:ac:e0:d4:dd:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:5D:C8:1B:57:20:8F:04:B7:C9:52:8A:FB:5F:C5:1E:58:98:EB
X509v3 Authority Key Identifier:
keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9b:30:30:86:85:13:d8:07:95:54:12:3a:87:d3:74:3a:6d:
2c:83:b2:00:22:db:92:a6:27:44:fd:bf:c6:69:cd:f6:28:ee:
5e:35:26:8b:49:87:74:1f:c2:cb:9f:1a:ef:9a:6a:5a:51:b8:
7c:3c:3f:f6:b6:6e:7f:f5:8e:ad:46:d7:97:5a:c5:3c:21:70:
84:98:15:1d:06:1b:f2:f0:e2:4c:70:ce:40:31:29:e7:55:ad:
c1:88:42:35:59:72:2c:6c:73:1d:f9:d9:67:5d:b3:6c:64:c5:
18:28:10:3f:fe:c5:86:8a:b7:c3:ff:84:ac:ef:55:bd:07:f6:
ec:b0:02:98:85:e5:26:b0:0f:18:34:46:ea:d2:8a:29:b9:53:
bf:69:4f:28:36:45:c0:98:0a:8e:6d:b7:6b:e9:93:1c:af:19:
5a:18:79:22:fa:ea:11:f9:47:bb:f7:55:b9:c7:15:a9:c9:b1:
38:02:25:0d:a7:23:93:2c:2f:e4:b8:1f:f5:a8:7e:92:20:89:
0a:f6:13:45:95:50:f8:e7:1d:6b:8e:79:65:45:1c:fe:2d:ad:
a7:89:d1:9e:ff:25:5c:2c:1c:e0:b5:0b:14:34:5c:6d:ce:1f:
ea:a5:8e:96:23:f7:d0:cb:28:72:77:63:1c:85:0b:b2:44:06:
86:94:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:09 2025 by rpki-client