Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: T6dlzl1gp/VZqe36mR61BLzd1hIGx761++dIdButHvg=
Subject key identifier: 11:A3:9B:BD:67:90:89:F6:47:2E:30:AF:6A:19:AA:56:24:89:80:1C
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019510C6E0EEAC3EBF7B13437E51E3303AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0862
Signing time: Sun 16 Feb 2025 22:00:23 +0000
Manifest this update: Sun 16 Feb 2025 22:00:23 +0000
Manifest next update: Mon 17 Feb 2025 22:00:23 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: D5Pk2WqyZwuslj01Qe/jBn+0CZdPMb/vaAL8jqOPeb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e0:ee:ac:3e:bf:7b:13:43:7e:51:e3:30:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Feb 16 22:00:23 2025 GMT
Not After : Feb 17 22:00:23 2025 GMT
Subject: CN=11a39bbd679089f6472e30af6a19aa562489801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:78:e7:d4:be:54:3d:67:ce:97:2f:15:99:
67:ce:f2:f5:21:4d:44:6b:98:95:a3:e9:88:53:a0:
32:11:16:66:e8:7f:9f:af:1d:09:81:5f:03:2d:2f:
3e:a2:11:f5:8d:92:e3:56:12:e5:d5:37:6d:e0:95:
15:11:09:0d:4a:0b:c9:f2:6c:fa:36:32:5c:1f:e8:
39:96:e4:8c:fa:43:87:0b:11:52:94:b2:31:a7:f1:
c8:c0:e5:44:4e:4b:08:70:bd:10:8c:43:52:f7:17:
1d:78:8a:92:8d:62:ed:c6:b5:5d:88:d8:84:b2:98:
7d:fb:71:ad:71:6a:d9:e6:e7:17:0c:ca:f1:d5:b0:
e4:10:0a:c5:bd:94:a2:2b:55:7f:73:20:d8:f8:71:
1a:71:af:05:32:f7:6d:ef:5c:67:b2:6c:58:9a:a7:
98:7e:1f:3a:0c:c1:66:02:52:98:b9:f1:c9:ef:9c:
91:77:8b:b9:22:eb:8a:ee:0f:7d:bf:1e:13:ef:fe:
50:05:a2:10:ca:07:4f:ef:9d:1e:10:32:60:cf:9a:
60:62:76:95:36:7b:23:34:d4:1e:13:43:87:35:01:
14:bf:5a:b2:f8:ff:28:a5:29:27:aa:58:cc:63:4d:
c9:6b:61:26:b0:98:8d:ce:a0:81:77:78:80:a8:0b:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:9B:BD:67:90:89:F6:47:2E:30:AF:6A:19:AA:56:24:89:80:1C
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:a0:0c:6c:b5:4e:ce:35:b7:65:3d:d3:14:01:f2:b5:a8:
60:e7:9f:92:d6:1d:06:df:1f:84:63:10:1d:34:6b:cf:36:c8:
3a:60:57:bf:2a:31:66:c7:f0:41:16:69:71:1d:d0:6a:b0:3e:
81:8f:40:3e:65:c9:48:5d:a2:cd:c5:da:1b:69:f2:3a:67:e4:
e0:3b:e8:70:e7:5d:19:c5:55:1a:c0:c0:7e:65:2f:74:ea:68:
be:46:7d:ed:69:5f:ae:49:5e:28:12:6a:05:ee:ad:0d:b6:22:
d9:4c:8a:9f:4f:e4:dd:c4:dd:37:7f:4c:67:a6:25:6f:1a:2d:
53:ab:fb:63:3d:eb:c8:1b:a6:d8:9e:f4:59:1d:fc:27:60:0a:
2b:4e:5f:6e:36:d3:cf:6d:c1:a4:5a:dd:fb:89:9c:bc:c2:b1:
0e:58:85:f9:78:c3:a6:a9:1d:a2:1b:e8:9d:f5:f7:7c:f4:ff:
1b:5e:67:4d:0e:3d:fe:f9:61:1a:58:d1:4b:a0:2b:eb:b7:94:
b9:3f:b4:2f:83:99:0e:45:f5:00:ba:ba:f6:65:b0:b8:c8:2f:
8c:95:f2:89:c2:45:64:6a:87:a4:c7:ca:05:77:97:8f:32:6a:
06:d6:60:1c:3b:96:c5:3d:da:ab:c5:22:50:5a:01:e6:88:1b:
55:82:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:13 2025 by rpki-client