Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: PLUw2uYxiC56xSuxOYm1NX0DeaXo2DoZ1RX1eOg9Pkw=
Subject key identifier: A7:E7:B4:9C:7D:64:67:BC:10:CC:88:E9:E5:5D:46:61:EC:3B:91:07
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 0194C4D11E5F3106D077F2CDBC806F950246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 0E6D
Signing time: Sun 02 Feb 2025 04:00:26 +0000
Manifest this update: Sun 02 Feb 2025 04:00:26 +0000
Manifest next update: Mon 03 Feb 2025 04:00:26 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: jgOo++hCBKa8xIFg1CNE1rfZ7fVEtThtCXYlRxkVauE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:1e:5f:31:06:d0:77:f2:cd:bc:80:6f:95:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Feb 2 04:00:26 2025 GMT
Not After : Feb 3 04:00:26 2025 GMT
Subject: CN=a7e7b49c7d6467bc10cc88e9e55d4661ec3b9107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:de:96:3d:d3:c1:c8:21:82:84:cf:d5:bd:
db:4e:ba:7e:65:32:ef:f3:ee:b8:cb:4c:7b:2d:32:
c9:0e:1a:81:8c:34:6a:d5:10:40:06:01:e0:11:2c:
ae:e3:c0:0f:d4:79:77:76:d4:b6:ef:b8:8f:e8:db:
fc:7d:c4:1c:9c:8f:ce:34:41:d0:cf:cb:b1:24:ff:
5f:7b:6e:1e:81:6f:76:1c:56:d8:64:95:d1:b0:07:
50:6a:76:11:f7:1d:35:b8:bd:b1:2f:cf:98:d1:a3:
f2:d7:f2:84:52:31:3c:11:fc:6f:6b:85:59:3c:cd:
f7:6d:24:b3:7e:b4:dd:66:4f:fd:95:cd:5b:e1:ab:
1f:5e:81:1c:51:f8:da:72:47:05:e1:3f:fa:52:b9:
1e:49:d3:af:50:2b:fb:72:f7:8d:9b:cb:eb:5c:e7:
59:9a:8d:7a:13:e9:cb:0a:e9:b2:ab:1d:84:04:c6:
c6:f0:69:43:c0:78:65:79:c2:b0:c9:3d:e8:65:53:
c1:45:03:74:6c:55:d4:fd:55:fe:3d:b6:41:e5:b9:
e3:6e:e2:70:f9:e6:09:95:f3:e4:2c:37:0b:d7:aa:
d6:86:ae:f7:62:f1:b6:d2:6e:3b:fa:f1:1e:e1:b1:
70:16:b6:7d:98:80:79:a0:f0:b3:52:a8:38:d8:fa:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E7:B4:9C:7D:64:67:BC:10:CC:88:E9:E5:5D:46:61:EC:3B:91:07
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:c9:03:42:64:16:b9:95:35:36:63:70:67:b0:c0:d6:b9:
04:a9:7f:52:80:84:6f:c6:4a:7a:10:a2:f9:0f:dd:5d:d9:ba:
6b:a7:9e:9f:b7:f6:32:f8:02:e8:21:b2:ad:da:ca:76:db:6a:
51:e6:36:64:74:58:d9:a3:fa:fa:d7:c0:79:a5:1a:c2:b3:1f:
ab:46:11:8d:23:62:f5:47:1d:02:81:3e:49:c8:e2:ba:b1:9a:
f8:93:06:94:4e:c5:f1:85:e8:e2:c8:e4:e7:e0:9e:38:90:63:
d0:fa:77:3f:ae:ea:1f:9d:53:47:55:ce:a2:fe:9d:8a:df:07:
de:41:8c:96:a3:62:48:26:5d:d9:d5:f7:36:3d:f7:1c:66:c3:
31:b1:ea:7f:cc:4c:63:81:77:be:69:b8:44:ff:4d:c1:11:f7:
29:c0:50:6b:c1:2b:65:3e:49:7e:d2:d7:05:49:df:1b:e6:0d:
30:3f:cd:6d:cf:ee:5b:a1:82:cf:0c:be:34:34:92:f7:4d:e0:
30:87:b1:a9:2f:0e:bc:4a:c8:43:57:2a:eb:f2:f8:50:04:79:
05:cb:a0:62:19:88:34:72:4d:c0:e4:8a:00:de:8f:26:0f:8e:
7a:0f:b5:5a:96:fb:da:27:19:5a:d5:a9:45:68:07:ab:d2:42:
b1:d4:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:26 2025 by rpki-client