Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: WQcnydNotspJAN1owVa0eRnkVhT+bOD0hZOa6fOqrvY=
Subject key identifier: B1:B7:04:8E:54:33:3A:9D:69:07:FF:BB:B3:98:D7:86:20:6D:4D:E5
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 0194C4D11D558110AB44A98F458205BC78FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 10C0
Signing time: Sun 02 Feb 2025 04:00:26 +0000
Manifest this update: Sun 02 Feb 2025 04:00:26 +0000
Manifest next update: Mon 03 Feb 2025 04:00:26 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: AQnm3dh5SSAILpRVNbEmjvFf5lPcP4JpXMjJQoNr5ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:1d:55:81:10:ab:44:a9:8f:45:82:05:bc:78:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Feb 2 04:00:26 2025 GMT
Not After : Feb 3 04:00:26 2025 GMT
Subject: CN=b1b7048e54333a9d6907ffbbb398d786206d4de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:e4:aa:5d:55:fd:66:f6:24:82:14:10:22:
a4:b9:ba:47:8e:91:85:0c:2c:bd:e0:69:cd:4c:ad:
67:6f:a4:13:7b:d8:59:1c:91:78:57:d2:e6:94:f9:
ee:bf:7b:ce:dc:4d:90:64:cb:6b:80:25:71:46:6d:
8e:d9:7d:92:c7:50:8b:38:93:e6:11:2a:11:42:3c:
04:45:65:38:c7:28:b2:82:57:f8:c7:52:05:de:4a:
de:eb:c8:d9:a7:bb:2b:01:08:02:a2:6d:e1:8c:8a:
17:9c:fe:d1:0b:97:e2:29:d5:7b:0a:ab:07:03:66:
73:12:f6:98:cc:ef:ff:87:e3:aa:f9:bd:e0:d7:5b:
34:7f:6f:98:0e:79:49:e6:f9:01:3f:4f:28:0a:e7:
c5:50:d5:a7:9d:4e:44:c8:1a:b3:37:16:b8:41:09:
da:15:99:49:bf:94:32:81:49:07:55:87:ea:92:de:
da:2c:4d:21:64:a2:55:e8:b5:48:5b:14:7f:14:e0:
27:45:1b:09:de:07:b4:a2:3e:c9:45:0c:d6:2d:df:
e9:35:e4:a5:d8:80:04:05:c3:a1:32:4b:66:f2:02:
4e:20:c6:ca:8e:b0:d8:3e:91:0b:54:3c:02:f9:55:
d5:70:64:c3:59:23:e7:dc:b8:88:41:28:24:a0:1b:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:04:8E:54:33:3A:9D:69:07:FF:BB:B3:98:D7:86:20:6D:4D:E5
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c7:38:71:e5:6a:00:d3:30:de:bb:92:7c:23:50:9e:ff:e0:
9a:83:bf:50:2f:2d:53:d3:fe:2b:77:02:00:7f:28:75:8f:56:
68:84:e5:29:38:fb:e2:5c:c0:7f:11:a4:8c:f8:0f:66:04:c2:
6b:e8:d1:92:85:37:0a:94:70:d1:07:be:19:6b:2f:da:e0:a1:
24:8e:cf:bd:a7:3a:76:c4:15:ad:be:a6:0b:39:ed:e7:8d:e1:
6d:d0:c8:20:49:4b:01:4d:3d:16:ff:c3:17:56:56:e0:83:66:
8e:db:b9:db:61:88:b6:ca:a0:0b:12:a1:0a:c0:64:c3:1d:ca:
c6:11:13:00:d3:c3:5a:ab:15:50:90:c0:bc:2b:34:a4:c2:03:
25:14:37:49:f5:1e:55:be:0c:7d:d7:6d:d0:3a:a1:e1:81:27:
14:ff:01:1e:02:f6:7e:19:d1:a1:9e:7f:e2:5e:d3:91:21:eb:
04:01:6e:a5:c3:ff:f8:73:99:6c:ee:e9:ac:d2:64:73:48:44:
15:0c:23:6f:ef:df:57:ae:94:0b:22:5a:35:08:9d:10:8a:0c:
65:6f:57:71:1f:c8:e8:e6:20:6c:0d:87:cb:77:fb:1e:6f:30:
79:e5:88:33:74:ad:54:86:55:3d:11:6b:d7:94:e3:63:bf:4b:
f1:90:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:39 2025 by rpki-client