Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: 2TaxAnkORQMiPvvGu+98GSIlVLpXUcc2pt62dK4NeHs=
Subject key identifier: 21:78:6D:30:60:C2:02:A3:1C:7B:6D:C9:EF:3E:CE:9D:48:B1:16:40
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019510C71AFA849388D56D4CD3EAA7BD775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:00:38 +0000
Manifest this update: Sun 16 Feb 2025 22:00:38 +0000
Manifest next update: Mon 17 Feb 2025 22:00:38 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: F75OsY9yjspsBTFqm1junFfpYk3K1MlLHOAF/tWFZ80=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:1a:fa:84:93:88:d5:6d:4c:d3:ea:a7:bd:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Feb 16 22:00:38 2025 GMT
Not After : Feb 17 22:00:38 2025 GMT
Subject: CN=21786d3060c202a31c7b6dc9ef3ece9d48b11640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:a6:77:c4:5a:1f:f9:c5:99:cb:97:ae:18:
d0:af:62:7a:23:46:20:86:9b:2a:e0:dd:ec:4a:8a:
c4:6f:89:82:f8:7f:37:94:12:c8:56:ec:b9:3c:ec:
f4:55:e7:1d:52:11:0b:5f:ab:ad:a6:3d:9b:8a:eb:
f9:7f:db:e6:5a:bc:5d:a6:6c:f1:69:09:64:42:60:
9f:53:d3:22:fa:7b:c5:91:19:14:d1:8d:b8:a2:75:
c0:62:e1:30:9a:cd:99:63:9c:8a:ec:0b:ca:1b:8f:
d2:74:dc:90:a0:69:7c:4f:eb:88:f4:c0:fc:3c:b0:
ee:c2:12:79:20:d4:74:13:ac:d9:df:49:3d:49:22:
a3:c8:b6:4e:ee:ad:31:ce:46:32:ae:0d:6b:9e:79:
4a:f0:83:a5:42:35:a5:e1:4b:e3:58:60:36:e3:3a:
f2:7d:5f:6d:93:bf:a5:4e:91:d0:94:53:f7:ae:5c:
41:61:f2:28:e2:29:7e:01:1a:88:37:28:52:5a:e9:
3e:04:d7:61:69:e1:75:6e:43:92:fd:aa:9e:c8:15:
d9:b2:8c:5f:33:1a:f9:7a:be:a3:20:77:e7:a8:39:
19:53:4d:5b:dc:2c:27:58:82:f3:64:ed:4c:f2:74:
85:1c:8b:48:cd:37:fe:bb:12:2e:f7:e1:5f:3b:14:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:6D:30:60:C2:02:A3:1C:7B:6D:C9:EF:3E:CE:9D:48:B1:16:40
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:cb:38:b9:7c:bc:bc:51:a7:d5:55:8f:4e:cb:cb:0d:71:
7e:d2:f6:b8:db:8c:36:06:4e:98:a2:e6:31:74:90:2b:33:2a:
40:87:91:8f:c0:e5:d4:ce:48:d4:20:89:12:54:da:e4:31:0a:
52:c4:59:ae:da:e3:9b:06:dd:ef:d0:0d:ad:bc:50:62:f9:ea:
dd:aa:86:f2:94:6d:a6:59:ad:68:f9:37:76:39:af:54:f7:cc:
17:3b:58:32:b0:fb:72:0d:54:0d:58:f1:40:17:7e:ae:75:f7:
35:23:b5:81:b7:2c:78:78:2a:5c:d7:4f:3f:3f:ec:56:51:fb:
7c:e1:68:10:a7:ab:1f:70:86:e2:58:19:58:43:87:1d:25:8b:
23:5b:40:6c:7b:41:41:de:41:12:71:33:24:2d:7c:a0:e8:f6:
d3:50:6d:aa:39:d0:c1:c2:63:1e:21:50:78:01:84:4a:91:78:
3c:5e:fd:18:11:f3:36:39:c4:77:1b:5c:a4:7e:8b:41:d4:a9:
e4:45:be:9e:de:c7:ff:0b:ce:56:de:d0:41:93:12:df:ad:02:
88:77:d0:8c:0b:f5:c4:af:70:94:e1:01:56:f4:67:dd:6c:31:
73:c6:84:7c:45:f6:8b:ff:b0:8e:a1:7d:75:85:ff:dc:6c:1e:
1c:ec:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:18 2025 by rpki-client