Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: VtEyJzIWA58Yr/0yAq7Ty5Z4F1FQcGlMHkLLGfrR3ik=
Subject key identifier: 69:BB:44:5B:E2:7A:20:05:9A:AE:64:23:94:36:43:77:32:0D:91:66
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 0194C3F612CDFC34B47630E66C7601696502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 0BD9
Signing time: Sun 02 Feb 2025 00:01:11 +0000
Manifest this update: Sun 02 Feb 2025 00:01:11 +0000
Manifest next update: Mon 03 Feb 2025 00:01:11 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: OMEkyQl+BYXUJWCJHkY7qNfclVYYn06j0gYZGd8MKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:12:cd:fc:34:b4:76:30:e6:6c:76:01:69:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Feb 2 00:01:11 2025 GMT
Not After : Feb 3 00:01:11 2025 GMT
Subject: CN=69bb445be27a20059aae642394364377320d9166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:d5:6d:35:e2:be:b2:94:ed:a3:59:b3:40:
6d:d2:f9:cf:5d:c4:aa:96:bc:63:08:1d:1a:3f:a9:
f3:0e:17:a9:f4:4f:73:e4:87:52:67:88:06:30:d7:
2b:57:70:64:f7:d8:d4:da:69:cf:dd:71:3d:93:b1:
89:06:cb:78:a0:7f:b1:03:ec:b2:7c:05:48:44:88:
bc:5f:32:69:af:ea:5f:74:f0:dd:af:6c:00:5e:e6:
45:8a:ba:e1:8c:98:05:12:4d:2b:95:07:92:d9:35:
32:a0:cd:35:16:6f:fc:02:c6:a2:bf:12:60:83:5f:
e5:c0:81:4b:f6:9f:8e:00:9e:ef:b3:13:00:f2:90:
d7:75:df:f5:e8:e4:6f:b3:d3:aa:33:64:0d:cc:9b:
0b:6b:4d:11:ed:89:6f:e8:f1:65:c8:57:aa:90:92:
57:db:85:dc:30:ec:25:1c:f2:8d:80:14:d3:57:e7:
73:b7:ce:f8:4e:bf:09:22:40:7e:2a:e5:ad:15:36:
6e:87:10:2c:34:af:52:e6:54:f2:02:da:a5:c3:0c:
b7:95:51:bd:1d:b0:3a:3d:83:39:6b:8e:f3:e6:bf:
2e:cc:ae:be:e3:05:1a:0d:40:c5:58:eb:2a:5c:83:
a8:bb:84:eb:fd:5f:53:eb:2d:e4:67:c2:5a:fa:70:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:44:5B:E2:7A:20:05:9A:AE:64:23:94:36:43:77:32:0D:91:66
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:03:80:68:58:51:1b:5e:73:1b:61:16:b9:1c:17:d3:48:
f8:11:b2:45:98:33:62:64:a9:4c:21:89:e5:6b:8d:05:90:e0:
d0:4c:ab:20:83:2b:b8:d6:3b:36:b6:25:52:69:bf:2f:13:e2:
40:1c:df:f2:85:77:a6:92:69:f3:4b:cb:15:e9:a9:d7:0c:f7:
43:81:8c:0f:99:36:96:fa:1a:c4:93:20:eb:67:5f:b7:9e:10:
37:b3:75:8f:4e:d0:91:77:ad:28:01:a4:6f:61:68:c8:19:da:
0c:a2:16:c0:81:32:cb:22:ea:c6:88:81:88:69:c2:0e:88:89:
73:42:22:ee:f8:6c:9f:ce:72:17:14:8e:51:f5:bf:3b:95:3c:
a2:fa:7e:42:89:37:ee:f9:7a:49:13:ee:67:88:64:4d:d5:18:
8c:22:10:ad:11:74:c6:a1:13:3c:56:b6:82:e3:6c:85:9d:bc:
61:45:c3:97:f5:87:06:1b:85:de:9e:bf:bc:87:7e:c6:01:23:
1e:7d:99:aa:ed:cb:7e:f2:ab:7f:2f:9c:01:89:81:d3:5c:1c:
22:45:82:9b:ad:5e:25:2e:f1:0c:b2:85:0c:cc:7c:b3:8a:cc:
df:f1:ec:6f:bf:d8:5f:58:fc:65:6f:67:22:e7:53:21:a1:d3:
8b:1b:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:41 2025 by rpki-client