Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: W1TaC0lRetoPkRtnmLM356vz309w3079A5P1ttTBDbM=
Subject key identifier: 82:7D:56:BF:29:68:30:FF:A6:4D:11:A8:9A:18:63:E6:78:AC:12:6F
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0194C388606B47EBC5B2EE113BB9F09346D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 0643
Signing time: Sat 01 Feb 2025 22:01:22 +0000
Manifest this update: Sat 01 Feb 2025 22:01:22 +0000
Manifest next update: Sun 02 Feb 2025 22:01:22 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: Jf2uU/4FYX4OAUW/SG1CauR/2w+NTYT9nK4UIKDpdjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:60:6b:47:eb:c5:b2:ee:11:3b:b9:f0:93:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Feb 1 22:01:22 2025 GMT
Not After : Feb 2 22:01:22 2025 GMT
Subject: CN=827d56bf296830ffa64d11a89a1863e678ac126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:f3:4d:93:4a:a9:e3:e7:fb:4e:80:94:1c:
34:89:5f:b5:0b:c5:5a:49:09:57:7d:2c:6b:f6:f0:
b6:38:9e:6d:ff:cc:81:ab:ba:dd:f4:f2:9e:5e:7f:
d5:fa:0a:86:5e:68:8e:a2:42:17:55:63:0e:9e:5d:
16:e0:e9:0f:53:36:56:c4:e2:e7:66:c4:fa:25:b0:
2a:39:0a:8a:c2:74:82:ee:53:8a:1f:09:a1:8d:6e:
48:af:ff:bd:58:0a:27:03:f2:47:48:1c:6f:25:dc:
b9:c8:59:52:9b:9c:f9:ae:c6:07:ce:1f:66:57:61:
82:50:e7:b7:70:99:ca:b1:9d:1b:6b:d3:f4:d5:fa:
32:b8:d7:95:0a:a7:48:9c:27:3a:0c:2e:93:71:7c:
70:a9:d9:c5:5b:00:ed:55:6c:d9:71:d8:69:b2:98:
05:ae:6e:fb:dd:93:ef:68:42:5f:f7:91:67:3d:2b:
f9:ef:74:57:61:d9:95:f8:27:d9:42:4e:80:35:72:
ba:e2:cb:45:68:42:f4:dc:53:1b:bc:bc:45:c0:ee:
8e:76:24:c3:64:19:00:86:5c:73:f5:bd:ef:45:37:
d3:f3:7c:56:5d:78:4f:1a:52:47:fe:26:57:3a:91:
a4:61:f6:4d:d2:81:bb:cd:1e:74:73:b2:47:d9:0a:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:56:BF:29:68:30:FF:A6:4D:11:A8:9A:18:63:E6:78:AC:12:6F
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:e6:25:c1:21:85:b6:0b:e0:48:77:38:79:fa:f6:79:c1:
f1:86:c8:a9:2c:d3:b6:4d:2e:36:90:4a:49:bd:60:e4:3e:91:
48:08:13:7f:43:60:5a:01:b8:57:66:3c:a5:07:a0:b3:02:c7:
29:43:39:21:ab:92:85:4c:2d:b4:9f:49:14:f2:f3:ad:ff:e5:
4b:eb:9a:d9:2c:66:54:ee:1e:a1:54:5c:36:86:8d:3f:24:b3:
47:11:86:3d:d6:6e:b9:7d:19:1c:ae:77:3f:66:2b:76:22:0c:
6d:2e:39:2a:1e:46:75:53:d5:f9:bf:b0:4c:c6:90:e7:b6:4d:
1b:66:8f:6a:99:c9:84:0f:3e:77:02:52:0a:9c:4b:45:39:10:
57:6e:cb:ba:ef:5d:9f:bd:40:c4:97:69:b6:5f:e7:e3:07:fa:
41:da:87:d7:a0:8b:d2:60:dd:fd:34:7d:cc:61:7f:11:8f:43:
dd:ad:2e:07:d7:83:f9:76:6b:91:26:62:5e:f3:19:39:8e:31:
05:f6:a5:be:0a:61:52:f9:6e:50:fc:7a:e9:f2:55:b4:61:a8:
8f:d7:1a:e5:36:09:3a:90:0b:92:ab:61:d6:35:b4:b4:c0:0a:
a9:27:9c:01:b0:13:05:aa:ad:0b:ba:be:ea:65:9c:06:e5:a4:
b8:00:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:44 2025 by rpki-client