Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: n3SaxD4vVhlqnziZHRCy9qTAy51clNq8c/srhHkH7ks=
Subject key identifier: F4:A9:F6:61:3F:DA:F0:A3:28:2B:9E:D4:E7:25:C3:AB:AF:BB:67:43
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 019512109F75474DA85F7C3CD2916A012933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 1329
Signing time: Mon 17 Feb 2025 04:00:34 +0000
Manifest this update: Mon 17 Feb 2025 04:00:34 +0000
Manifest next update: Tue 18 Feb 2025 04:00:34 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: E9x6d27dXGXB7mAgLuxbtDvilU+QjWX16DxWfKifZso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:9f:75:47:4d:a8:5f:7c:3c:d2:91:6a:01:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Feb 17 04:00:34 2025 GMT
Not After : Feb 18 04:00:34 2025 GMT
Subject: CN=f4a9f6613fdaf0a3282b9ed4e725c3abafbb6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:05:47:61:f1:b4:70:bc:ee:30:89:b0:dc:
46:a0:52:56:3d:8b:b6:7f:4f:38:52:66:e9:50:07:
49:79:6f:8c:58:94:e5:8a:e2:8e:6f:e7:31:aa:fe:
b9:ba:bf:19:8e:3a:d9:83:2f:63:3d:bf:85:ed:c2:
eb:9c:f8:f2:e1:db:10:42:c5:ad:91:cd:b6:52:7f:
f7:71:95:a2:22:51:cc:f5:de:87:14:da:da:cd:0b:
33:8f:2a:45:e8:9b:f1:7d:e2:55:1d:5c:64:08:bc:
e4:b9:0b:d5:51:b5:b8:1b:b8:7d:10:5a:56:84:9f:
19:95:84:bc:9c:da:fa:20:b8:f4:01:98:8b:fb:f8:
4d:e5:25:cc:bf:80:1d:df:14:bc:a9:1b:1b:e4:6d:
b2:9b:42:6b:6f:93:c7:5d:5a:c2:57:37:37:3e:b8:
a0:fc:94:51:3b:1f:17:37:6d:83:d6:80:5d:01:c0:
3e:ed:2d:8c:d0:8a:9e:6e:fb:8d:d1:91:2c:92:bf:
1a:59:53:07:63:79:4e:e6:97:e9:02:7e:77:cc:a6:
d8:b9:ac:2c:a8:9f:7e:21:96:b0:da:3a:b2:1f:c9:
f3:e2:74:fa:6d:34:ba:d1:a1:10:38:b7:25:66:b1:
20:37:0a:64:cd:8f:ac:5f:50:ec:42:d3:51:7e:55:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:F6:61:3F:DA:F0:A3:28:2B:9E:D4:E7:25:C3:AB:AF:BB:67:43
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:41:53:b6:bc:b1:62:ae:83:c4:3f:03:f6:98:a5:23:59:
68:be:11:96:e7:d2:6f:22:d1:8b:c2:cd:c7:62:91:8b:3f:7b:
51:70:51:a7:a9:e6:76:c3:18:da:43:fa:cb:e4:96:71:9a:84:
ac:4b:d2:57:bf:04:72:47:ef:53:b9:8f:7d:ee:85:71:8d:9c:
cf:a6:c3:7a:a3:6e:c8:aa:e3:f3:66:81:b1:e9:39:dd:bc:cc:
2a:ec:7e:ed:19:83:0e:3d:98:5d:95:e4:7e:cc:75:ec:47:84:
a6:5a:b7:ab:57:74:db:77:0d:e5:3f:05:47:a4:62:4e:83:80:
b3:76:10:a2:a7:16:a1:b0:43:5c:1d:29:da:b7:f8:3b:58:13:
de:40:31:0a:49:9c:b8:ad:bc:08:03:c8:6d:73:2c:03:7a:5f:
95:3d:4c:60:dc:d0:24:03:a4:cc:28:31:27:10:97:44:95:5b:
ba:40:e6:04:dd:e7:d7:4d:8b:31:2f:38:bc:18:86:97:aa:6c:
d3:b7:ee:c4:56:40:bc:c0:13:37:dc:a4:fb:b7:ad:39:3d:46:
c8:c3:25:b6:3a:e5:0b:dd:f3:db:fb:da:0c:c9:cf:f7:5d:49:
eb:8d:88:21:31:eb:75:c7:a2:29:78:ea:3e:45:6c:86:69:cc:
4a:60:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:02 2025 by rpki-client