Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: o9OVaLQs7AVa42qWP65zseb+ZT9cKuAzwPBj73p8MX8=
Subject key identifier: 73:FB:21:E0:10:DE:F4:D0:1C:2D:A4:57:16:42:8C:9D:7B:5D:F6:3D
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 0194C46342D97F357DC64BDF03EDE521EAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 142B
Signing time: Sun 02 Feb 2025 02:00:26 +0000
Manifest this update: Sun 02 Feb 2025 02:00:26 +0000
Manifest next update: Mon 03 Feb 2025 02:00:26 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: IZHR0/QLxB4uqlwBIhWbX0H8AQAhsXcZKZboThFmBkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:42:d9:7f:35:7d:c6:4b:df:03:ed:e5:21:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Feb 2 02:00:26 2025 GMT
Not After : Feb 3 02:00:26 2025 GMT
Subject: CN=73fb21e010def4d01c2da45716428c9d7b5df63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:ed:c4:87:4e:c3:c5:6f:8a:e1:f5:10:2b:
b4:c5:fe:b9:a6:a4:ad:29:2c:5c:e5:a2:45:2f:1c:
e4:d4:bb:25:93:19:82:99:b7:98:d3:2c:36:34:c6:
14:21:f9:e5:43:51:89:d4:14:cb:40:35:63:7f:34:
09:4e:9f:37:b5:81:fa:9e:a2:03:90:0a:a5:8a:13:
3a:3b:45:13:ad:f8:fc:c1:8a:c1:bf:92:ce:78:f5:
7f:ef:3e:04:19:af:44:8a:87:9e:2f:39:5c:41:21:
ca:02:bc:97:64:71:7f:a2:6c:29:a1:98:0e:c7:59:
0f:31:23:d1:07:15:9e:24:3c:86:cc:c0:e7:4c:23:
e2:5d:75:94:40:e1:5a:d4:bf:a3:b6:84:4a:d6:17:
22:dc:07:ea:7e:b9:16:f9:64:04:12:e3:13:9c:83:
b8:5e:f0:9a:5e:bc:b7:3c:af:1b:ff:bb:3e:7e:23:
8a:a8:1e:e2:3b:0d:87:2a:94:1e:81:fd:08:74:0f:
30:9c:9e:d8:f7:df:a2:ee:de:f0:d2:3b:96:e5:fd:
0e:cb:ac:bd:7f:ab:33:26:08:ac:99:b5:da:e5:d3:
8f:7e:a4:f8:c1:ae:d4:1a:ad:6d:7d:c9:79:30:75:
cf:a2:38:f7:2e:98:dc:39:8f:d0:d2:4d:3a:5a:a4:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:21:E0:10:DE:F4:D0:1C:2D:A4:57:16:42:8C:9D:7B:5D:F6:3D
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:74:a5:09:f7:b8:2d:0a:32:75:13:90:b0:c1:5e:22:0e:
8d:b2:77:25:56:94:e6:d1:29:99:d4:ec:4f:dc:b9:e7:81:f9:
84:58:d2:51:35:25:9b:e1:c9:67:24:b7:10:f6:38:58:dd:95:
fd:bd:16:53:1a:b0:70:60:b4:8e:20:49:71:09:68:6e:36:24:
b8:d6:9e:f5:95:a9:a2:e6:ec:11:d2:31:69:89:01:3d:e8:26:
90:38:f4:a8:66:ad:65:0a:b5:cb:ea:3a:b1:8a:d5:4a:43:9f:
9d:d7:d4:54:a9:bd:5e:33:ac:83:41:28:ee:3a:88:27:37:f0:
ba:a3:cc:49:17:08:84:d6:6e:4b:3d:73:2e:04:73:2b:04:b0:
ad:4a:10:8d:2c:d6:fd:c1:98:bb:90:36:02:67:78:ce:d5:1b:
bb:ce:3c:98:1e:d6:db:12:ca:98:27:a4:b3:9f:26:9d:61:ae:
51:80:b7:f7:2f:61:ad:d4:14:80:37:48:df:61:c3:71:66:fa:
88:12:16:78:a5:0e:87:18:70:66:ba:93:96:1e:18:a8:36:b2:
eb:97:32:4b:93:98:0f:75:72:02:12:e8:df:76:86:5b:46:b1:
f0:9d:10:8d:af:42:3f:ca:e2:f0:95:92:e8:9c:71:90:58:82:
b7:6b:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:41 2025 by rpki-client