Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
File: a_CO0PpuGTufOlC_cmtB0MMpspc.mft (raw, json)
Hash identifier: H+baGnfPP8m2HLSoisSqAb4JFg9NjPScCG3MJl7X/j0=
Subject key identifier: E4:0E:96:F2:41:BF:B0:FF:DC:68:42:0A:76:BF:70:9C:B1:75:35:AA
Authority key identifier: 6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
Certificate issuer: /CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Certificate serial: 0194C507E1D756A534F03DF17D5C0FDD5209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
Manifest number: 1E
Signing time: Sun 02 Feb 2025 05:00:15 +0000
Manifest this update: Sun 02 Feb 2025 05:00:15 +0000
Manifest next update: Mon 03 Feb 2025 05:00:15 +0000
Files and hashes: 1: a_CO0PpuGTufOlC_cmtB0MMpspc.crl (hash: lKYAEwEZp5hEYVbZSXj2B7JrQPOiifuW/aWTBu4lV/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:e1:d7:56:a5:34:f0:3d:f1:7d:5c:0f:dd:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297
Validity
Not Before: Feb 2 05:00:15 2025 GMT
Not After : Feb 3 05:00:15 2025 GMT
Subject: CN=e40e96f241bfb0ffdc68420a76bf709cb17535aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:6f:d5:14:4c:95:88:03:f6:d1:4b:7c:b0:
f3:7d:d3:4c:4b:db:6d:7e:ed:15:17:d1:ee:55:c3:
2e:59:84:a9:86:9b:7b:58:6d:56:11:b4:5f:b8:3f:
44:b4:72:20:ff:7d:80:5e:d1:2c:fc:67:d0:05:de:
51:eb:6e:73:10:4c:61:37:ad:b7:21:aa:c8:4d:17:
cd:62:34:33:32:78:c4:00:63:e4:d7:53:e6:68:c4:
9b:ae:76:69:30:38:71:ae:e9:e2:71:6a:73:89:2e:
08:64:9a:65:c1:5d:2a:cb:f5:c4:70:3b:06:c8:79:
eb:12:23:52:fd:f0:8f:ae:48:68:0a:29:62:11:ec:
59:1d:6e:e4:e8:08:4e:19:80:d7:60:8e:77:94:14:
a4:2d:8f:eb:ed:53:64:dd:50:ec:ef:f6:89:2a:c9:
2d:0f:a7:7a:51:19:99:02:e3:ba:6c:ed:88:ec:91:
91:f1:c2:f7:2d:f7:be:d9:bd:f9:71:37:dc:f5:e1:
e0:44:67:52:94:1b:70:29:b1:b6:70:0a:2c:02:2b:
91:60:e2:29:c0:db:9a:6f:a7:07:a5:3f:85:2d:7c:
b4:2a:f0:56:8f:bd:58:b4:f3:ac:3e:42:dd:bf:73:
21:19:b5:9b:fd:d9:7a:8f:2c:02:b2:29:21:6b:f0:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0E:96:F2:41:BF:B0:FF:DC:68:42:0A:76:BF:70:9C:B1:75:35:AA
X509v3 Authority Key Identifier:
keyid:6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:14:9b:3c:c8:ba:bd:c9:85:63:ae:89:1b:e3:50:57:4b:
f2:3f:54:30:59:be:75:5b:4e:55:ef:65:8f:2e:a1:1e:62:5e:
80:03:65:92:8a:28:be:b4:9f:99:ef:1a:b6:0a:04:e1:c3:77:
18:8f:94:d5:d4:54:e7:7e:e4:9d:be:58:4e:94:3f:ca:6f:02:
f9:ce:33:b5:58:9b:c4:51:18:46:5b:a1:46:82:29:cc:c3:2e:
eb:ad:08:4b:a2:f7:a1:8c:b5:2f:45:77:a4:a6:2a:e6:9c:1c:
0a:d8:cb:4e:c3:99:49:72:84:01:e7:93:98:81:ef:3b:47:0e:
f6:28:43:2a:53:64:3e:26:a1:ee:71:aa:59:30:44:7a:7d:82:
db:dd:30:e0:e1:6b:b5:ea:f8:1d:16:fd:80:74:55:1b:fd:95:
0b:ca:49:f3:0f:c1:1e:15:78:58:81:22:6a:ad:09:76:6f:4c:
e9:03:e2:8d:37:8e:40:3f:09:a7:a5:1e:ef:2b:7d:46:cd:90:
f8:60:9c:5f:58:ef:f3:77:aa:50:55:b6:8b:d9:7b:20:8c:01:
3f:05:3e:38:6e:cd:e9:ff:c4:f6:18:74:d7:3a:0a:f4:47:61:
cc:10:27:03:24:07:7f:3f:09:1f:2b:a8:d6:a7:07:d6:33:4e:
83:02:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:44 2025 by rpki-client