Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: rNDwL7sF98OhdGRRUdNJwOyBLPlf5gbGpgc3Cphuorc=
Subject key identifier: 89:82:A8:F9:15:A6:4F:B4:74:38:BC:F2:B7:2F:56:05:F6:3C:F2:86
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 0194C4D17988E7A0BC628FDA42F56E110F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 53
Signing time: Sun 02 Feb 2025 04:00:49 +0000
Manifest this update: Sun 02 Feb 2025 04:00:49 +0000
Manifest next update: Mon 03 Feb 2025 04:00:49 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: XYwbhZxur48GdHh5RkWFGTSifCJRTmnxhywRiOFS7RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:79:88:e7:a0:bc:62:8f:da:42:f5:6e:11:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Feb 2 04:00:49 2025 GMT
Not After : Feb 3 04:00:49 2025 GMT
Subject: CN=8982a8f915a64fb47438bcf2b72f5605f63cf286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:c1:35:a8:01:ca:6b:e2:86:40:d8:1a:f8:
a9:10:a0:f4:62:5a:5c:45:25:40:4a:2d:3a:d8:e8:
24:f3:92:3f:c8:de:83:d5:51:ea:33:b8:81:9a:bf:
e7:5c:2a:07:c3:e2:7c:ee:48:f3:b9:41:66:e7:e5:
05:89:56:b0:a9:be:b3:0b:dc:ab:c6:39:0e:ea:1a:
a6:60:00:e1:49:98:2b:bd:fe:77:c6:40:6a:4a:af:
26:a4:e7:4a:d9:b4:98:d4:7b:e5:9a:ea:fe:2f:0d:
1f:e2:88:fe:61:7d:18:ba:e9:17:5c:9e:d4:d3:c5:
d6:a5:67:c4:83:41:8f:bb:4d:ef:5c:0d:db:dd:6c:
96:b9:8b:61:19:69:c6:5d:53:36:5d:79:48:2c:53:
35:99:1a:e6:8d:64:d7:0e:f6:37:78:bf:a1:36:ec:
25:4c:c1:ab:36:29:a4:d2:fe:00:2c:c3:8f:2c:04:
7a:46:de:16:ca:c0:cf:69:b2:ff:05:33:d0:46:bd:
8e:1a:43:17:96:59:d8:58:d9:fb:6f:67:b8:14:7b:
78:71:07:37:f8:2e:c5:37:db:03:bb:f8:17:b9:84:
a8:ff:92:ac:d1:65:1b:80:38:86:71:fc:e8:2f:3b:
ec:34:fa:44:1a:c0:14:09:8c:9a:75:85:ca:0b:3c:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:A8:F9:15:A6:4F:B4:74:38:BC:F2:B7:2F:56:05:F6:3C:F2:86
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:91:b8:f3:9c:05:3b:2c:5c:6d:12:5a:9f:5e:45:a2:1a:
a4:06:cf:a4:6a:0b:3f:0f:6f:10:9a:8a:65:d4:5a:8d:52:36:
dd:d1:be:4a:ae:6e:2e:2b:e2:b8:75:a9:9f:e2:59:02:03:fa:
da:2a:a8:d7:fe:e0:fa:d7:14:96:f6:e6:d1:f4:cb:b9:d0:8e:
b8:c7:e1:29:ec:ac:15:d6:13:47:93:79:f3:d2:e6:72:b2:b5:
be:8e:5a:ce:19:ba:24:78:76:45:8f:c9:3f:c0:19:fd:af:07:
59:a5:b0:9f:e9:04:f2:b6:27:94:a4:fc:37:64:69:e0:5d:aa:
cd:d7:f2:ee:ca:db:e7:58:14:00:bc:b0:fd:b1:d0:7c:ed:0b:
b1:f1:10:8f:31:c1:a8:9a:78:64:8e:db:75:61:11:e7:82:43:
59:d2:27:26:74:09:b6:eb:53:82:2f:dd:20:1a:44:4a:33:34:
17:de:ca:d2:95:07:6b:7a:0c:1e:d5:9b:1f:08:94:60:ed:30:
7c:f4:6e:e4:a9:f6:17:26:27:c1:14:72:7d:bb:a6:ea:b7:bb:
ed:a8:db:4c:43:29:bd:51:ea:9d:f2:e2:ba:a1:04:f2:cc:24:
33:14:06:dd:c3:93:26:5a:80:30:82:fe:d5:85:4f:b3:69:09:
f8:9c:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:27 2025 by rpki-client