Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
File: xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft (raw, json)
Hash identifier: cKSLTckt04fd6MRkBmG8gclGRJyQYj39PU0uVsGVnfk=
Subject key identifier: 16:C6:A9:BA:D6:9A:A7:81:5D:EC:38:EF:FC:0E:54:D0:74:61:1F:EE
Authority key identifier: C4:0D:C8:A6:5A:F6:7E:72:DF:DF:31:CC:88:94:79:71:9E:4F:D7:A3
Certificate issuer: /CN=c40dc8a65af67e72dfdf31cc889479719e4fd7a3
Certificate serial: 019510C7ACBC723CA5EEFD93DC133AF6FBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xA3Iplr2fnLf3zHMiJR5cZ5P16M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
Manifest number: 10FC
Signing time: Sun 16 Feb 2025 22:01:16 +0000
Manifest this update: Sun 16 Feb 2025 22:01:16 +0000
Manifest next update: Mon 17 Feb 2025 22:01:16 +0000
Files and hashes: 1: xA3Iplr2fnLf3zHMiJR5cZ5P16M.crl (hash: TM/3XMCG53UeAKzHYbKIfhm7+z+lLZE8ydN++QCCMIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xA3Iplr2fnLf3zHMiJR5cZ5P16M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ac:bc:72:3c:a5:ee:fd:93:dc:13:3a:f6:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40dc8a65af67e72dfdf31cc889479719e4fd7a3
Validity
Not Before: Feb 16 22:01:16 2025 GMT
Not After : Feb 17 22:01:16 2025 GMT
Subject: CN=16c6a9bad69aa7815dec38effc0e54d074611fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:a1:57:04:39:f3:94:a9:d9:3f:10:c6:6d:
46:92:98:67:96:da:ac:8f:fa:2c:7e:80:d2:8a:ca:
7c:5c:a5:9d:44:50:4e:60:a9:a9:7e:c2:d3:3e:07:
51:6d:9f:ee:33:16:02:df:d4:5d:dc:a8:e6:b1:08:
5e:fe:25:d8:15:55:4b:dd:7b:12:89:b7:b6:f9:5e:
4b:c7:78:8e:83:cc:c1:c5:94:13:d3:89:04:4d:39:
8a:23:cc:50:e1:a2:26:7a:0d:07:22:73:cb:d3:30:
61:6b:35:79:fb:d4:63:c1:80:7f:9f:f2:38:d8:c7:
07:03:b1:58:93:d3:f9:bc:e9:ef:0b:16:59:a9:14:
b3:f0:69:3c:4c:3e:28:88:ea:93:81:2b:2d:23:2c:
9b:14:b7:15:53:58:83:4b:fa:98:39:97:02:2d:40:
a0:83:4d:1f:5a:f0:98:f7:20:e8:dd:46:0e:dd:cb:
9e:c8:39:a9:3f:ca:08:e4:e3:ee:56:f6:07:a4:b4:
ef:a6:82:2a:92:44:14:12:8e:af:8b:46:e3:ec:f0:
8d:44:cb:a4:5f:69:be:ad:22:84:39:6a:ec:c9:a2:
51:1e:ec:45:88:ce:99:83:fa:1b:ef:84:8c:57:c1:
17:98:92:6b:3e:01:92:8c:63:4a:54:57:c4:49:cb:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:A9:BA:D6:9A:A7:81:5D:EC:38:EF:FC:0E:54:D0:74:61:1F:EE
X509v3 Authority Key Identifier:
keyid:C4:0D:C8:A6:5A:F6:7E:72:DF:DF:31:CC:88:94:79:71:9E:4F:D7:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xA3Iplr2fnLf3zHMiJR5cZ5P16M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:b0:ff:74:64:ec:b0:28:76:3f:e3:0e:8c:c9:58:b9:01:
ac:e7:86:5a:85:ca:32:2d:b8:64:09:90:c2:79:99:93:43:f1:
8c:7a:ea:b2:c7:93:6d:7c:28:01:03:7a:b7:19:5f:e9:11:80:
b4:03:51:b4:07:8a:59:b0:f5:f4:eb:44:28:94:49:4c:44:a7:
7c:a0:56:2c:60:17:30:0c:71:99:54:04:a6:fa:02:c1:9e:e7:
45:08:f5:d3:dc:0c:e8:68:6b:a3:dc:58:75:3f:ef:8e:db:3b:
cf:e4:31:48:10:1f:4e:f0:eb:3b:c5:cf:8e:af:05:cf:79:58:
cc:bf:54:67:7a:07:d0:bf:14:53:a5:4b:74:ec:0f:78:9c:b8:
11:43:6d:9d:56:13:4e:5a:4d:06:47:92:39:c4:9b:f6:d2:70:
d3:d9:d8:51:fe:9e:ba:8a:a5:36:8f:77:e9:e2:25:48:e9:b4:
a4:29:bd:5c:6a:23:be:f2:c2:ef:2b:73:43:45:39:4a:20:b5:
a8:da:bc:51:83:a8:59:67:6e:cd:24:1e:74:f2:69:9a:e6:74:
35:01:89:0b:b9:64:fd:35:98:e3:92:ac:64:9a:21:69:d9:15:
ab:44:73:8c:78:91:69:5a:ee:1c:26:4c:52:b4:50:28:a5:d9:
6c:52:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:07 2025 by rpki-client