Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier: iZm/S/EqyD70zvDefk2CD60niPnjcilFmIY0DpcYMf0=
Subject key identifier: E2:80:2F:77:5E:BF:3B:EC:C7:23:D6:81:6E:CE:32:5F:2C:8B:0C:02
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial: 0195127E38CD92EB1B819ACF066F90C3DA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number: 0C72
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: 7ijpSNu6S+EkYm3Xe+Srny14T5+q3a1AcyklMgoKe48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:38:cd:92:eb:1b:81:9a:cf:06:6f:90:c3:da:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=e2802f775ebf3becc723d6816ece325f2c8b0c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:e9:58:40:a4:4e:d3:a7:77:53:be:a5:c7:
95:9c:33:35:a0:62:66:f7:63:17:19:7a:c9:16:77:
de:0b:97:d2:48:27:a4:f4:f5:0f:c7:06:e0:b8:d6:
5d:26:dc:b5:98:af:ab:83:f8:ce:6f:57:57:83:c5:
96:0e:6d:11:ea:70:b2:89:40:c2:d1:07:50:11:e7:
a3:4f:3b:80:30:3a:f8:4d:8e:9c:84:df:3b:6c:1b:
d6:1c:f9:8f:1f:a2:80:74:db:aa:7e:54:ac:06:d5:
bb:0f:79:ad:f7:a3:42:73:e8:22:40:49:13:26:72:
d2:74:c6:05:8a:1a:f4:5e:86:8d:17:d5:d6:1b:4a:
f8:d6:b0:56:c6:1b:cd:72:93:15:38:53:c4:5b:df:
94:82:b7:86:1a:b7:69:fc:8d:7d:04:bd:ad:b5:b5:
74:73:00:8d:a8:0a:a4:49:a2:b0:89:9f:32:67:da:
0c:58:de:1e:11:fa:47:9a:c3:aa:47:f8:03:76:87:
cc:57:87:9c:8f:e7:95:48:5c:37:b0:70:24:0b:c5:
5b:7f:61:46:2d:76:79:a1:86:10:69:d5:e2:4d:52:
37:8f:c1:f7:53:32:b9:d3:96:bf:a0:73:60:83:d5:
9c:12:fe:65:24:42:b7:ea:b7:e8:2f:35:50:69:b2:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:2F:77:5E:BF:3B:EC:C7:23:D6:81:6E:CE:32:5F:2C:8B:0C:02
X509v3 Authority Key Identifier:
keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:9d:77:b3:b9:a4:94:62:6a:9a:aa:79:80:b6:51:38:13:
0c:ce:34:79:65:ac:f3:de:15:e3:c4:0a:0d:69:17:05:ac:bc:
8b:ff:0c:03:0b:20:21:f7:bf:fc:44:08:ac:7e:15:28:21:62:
51:47:cc:50:40:85:3c:58:c2:75:be:61:68:f7:9b:d3:6b:05:
f6:a2:97:50:fc:1a:54:68:54:a1:d8:04:a1:f5:b9:4a:5d:bc:
d6:b2:c8:cf:c8:90:db:85:e3:11:72:93:9f:e0:f9:9e:c8:a8:
38:70:1d:db:f2:84:b4:e8:ec:b8:b5:71:dd:16:e4:ce:6f:ea:
97:53:72:b7:57:14:a8:05:1c:e5:96:97:1b:fe:11:d8:f0:a4:
c2:88:48:81:bb:7c:36:d5:43:c9:8c:62:d4:8e:ca:f6:78:a9:
a4:fc:65:93:37:66:a1:50:4e:b4:b1:be:01:7d:41:96:9c:91:
73:38:97:47:5f:49:0e:15:cd:15:0b:11:6d:73:2e:17:72:05:
fe:17:4b:6d:83:76:8e:b0:c2:1b:e2:4c:a1:b2:7c:02:50:55:
a0:da:56:13:d5:b6:0d:de:2e:aa:c8:d1:a7:0d:1c:b8:cf:36:
5a:38:f0:cc:d2:10:13:a1:4a:f3:08:9a:e7:80:be:74:72:fa:
6e:be:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:07 2025 by rpki-client