Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier: 4W35d0EmMrxS/Z0V/QPQOsodcvIW5I1oG3h0FjixI3k=
Subject key identifier: DF:9A:02:FF:1C:C9:52:EC:48:62:2B:94:0B:90:71:5B:52:FD:DC:30
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer: /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial: 0194C42C642256040A922A5A267F07C3A3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number: 08B8
Signing time: Sun 02 Feb 2025 01:00:31 +0000
Manifest this update: Sun 02 Feb 2025 01:00:31 +0000
Manifest next update: Mon 03 Feb 2025 01:00:31 +0000
Files and hashes: 1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: OxYcTlR3FgUBG5b7mQisLbdVwOZnLdC7BQ8zhVyNVb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:64:22:56:04:0a:92:2a:5a:26:7f:07:c3:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
Validity
Not Before: Feb 2 01:00:31 2025 GMT
Not After : Feb 3 01:00:31 2025 GMT
Subject: CN=df9a02ff1cc952ec48622b940b90715b52fddc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:b6:01:5e:1b:92:38:38:23:b6:64:de:41:
de:17:2a:fc:d5:5d:3d:4d:2b:dc:85:63:00:92:a7:
9c:f9:92:99:c8:8f:2c:2c:96:12:43:17:d5:98:98:
10:39:16:96:8b:d5:32:1e:60:51:d0:3f:d6:fa:fe:
12:d8:08:85:e5:18:60:20:df:b9:b8:b3:4a:56:bd:
7b:a9:6b:f7:31:8f:14:9a:84:e1:12:17:4f:79:3d:
f0:e7:7a:6e:ca:00:66:fc:49:15:93:97:9b:e3:19:
7c:88:87:a4:2a:b5:54:24:62:2e:1a:77:9d:7e:bd:
8a:01:ca:ff:6f:ee:f5:74:79:e2:d1:77:56:41:29:
cc:40:c1:e9:2f:e8:f7:22:c9:73:45:ab:25:e0:66:
6b:76:e9:bf:a3:a9:21:43:1b:fe:0b:9a:12:35:86:
67:ff:40:a3:b4:af:47:e7:90:be:43:af:3d:2f:5a:
18:b0:46:15:f0:22:db:93:01:ca:82:6e:7b:df:8e:
01:1f:03:2d:5d:23:23:8f:1c:6b:55:91:d1:45:cd:
0a:ff:62:0c:fc:ef:93:6b:e8:3e:08:6c:48:ca:7a:
2a:78:fd:5a:05:5a:b6:05:19:4f:a3:1a:d5:cc:76:
5c:d8:2f:6d:7a:e4:ec:7e:9a:45:ea:7e:dc:c8:f2:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:02:FF:1C:C9:52:EC:48:62:2B:94:0B:90:71:5B:52:FD:DC:30
X509v3 Authority Key Identifier:
keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:69:b0:12:42:90:ff:d6:00:a1:16:f1:6f:da:09:d8:92:
3e:5a:15:84:fc:03:4f:24:40:2c:ef:55:63:e6:2c:0e:ba:f6:
43:de:47:3d:5c:a3:65:b6:d5:d8:c7:42:5d:a7:20:72:7b:bc:
bd:5d:89:81:37:d3:3b:85:a2:ac:da:bc:c4:3f:b6:eb:0d:ed:
fc:e6:6e:88:3c:c7:74:58:83:0d:d8:07:70:f0:03:f6:fd:c2:
f1:51:37:9b:f0:66:c4:ac:24:e2:eb:33:8d:51:aa:78:69:39:
cb:24:1d:de:cb:26:cc:9e:00:7c:65:90:86:b0:28:a3:3d:ba:
b8:2e:86:58:ac:f0:03:f2:58:b3:d7:14:9d:5a:97:cb:96:4b:
f0:9b:43:85:47:4c:fb:c3:a9:e7:22:e8:5e:97:c2:78:80:f2:
43:fa:77:2e:1d:66:1a:d1:48:af:52:93:b5:5c:d8:33:1a:02:
06:56:37:e6:37:95:8a:63:7f:61:e5:5c:d8:3d:38:c5:cd:73:
6c:a1:98:a5:2b:c9:9a:79:8e:ad:1d:de:58:8e:ba:ee:21:b6:
9e:e6:47:4e:80:fe:77:06:84:0b:a8:3c:bf:ba:2e:c9:7b:e0:
10:20:df:08:01:77:72:59:a4:a9:3a:60:9d:61:bd:65:87:d0:
d8:ec:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:21 2025 by rpki-client