Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: kd65X+pS6EbAQ8nZbXTZbjwVvgnSJB0xDOCE1KoK8Mc=
Subject key identifier: FF:9E:4B:3A:9C:01:A1:1B:25:64:F2:5F:0F:BD:0E:EA:7E:C2:86:EE
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019510FDC79B5BDCBC2EB32CFF366CE1D399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 038D
Signing time: Sun 16 Feb 2025 23:00:21 +0000
Manifest this update: Sun 16 Feb 2025 23:00:21 +0000
Manifest next update: Mon 17 Feb 2025 23:00:21 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: /SJDOMo5vyJTOpAFaJgjA4kbtDtkqF4dmvK3uKYqFwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c7:9b:5b:dc:bc:2e:b3:2c:ff:36:6c:e1:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Feb 16 23:00:21 2025 GMT
Not After : Feb 17 23:00:21 2025 GMT
Subject: CN=ff9e4b3a9c01a11b2564f25f0fbd0eea7ec286ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:85:3b:5e:8c:6e:dc:b2:88:81:00:32:37:
61:45:49:a3:a3:62:cc:45:3d:02:15:e1:a3:ed:cc:
d7:88:09:bf:29:f3:c6:59:a1:c2:26:b1:33:b3:39:
f4:db:4f:1d:37:50:49:9a:fa:14:32:83:de:05:b3:
65:1e:21:c9:d0:70:6c:9f:12:84:42:8d:82:97:4f:
92:b6:68:0a:c6:ce:c6:f4:09:b8:e0:2f:41:09:63:
2f:74:83:ee:fc:b9:23:de:c3:a8:8a:d3:3a:d0:3a:
91:c0:cb:71:0d:48:0f:38:98:f0:72:43:bc:79:52:
d0:fc:81:f6:7d:a1:26:ed:1d:2a:80:7d:87:b9:4b:
6e:0b:8d:b9:bf:01:f2:58:43:75:89:42:97:74:df:
fa:f3:38:d2:a2:e4:0f:6b:25:03:d5:bc:65:07:02:
41:62:c7:10:56:8b:be:b6:8f:4f:49:ab:45:3d:36:
1f:67:5e:a6:51:97:a6:da:02:b2:40:4a:71:96:90:
1c:e5:90:b9:46:3b:fe:19:d8:d1:4b:36:da:a3:b3:
72:d1:5e:03:cc:38:5a:13:84:cb:9b:91:0b:dc:b3:
eb:b9:0b:31:88:f4:1f:2e:6a:79:56:dc:eb:f5:f1:
d2:cd:38:13:34:b5:7f:e5:bb:3a:59:db:52:64:cc:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:4B:3A:9C:01:A1:1B:25:64:F2:5F:0F:BD:0E:EA:7E:C2:86:EE
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:27:c2:3a:92:fa:e3:52:d7:65:ae:06:2f:e4:8a:15:59:
14:51:b9:36:1f:79:7f:96:52:51:98:02:de:69:d7:0f:5e:54:
c8:ec:06:6f:46:19:e3:f7:d5:24:8b:3b:2d:ce:91:e8:ab:e3:
30:7d:ac:7f:f7:0a:d5:c9:a4:34:50:cd:89:1c:ab:3b:21:d1:
28:60:b1:50:ce:d1:1e:b1:7b:87:9a:d5:80:54:24:92:09:c2:
60:42:b9:d6:57:90:16:95:58:60:74:d1:8b:fd:79:0f:76:96:
86:d0:58:07:44:4f:bb:2c:66:fc:17:8c:85:75:54:71:ab:47:
3f:2a:7b:14:b8:ec:fd:66:87:7c:9d:21:d0:f4:63:ea:1d:67:
54:f7:1c:81:85:fb:88:09:af:2e:79:cb:f7:a9:ea:6a:e9:96:
4c:6d:5a:57:b9:80:8f:58:2c:ae:f5:7c:5c:ab:12:d0:4a:86:
6e:dc:3d:a4:73:08:ac:40:44:1e:59:ac:15:c4:95:24:62:6a:
8b:38:b3:32:31:33:0e:0c:72:95:44:50:ff:bf:be:67:73:3b:
51:f9:a4:ed:a2:22:68:39:c0:08:37:ea:76:a3:6d:0a:f2:85:
7b:34:c8:21:a2:68:eb:26:76:aa:ca:8c:3c:a4:24:fd:d9:b1:
ff:db:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:15 2025 by rpki-client