Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json)
Hash identifier: Py5VS3Rgt8kVa08S6pYz+1ocyhzQM98MFyIFvbDD1Ig=
Subject key identifier: 5B:BF:9F:25:09:1B:11:E2:02:E0:24:0A:E0:84:A4:A3:5E:31:BD:3F
Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a
Certificate serial: 0194C350C749F19130708C6FFEC1B14F2CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
Manifest number: 0102
Signing time: Sat 01 Feb 2025 21:00:38 +0000
Manifest this update: Sat 01 Feb 2025 21:00:38 +0000
Manifest next update: Sun 02 Feb 2025 21:00:38 +0000
Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: 12exs0MNNVIqLQNx5ZoK3lem4ZEOGasp/C4MP8dURNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:c7:49:f1:91:30:70:8c:6f:fe:c1:b1:4f:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a
Validity
Not Before: Feb 1 21:00:38 2025 GMT
Not After : Feb 2 21:00:38 2025 GMT
Subject: CN=5bbf9f25091b11e202e0240ae084a4a35e31bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:3c:8a:e6:fe:3d:ff:7e:ea:b0:59:ac:cf:
e8:fe:a2:e2:e5:33:c9:14:03:43:d4:7b:eb:86:6e:
31:10:a2:a1:a2:59:72:98:68:30:fd:20:0d:68:3f:
bb:fd:6e:f0:c6:ff:86:1e:07:09:65:c0:65:bd:f2:
b4:b7:99:02:f2:64:8f:15:8c:bf:56:5b:e9:34:97:
6f:7e:7a:94:79:42:7c:18:49:ec:be:a3:50:97:21:
5d:c7:d8:fe:b0:2f:89:eb:bb:d5:d9:60:7e:a2:00:
10:14:d4:c3:36:99:37:24:a8:f0:da:d0:e4:10:dc:
de:a8:2f:16:82:b4:88:3c:1b:d8:f4:ea:65:55:68:
ba:6e:57:12:00:29:6e:04:63:da:e0:27:09:8c:8b:
81:f4:32:a9:19:5a:4d:9e:86:84:54:1b:9e:37:f9:
10:1e:09:54:70:bf:ff:c6:b2:3b:91:67:1e:f3:d6:
a9:f3:7c:16:71:05:70:81:50:95:41:e6:60:97:fa:
71:15:22:64:be:c5:cc:38:23:60:11:11:31:4f:8f:
bb:71:47:da:0e:be:57:17:7a:3c:28:c7:02:ba:c7:
a5:6e:97:46:92:cc:5a:d7:f1:dc:da:ba:07:13:08:
dd:46:04:44:5a:b6:d6:e1:8b:c9:cc:c0:c0:69:0b:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:9F:25:09:1B:11:E2:02:E0:24:0A:E0:84:A4:A3:5E:31:BD:3F
X509v3 Authority Key Identifier:
keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:e2:7c:2e:e0:40:e9:dc:4b:cb:e0:a5:44:4a:a9:87:e0:
bd:a7:0a:57:82:62:be:bd:76:57:15:c8:ef:3d:18:99:0c:26:
0a:ae:6c:32:75:17:37:1d:e4:fb:a1:05:7d:c1:e7:29:36:83:
ed:48:ab:3f:8d:55:d1:d4:1e:72:30:18:e0:f7:53:3d:08:59:
11:b7:60:b4:33:64:2d:65:04:f6:e4:8c:b6:5f:6f:22:4d:af:
e0:b5:e5:2c:9a:1d:12:d6:89:ec:01:0d:9e:16:18:3c:25:17:
f9:96:90:a9:29:bc:5b:d9:95:a6:ef:67:17:3d:f3:eb:a6:cc:
80:13:45:dc:9b:70:e0:ef:b8:be:de:3a:26:cd:33:1e:4e:70:
1a:f0:b4:51:8c:57:f2:81:1a:11:01:c5:9a:fc:dd:41:8e:56:
85:94:91:f9:d6:86:1a:49:e8:3f:b3:1e:63:a4:1e:c9:d1:3a:
53:83:56:b9:53:09:16:b0:36:70:eb:4b:a1:cc:85:98:80:e5:
36:d3:58:42:64:29:d9:7e:35:20:8a:4c:e2:05:d0:f8:06:8a:
5a:79:6d:5d:15:79:e2:6c:21:7c:ce:3d:95:4e:a0:97:1d:7c:
1e:e5:b2:2d:29:70:e7:3f:02:d9:bc:8e:37:82:4c:b5:2c:19:
0f:ec:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:08 2025 by rpki-client