Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: ge8Uzi/KTpBOtZzMrzQuwX0nr0RYQH4mFIrv36ULMDE=
Subject key identifier: 0A:49:44:E4:CB:50:9E:3B:8F:ED:46:FD:5F:BC:70:EE:E9:C5:EE:CE
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0194C388487B6AFB6D5DF1057B246C21D17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 10BF
Signing time: Sat 01 Feb 2025 22:01:16 +0000
Manifest this update: Sat 01 Feb 2025 22:01:16 +0000
Manifest next update: Sun 02 Feb 2025 22:01:16 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: 3pNarxjtO1NZI8oLshpadx0GoWuo9vCZPFNSemeVdgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:48:7b:6a:fb:6d:5d:f1:05:7b:24:6c:21:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Feb 1 22:01:16 2025 GMT
Not After : Feb 2 22:01:16 2025 GMT
Subject: CN=0a4944e4cb509e3b8fed46fd5fbc70eee9c5eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:61:f5:34:be:c2:e7:73:28:48:9c:09:d1:
43:3d:2c:2f:f6:2a:b0:8e:c3:11:66:9e:09:17:7a:
55:61:06:82:57:8b:3b:a3:a7:b5:1c:9f:7b:20:7e:
df:f5:bb:82:1c:79:a3:06:bd:92:63:f6:2e:7f:3f:
59:95:a3:7e:57:c6:87:40:aa:40:4c:70:ae:b2:33:
af:9c:97:07:e2:21:7a:9e:56:dc:2c:e4:3e:31:73:
a3:8a:01:a4:32:7e:c0:8d:32:90:cb:14:6b:7f:a6:
0a:5f:c0:22:3a:8f:4e:94:42:75:3f:4c:7f:61:c5:
ef:d2:72:15:f4:94:be:91:c9:d3:1a:d4:48:9d:8c:
a3:eb:0a:c9:63:7d:ac:26:d2:b8:31:65:57:73:6d:
a2:66:c2:7b:cc:74:36:5b:14:a2:dd:16:6a:11:d9:
e1:e7:a3:4b:6f:1c:80:bc:df:00:86:c1:20:9a:b2:
28:22:17:32:48:eb:97:27:1a:ce:6c:66:e6:a4:64:
60:cd:31:50:bf:97:39:c7:1d:c4:c4:ba:ea:f4:40:
ff:8a:56:d8:38:64:3f:86:84:6e:ab:4f:8a:2e:33:
50:55:5a:3c:32:77:6e:aa:c6:c7:7f:94:bc:8b:88:
19:ea:58:9c:dd:e0:5e:43:dd:08:49:b2:51:d3:7b:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:44:E4:CB:50:9E:3B:8F:ED:46:FD:5F:BC:70:EE:E9:C5:EE:CE
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:e7:ae:73:32:02:f8:cb:ae:26:32:e4:ff:55:1a:5e:fd:
df:f6:a0:b6:2d:4f:f0:b4:7f:c5:30:dd:2c:ae:a3:d3:2d:81:
b3:54:ea:54:e8:6c:65:f6:2b:cd:23:cd:a2:29:23:c9:40:99:
b9:f9:c4:c0:b7:80:bb:93:a0:cc:f2:98:e7:32:d8:7e:3b:24:
17:5c:c3:cc:93:ea:b3:ed:1c:21:17:19:ec:a3:2b:b9:1c:c6:
e9:d3:ec:e5:8e:a1:82:6a:d7:b7:ea:27:2e:fb:ff:71:25:2a:
d8:1b:0a:5d:07:82:17:2f:55:d6:26:5b:e1:2b:4d:b7:3d:d0:
6d:84:e8:2d:33:92:73:4b:ec:62:7d:b5:bd:2d:5a:db:6d:99:
ac:46:59:97:cb:36:56:36:96:bb:6f:1e:b1:b2:6b:f5:18:e3:
5c:bd:ca:f2:80:d4:2a:08:9b:78:d1:d6:c5:15:40:4b:00:75:
db:b4:23:0f:02:5f:79:c8:58:07:84:d2:b7:35:be:18:91:96:
f8:da:04:5f:cb:bd:e2:bb:fe:54:65:b5:20:d6:c1:c2:88:68:
fb:e9:d4:51:3e:6d:30:90:23:71:f6:93:06:56:73:ba:68:e7:
d4:b4:92:70:1a:63:c9:2d:86:c7:66:fd:63:72:0c:22:c1:73:
2a:c4:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:32 2025 by rpki-client