Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier: mSn2IqfaLImEYWaSMafJVTyBXgIsaFUSS0xnn55Q2WM=
Subject key identifier: A9:34:A9:3C:F9:50:D3:79:F9:11:12:55:6D:AB:13:D5:BC:DB:7D:2C
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial: 01958C6003907AA0C5F98AF0BC7B84E28183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number: 10CD
Signing time: Wed 12 Mar 2025 22:00:57 +0000
Manifest this update: Wed 12 Mar 2025 22:00:57 +0000
Manifest next update: Thu 13 Mar 2025 22:00:57 +0000
Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: nJy9Q943UZUJmFZe571DmU12paTC3wwEWyIYnp0Ekjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:03:90:7a:a0:c5:f9:8a:f0:bc:7b:84:e2:81:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Validity
Not Before: Mar 12 22:00:57 2025 GMT
Not After : Mar 13 22:00:57 2025 GMT
Subject: CN=a934a93cf950d379f91112556dab13d5bcdb7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:40:38:99:1b:04:b9:15:46:d5:ff:cf:83:
cd:d3:9f:74:6c:9a:e4:44:e6:16:e5:10:b9:cb:3a:
0e:12:80:0d:30:76:84:f6:9f:96:44:5f:15:1f:c1:
98:14:6b:35:33:a2:dd:39:6f:1e:b4:11:3a:6f:2a:
13:e2:6f:5d:64:03:02:0a:18:dd:81:0a:8b:64:25:
0d:2e:49:c7:fe:01:b2:da:7b:be:ea:1a:5f:64:4a:
d7:d4:3d:0a:c7:8e:a5:82:02:c2:51:ce:dc:c6:45:
15:95:0e:64:cb:cc:c3:b3:31:44:80:bf:50:65:75:
54:65:81:32:aa:f7:97:6e:81:a4:64:31:56:a9:82:
86:bb:db:78:a4:75:94:31:41:d3:37:32:b4:4d:cd:
f7:74:25:72:8f:f2:5d:58:87:63:bc:db:48:cf:3b:
7b:92:55:ce:8b:23:96:a3:7e:42:38:b6:52:cd:1d:
13:22:17:94:20:5b:68:3a:5c:ba:43:bd:e3:b7:e6:
1d:43:65:f7:4a:af:42:6c:c3:bf:7d:44:bc:cf:4a:
91:88:04:7e:06:cd:74:bb:37:f6:84:10:51:72:36:
5c:77:18:47:72:64:c0:c6:6e:fc:9c:b7:b4:97:45:
d4:d8:8b:bc:7d:f8:35:32:b8:d1:cf:4d:74:a5:18:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:A9:3C:F9:50:D3:79:F9:11:12:55:6D:AB:13:D5:BC:DB:7D:2C
X509v3 Authority Key Identifier:
keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:7d:04:da:d5:04:b0:00:53:ed:ec:12:0d:aa:68:53:fb:
53:44:4c:fc:ed:4a:c6:9e:5e:ee:91:a1:17:19:94:45:20:46:
3a:3b:01:ae:0a:eb:3d:e9:74:25:34:e7:db:95:3c:6e:34:2e:
f8:c5:0c:7e:4d:75:2d:df:68:f3:21:03:91:9b:92:c2:c9:8f:
d6:e1:97:7b:8e:03:92:43:77:d8:79:4c:dc:a7:38:eb:58:e8:
6d:be:75:3a:da:6e:e1:fa:a5:9e:8c:47:ef:7d:47:9c:91:3e:
11:d2:67:b3:79:66:f2:13:27:09:c0:8f:f7:9d:52:47:42:c0:
9e:e5:45:c0:55:56:f8:d2:9d:4c:42:b5:c6:fe:ff:00:10:6f:
68:19:ea:2b:93:06:8d:30:a0:c1:15:18:da:38:c0:ef:f9:d6:
40:39:ab:43:cf:62:aa:4d:e8:09:16:bc:ad:34:1e:30:34:c0:
3a:8f:5b:31:5a:39:71:91:77:e0:57:d5:32:31:df:0c:a6:09:
87:58:3b:b9:cd:f4:8b:d2:ad:74:a5:6e:1b:60:a6:24:58:58:
d6:50:14:36:d8:0c:71:f6:63:01:f4:6d:42:4c:0a:ea:1f:af:
6f:b2:03:a1:33:58:80:02:90:0a:ca:fb:0b:c3:0a:35:70:a0:
0e:6b:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:28 2025 by rpki-client