Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier: Fjiv2QMH26y/Z15BxmoYzG/qfbFjDXWQyYxrimUQfL0=
Subject key identifier: 85:06:E9:96:CA:EF:DE:C4:03:96:AC:4E:53:12:C0:E9:17:16:FA:0C
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial: 019510C7958A53D224658A9651CC2F6EE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number: 0AF5
Signing time: Sun 16 Feb 2025 22:01:10 +0000
Manifest this update: Sun 16 Feb 2025 22:01:10 +0000
Manifest next update: Mon 17 Feb 2025 22:01:10 +0000
Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: FC5LNjupbVSKdzseLbhfZ0V64xoniP4foZvdDrGZ7dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:95:8a:53:d2:24:65:8a:96:51:cc:2f:6e:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Validity
Not Before: Feb 16 22:01:10 2025 GMT
Not After : Feb 17 22:01:10 2025 GMT
Subject: CN=8506e996caefdec40396ac4e5312c0e91716fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:15:7a:2b:2c:de:03:3b:e1:94:2d:28:61:
be:4a:54:6d:1d:95:cb:4f:d3:6f:9d:4d:70:9d:c5:
20:8f:c1:2e:49:d3:d5:cc:c6:59:9c:d6:53:dc:4e:
4e:3f:8c:9d:68:1e:09:e1:b9:46:05:03:33:58:6a:
95:86:da:34:6d:ca:36:95:af:71:ec:22:0b:bf:91:
60:f1:be:b3:74:ec:63:68:bf:e7:a4:84:37:88:64:
c4:a1:2f:b9:48:94:cc:75:0d:cb:a9:9b:09:a0:82:
1e:7a:5d:fd:2b:81:49:a7:5a:3a:e4:cc:fe:58:6e:
19:3b:80:30:a0:f9:22:8d:5a:d6:dc:85:2e:46:b9:
13:70:5b:c6:f1:87:71:5e:cc:54:5a:d5:a7:08:c9:
7e:b3:de:8c:da:4f:a4:63:27:3e:25:db:eb:a6:e7:
87:6a:51:16:06:1b:82:28:2f:b3:a1:27:c1:98:cf:
49:3a:67:c8:71:b5:67:c5:3c:2d:ed:f1:7e:38:53:
66:e0:cc:a8:0a:1c:89:d5:d6:e1:33:08:d2:56:0f:
79:59:5f:01:30:e4:31:d2:cb:85:43:d5:ed:cf:3f:
a4:0f:ba:2e:e4:08:c7:65:0d:90:1d:42:dc:89:44:
b7:53:2a:f7:4f:36:8d:d7:c4:92:2c:a0:3b:9b:87:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:06:E9:96:CA:EF:DE:C4:03:96:AC:4E:53:12:C0:E9:17:16:FA:0C
X509v3 Authority Key Identifier:
keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:47:a5:c1:9a:12:06:2e:3c:b7:a7:dc:ac:a9:b9:6a:fc:
93:cd:ba:54:9e:02:9a:d9:72:b1:89:76:21:98:d7:74:aa:0a:
a3:98:87:43:28:2a:10:83:9c:93:39:84:04:63:a0:73:07:d7:
47:7f:23:d0:1d:08:e1:a2:a6:09:64:d6:3c:78:b5:bb:3b:d5:
d2:01:72:a5:c1:6d:5a:d5:e0:8a:dc:21:87:89:b2:a5:9e:0c:
82:75:54:81:d2:9a:0a:64:89:bc:ba:f8:f3:46:91:62:3b:67:
f3:db:f9:a0:19:2a:14:a7:57:8a:60:5a:b7:f3:1a:37:59:a9:
c9:aa:1e:17:52:a3:2e:b1:20:0d:b4:4e:3e:1c:3e:24:47:f5:
e9:98:4b:10:7e:01:cd:89:d2:6a:5c:37:2b:9e:99:7a:46:57:
b7:58:6d:12:dc:02:e2:36:73:f4:01:5c:55:fe:b4:fc:09:cf:
a5:98:8a:a5:b6:02:11:02:a1:9d:b4:54:3b:d9:c2:7b:dc:d1:
ab:82:85:15:89:79:aa:b3:08:c6:da:9a:85:79:e6:59:38:96:
f9:2a:86:05:da:82:64:36:d4:3b:f6:c0:4c:4f:85:e6:03:a1:
5f:e7:e7:97:36:66:6c:0e:cf:89:45:77:24:fd:35:d6:56:4b:
c3:47:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:18 2025 by rpki-client