Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: j3bAjN5HSxiFiQvatUYNlZxmbrN9BQO7OK10YneRTIs=
Subject key identifier: D0:9C:0E:B2:A0:D1:0E:90:18:EB:E3:49:38:E1:B2:AE:C6:34:F1:BF
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 0194C3F61FFB37C6E726F631AC9DAB0CF974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 0F
Signing time: Sun 02 Feb 2025 00:01:14 +0000
Manifest this update: Sun 02 Feb 2025 00:01:14 +0000
Manifest next update: Mon 03 Feb 2025 00:01:14 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: lasYiSoXDggJ+hn7ZdUGrx0hVDQxPHbjVP2o9aK/5YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:1f:fb:37:c6:e7:26:f6:31:ac:9d:ab:0c:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Feb 2 00:01:14 2025 GMT
Not After : Feb 3 00:01:14 2025 GMT
Subject: CN=d09c0eb2a0d10e9018ebe34938e1b2aec634f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:c2:31:52:37:84:c1:38:0c:d7:11:f0:2d:
ff:7a:28:3e:98:29:7f:d9:c3:d7:72:ca:fd:53:cb:
df:82:91:dc:23:06:79:3e:07:88:fa:8c:49:31:9f:
c8:fb:2d:b3:91:aa:01:80:01:1e:ba:fe:17:1e:2f:
40:32:39:2f:d3:1a:57:73:da:c5:66:70:8b:8d:1b:
a1:79:aa:a1:f6:3a:ec:96:28:f0:c9:be:ba:0b:9b:
4c:4f:b4:24:38:14:5d:cf:a8:ab:e9:aa:24:28:d5:
9b:18:a7:97:80:01:70:29:26:7f:b3:85:f9:75:1a:
91:24:43:19:0a:c7:37:c8:2f:8f:0b:4a:e8:33:5f:
31:95:dd:08:67:ef:78:97:5a:42:d6:a7:a2:aa:10:
e0:2c:3e:48:e9:77:a1:83:36:1e:31:0f:18:7a:14:
ef:78:4f:43:56:8f:ec:ef:49:e9:1f:ba:ca:da:46:
b3:e1:ee:07:4d:11:22:92:de:66:fa:c4:1e:e9:46:
c1:7f:ef:cb:d9:55:09:f7:96:a9:81:b7:19:bb:88:
20:02:76:c7:4b:45:70:2b:f1:65:1f:f9:a9:48:5e:
e0:35:34:68:ef:db:09:c3:e8:a6:d0:46:ca:68:fa:
d2:e6:fd:f0:9a:a3:d5:9c:cc:a7:84:54:7a:93:2c:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:0E:B2:A0:D1:0E:90:18:EB:E3:49:38:E1:B2:AE:C6:34:F1:BF
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a6:69:21:52:0d:d1:2d:f9:28:e2:46:65:3d:39:ab:74:fb:
16:71:4e:47:bd:4e:5b:c7:69:ef:c1:82:c1:77:0c:18:53:e5:
d3:5f:95:11:cd:c1:63:c6:92:92:d8:cf:ba:be:81:2e:21:8c:
26:86:08:9f:7e:c7:5c:ba:c5:c9:89:ce:bc:9a:17:b7:c9:a4:
74:cf:2c:47:ef:d9:17:94:63:93:77:f2:17:d0:35:ed:87:da:
a0:b4:cd:7d:3a:9a:96:74:80:e5:28:e7:e3:90:94:32:dd:c4:
32:58:1e:08:6e:1d:0d:cd:57:5b:fa:22:fa:13:c5:0b:40:6e:
45:a8:9f:49:95:2b:eb:0f:73:1e:97:12:54:57:31:3f:03:c2:
6c:de:73:eb:e0:a1:82:12:1c:d9:59:fc:f7:1b:ea:2f:cf:29:
58:9b:7b:4a:af:e3:b6:7c:68:0d:7f:76:35:a5:7c:5a:d3:aa:
e8:c8:f8:56:c0:a8:7b:8d:46:5a:8a:92:44:ae:18:e9:e0:3e:
c7:a4:b7:a1:0c:b2:ab:17:25:43:2c:18:41:fc:05:e6:31:62:
5b:0b:b3:af:60:3a:0d:c1:5a:e0:6e:0d:21:34:c3:3a:bb:b2:
ad:26:da:a0:04:a7:e0:c5:66:ce:c9:cd:f6:c5:c7:f4:79:b0:
e6:04:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:38 2025 by rpki-client