Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: OcpuQu/IWQyKRKN2DzvDgFbK1m/FwnCzWGM9hsUinP0=
Subject key identifier: FE:CA:67:26:84:57:9C:EC:F7:26:7B:85:55:2A:A7:26:4E:38:24:05
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0195113552A6F2E9D419D06B5F5E61960712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 0428
Signing time: Mon 17 Feb 2025 00:01:02 +0000
Manifest this update: Mon 17 Feb 2025 00:01:02 +0000
Manifest next update: Tue 18 Feb 2025 00:01:02 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: pA5spnU8Ul3onqEN4RQJxui2C88Cl4TZ0Sq45HVQxcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:52:a6:f2:e9:d4:19:d0:6b:5f:5e:61:96:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Feb 17 00:01:02 2025 GMT
Not After : Feb 18 00:01:02 2025 GMT
Subject: CN=feca672684579cecf7267b85552aa7264e382405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:62:c6:0b:9b:cc:a4:9c:af:32:55:46:a5:
7d:29:4f:13:2c:7c:d7:be:16:9f:f4:7a:6c:b3:e1:
e1:25:4e:df:63:cc:49:46:aa:0f:2c:66:68:47:5e:
b8:30:52:85:ae:d2:eb:e6:d4:2e:bc:32:28:70:1a:
01:5a:81:40:35:3c:a5:4b:72:6e:e4:d6:b9:d9:57:
9c:fd:a5:c2:1d:c9:34:74:3d:c2:95:2e:d1:73:c6:
2f:40:cc:62:51:f9:ad:45:17:3f:8a:d9:3e:b3:5d:
35:d6:07:23:61:95:de:f2:2c:73:42:9d:39:25:ac:
dd:7c:a6:96:af:fd:b3:2c:e4:c0:d0:4d:ee:f3:9f:
fc:19:35:95:c9:a4:1b:e6:68:f5:46:aa:40:74:93:
e0:94:de:4c:e0:20:67:bf:05:2b:3e:5d:28:d1:fb:
74:94:07:c1:62:08:60:9e:8e:ca:61:33:25:92:a7:
fe:0b:58:d0:f6:89:8c:58:61:57:cd:a2:2e:a8:39:
6a:2e:b0:29:1d:17:5c:7c:6f:45:83:df:a5:bb:fe:
e2:25:78:82:7d:ff:a1:64:0a:17:fb:3d:da:0b:9e:
13:0c:ef:89:1f:98:dd:e1:ff:3c:26:bf:07:55:04:
17:8a:30:05:af:db:ef:4c:cc:88:ef:0b:de:e3:fc:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:67:26:84:57:9C:EC:F7:26:7B:85:55:2A:A7:26:4E:38:24:05
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:99:38:36:3d:4d:4f:b8:82:1c:1c:4a:ce:1f:8b:60:0f:
23:4d:09:9f:c9:93:1e:f4:fa:67:b8:df:6d:31:36:8e:93:4b:
0c:29:b0:40:b2:45:be:1e:51:c3:d8:4e:a5:2d:fd:41:79:04:
28:7d:dd:e5:e8:6c:84:07:07:03:4b:1b:f9:a0:74:8b:92:54:
16:76:4c:16:7b:bf:e5:20:dc:73:62:79:96:32:b9:c3:70:43:
0a:d1:bc:b3:05:5d:e8:50:64:60:6e:a6:e4:10:5e:db:37:03:
9a:58:db:5d:7d:4a:eb:27:68:5f:98:a8:da:5b:a9:0f:a2:23:
1c:ec:07:ae:1d:78:f7:18:ef:ad:d3:67:04:4b:95:20:54:cb:
4f:c7:7d:41:7c:76:84:d6:ad:98:6c:1f:88:89:72:9e:0a:b0:
ce:63:99:37:70:cb:18:a4:f7:4b:95:ca:ce:98:bd:ad:3b:12:
31:bd:35:01:9f:c6:de:ad:24:e1:97:e0:86:f5:82:a4:11:23:
17:79:92:c8:11:b3:ac:16:05:d0:6f:77:62:0e:2e:ee:c6:c4:
23:22:68:a8:2a:25:86:88:b4:0b:e6:8a:54:d9:56:78:1f:8a:
92:20:0f:35:12:2e:bc:b4:a2:a4:2a:62:a4:70:74:4d:67:44:
3b:5b:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:47 2025 by rpki-client