Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier: Edmks2qQvWEHr6JipaX4ffVQ5SzdRxkwdccL8rLFoRA=
Subject key identifier: A0:F0:6E:80:18:59:BA:A2:8F:18:DC:8D:72:0D:AC:1E:0E:AD:47:95
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial: 0194C3BE7BE13C7323BC6DF5EE857C5F4A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number: 2F
Signing time: Sat 01 Feb 2025 23:00:28 +0000
Manifest this update: Sat 01 Feb 2025 23:00:28 +0000
Manifest next update: Sun 02 Feb 2025 23:00:28 +0000
Files and hashes: 1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: AibyPeYw4MtLZJOXaKykSo1Ly6zBT4RATJ35ofqDZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:7b:e1:3c:73:23:bc:6d:f5:ee:85:7c:5f:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Validity
Not Before: Feb 1 23:00:28 2025 GMT
Not After : Feb 2 23:00:28 2025 GMT
Subject: CN=a0f06e801859baa28f18dc8d720dac1e0ead4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:8a:3e:22:57:80:76:65:8c:4d:6b:77:e9:
42:a7:b1:87:bf:10:d4:84:24:6e:e4:d0:4b:2d:d2:
fd:fe:72:e4:64:e2:59:a5:48:1e:eb:23:8d:f3:2a:
24:00:c3:24:6d:b2:7b:40:9f:fa:9c:8b:12:6d:95:
75:65:e8:f8:b4:3c:0a:5e:5a:ae:32:ee:cd:27:a8:
51:56:4e:c9:5f:dc:ae:0f:82:e4:5d:8b:a6:53:20:
1c:51:3a:10:60:46:8e:6a:41:57:17:4c:f2:87:4b:
2f:e4:bc:9b:55:4a:b5:26:37:9f:f0:26:41:f5:48:
e9:0b:31:2e:31:5e:2b:41:4a:46:ab:af:15:1a:5c:
df:52:76:88:38:0b:b0:da:94:d5:a3:84:bd:ea:c3:
9a:f0:2e:67:3d:ae:ea:eb:43:4c:0c:7a:1a:08:d4:
92:25:4c:db:ac:94:62:6e:f9:b3:77:49:cb:20:cc:
bf:87:7c:3e:84:be:30:5b:13:36:dd:30:a1:a2:03:
2e:22:01:4f:c3:be:db:2e:11:3f:fe:b6:38:a5:27:
ab:a8:fc:22:88:c6:87:da:01:6c:f5:18:fb:69:5c:
96:07:47:8d:a8:17:74:56:f3:d5:b1:1a:7c:cd:fc:
e4:b0:e4:9c:a4:92:d1:3f:26:10:61:92:33:6a:42:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:6E:80:18:59:BA:A2:8F:18:DC:8D:72:0D:AC:1E:0E:AD:47:95
X509v3 Authority Key Identifier:
keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:b4:e9:d6:2e:ad:91:95:a2:2b:ec:8b:d2:78:a8:6b:b0:
51:8c:c2:c7:97:c1:3d:4b:6e:e4:74:7b:63:04:ef:6c:98:72:
85:78:52:81:10:f8:14:2c:93:a3:bd:d7:01:49:07:55:fb:1d:
66:4a:53:42:54:0a:93:31:4f:74:61:e3:73:f7:bf:95:8e:b1:
af:59:21:32:df:e4:bc:37:ac:d2:1b:45:b8:1f:52:47:c0:00:
c7:09:32:47:9b:e4:61:fb:65:3b:ab:3c:53:5a:20:a1:eb:b9:
08:97:9f:bb:26:10:f4:30:4b:5c:68:b4:a5:23:b3:cf:b0:2b:
55:f3:da:0f:3a:d3:1c:dd:56:ea:08:de:74:b5:64:8f:60:1c:
2b:34:c3:24:a6:4c:ca:50:88:81:e2:64:e6:ad:80:5d:99:20:
33:c0:59:34:3d:b2:9b:78:11:9d:b4:30:ac:72:31:0b:7f:61:
4a:5c:d7:f3:fe:c2:7a:e7:25:8d:66:35:cc:ca:3f:6c:6a:d6:
69:3e:f3:5a:d4:c3:ce:73:31:de:b1:5a:ab:50:ae:8c:86:1b:
69:cb:1a:cc:e4:71:64:e1:c3:f0:70:60:e1:ab:24:fe:0a:26:
55:dc:0d:77:fa:51:43:1f:54:67:38:6d:94:84:8d:3f:a0:6d:
ff:50:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:56:18 2025 by rpki-client