Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: ajgdaUv/atq9erGHfV0VjcFpbQqke7hKUw1AtpI3Gao=
Subject key identifier: 88:E4:9D:5E:18:C9:52:DC:03:D7:DC:50:00:83:51:60:44:97:E2:99
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 0194C49A5B8A328549296867EE0D277405DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 0D
Signing time: Sun 02 Feb 2025 03:00:37 +0000
Manifest this update: Sun 02 Feb 2025 03:00:37 +0000
Manifest next update: Mon 03 Feb 2025 03:00:37 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: 28u62AGBR38qzI8R4n/xV8fYiVheayLXaJxctcbtgwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:5b:8a:32:85:49:29:68:67:ee:0d:27:74:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Feb 2 03:00:37 2025 GMT
Not After : Feb 3 03:00:37 2025 GMT
Subject: CN=88e49d5e18c952dc03d7dc50008351604497e299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:8e:11:e7:09:92:6e:6d:7b:85:9c:a0:00:
6a:ca:e1:6e:c2:e9:9b:22:db:99:e5:bb:ad:fb:58:
53:9c:40:60:ce:84:71:bb:00:48:f8:aa:ef:c0:ab:
96:ad:2a:23:75:fe:48:d6:37:40:9a:83:3e:04:4d:
0a:a6:ce:af:68:77:91:f4:88:ca:3f:69:e6:6f:7f:
c5:94:31:79:50:4a:31:55:e0:ed:44:43:4b:80:ab:
9a:b5:84:1a:53:15:ba:b0:c2:dc:09:ad:c8:9f:da:
6d:2c:6e:5b:94:96:13:1f:5e:80:88:d9:c8:ad:aa:
de:c8:25:c7:a0:21:5d:54:cd:da:9c:aa:d2:bf:86:
d1:26:e2:21:b7:45:86:e7:94:c1:ed:d0:c9:fe:72:
a9:45:40:97:96:97:ab:e2:9b:79:e0:83:6c:3a:1e:
fa:f5:6e:0a:d8:8e:57:a9:ec:e4:b2:28:15:c6:6b:
f9:45:67:e5:58:84:51:db:3a:52:1f:be:ca:df:f5:
6b:ae:08:6a:d9:69:e1:77:0c:e5:ef:45:54:1c:a9:
27:d4:fe:64:96:6e:f6:c4:f4:b1:69:7f:e0:ab:50:
9d:8a:00:05:fe:c9:2b:70:94:cb:16:9a:bd:4f:da:
59:0e:f6:3f:16:cd:c1:c0:ea:89:ba:69:af:6a:f5:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:9D:5E:18:C9:52:DC:03:D7:DC:50:00:83:51:60:44:97:E2:99
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:a1:e1:55:a1:d8:82:21:c7:eb:fd:5e:66:59:94:af:30:
a9:03:d7:8e:97:3f:72:db:13:0c:65:14:7a:f4:b7:df:86:ab:
38:36:7d:ec:d2:cd:83:20:0e:2f:5e:7e:d0:8d:ea:6a:94:4f:
1f:17:2b:69:6c:70:5b:a2:38:a2:5d:df:7b:e2:3a:eb:c7:b3:
ec:bd:08:be:f9:5f:d7:93:b9:02:96:80:dc:3f:34:23:6a:37:
f2:90:d9:06:38:ce:c4:3e:3c:a5:10:ac:85:e7:14:25:f7:78:
df:53:1d:9c:44:9e:90:ab:d2:34:69:02:04:ee:6a:a5:6e:ba:
11:11:6c:82:0e:59:8f:7a:00:6d:80:46:16:38:8a:d8:e1:0f:
9f:42:be:0f:e3:29:ff:4a:9d:d9:42:f5:50:ea:63:c7:60:de:
cf:dc:e6:69:9d:c4:6e:4b:ce:79:25:c0:2b:86:9a:81:21:5f:
a2:85:ab:f1:cb:7a:3b:a7:70:2e:32:b6:f9:dd:71:25:4e:5c:
00:ab:ab:50:fc:c6:bf:87:72:65:25:06:6a:4e:b1:65:10:d5:
fe:b6:4a:2a:6d:da:c7:90:83:e4:b0:41:69:2c:2e:1b:d5:ff:
d0:1f:d8:a4:df:d0:e6:db:72:73:60:9c:8d:83:bf:84:89:d3:
cc:10:71:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:47 2025 by rpki-client