Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
File: tgLHVGpnwMWYp0_yv1w5IyU079U.mft (raw, json)
Hash identifier: ClbOg1e/dNERlh1KA3llewIpNZTUyj8X4cyFe8zVzpc=
Subject key identifier: 0E:E7:57:F1:A5:E7:3B:BE:BD:73:E1:02:6B:E8:9D:4F:B7:D9:0B:F2
Authority key identifier: B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
Certificate issuer: /CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Certificate serial: 0194C3F5C011EE1550389496EACCA1F4ED94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
Manifest number: 12DA
Signing time: Sun 02 Feb 2025 00:00:50 +0000
Manifest this update: Sun 02 Feb 2025 00:00:50 +0000
Manifest next update: Mon 03 Feb 2025 00:00:50 +0000
Files and hashes: 1: tgLHVGpnwMWYp0_yv1w5IyU079U.crl (hash: DJugYwUTiENDlGl3n4qfNUGK7hrX3pTNva4PpjOdnfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:c0:11:ee:15:50:38:94:96:ea:cc:a1:f4:ed:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Validity
Not Before: Feb 2 00:00:50 2025 GMT
Not After : Feb 3 00:00:50 2025 GMT
Subject: CN=0ee757f1a5e73bbebd73e1026be89d4fb7d90bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:be:f6:23:d1:d7:e8:49:a9:9a:a7:a2:3a:
9c:d6:79:fa:07:bb:30:6e:f2:37:ba:94:6a:de:61:
26:94:17:96:ce:7f:d1:ee:7e:d0:71:51:49:8b:1a:
72:55:80:3f:2e:45:06:43:e0:51:29:fc:09:64:0b:
55:fa:78:56:f3:4d:74:fe:dd:e5:40:9e:ff:7f:4c:
50:88:22:b5:a3:35:90:50:74:5e:e1:5d:c8:f7:71:
90:cb:73:2b:d2:ea:38:95:fc:78:03:f4:af:11:30:
ce:34:59:a9:1b:45:37:0c:e7:9f:e7:34:e3:34:47:
25:e0:15:56:9e:35:42:d7:7f:6e:a9:02:cb:e7:c8:
e7:43:a5:dc:ae:0e:34:7c:82:a1:4f:f4:df:b1:ed:
9c:33:69:ff:9f:37:f1:2a:5f:46:d1:57:8f:c1:26:
79:dc:ef:29:6e:69:64:82:7a:37:8c:4e:d7:e1:53:
91:f5:46:7d:9f:2a:57:b8:42:fd:32:62:2b:51:45:
83:22:57:b2:d6:1f:be:5a:7a:08:9f:3a:a4:b6:3f:
31:e9:ee:e4:ce:16:1b:f9:1b:8f:ca:1b:14:0b:7f:
e0:42:6a:d1:e0:c9:98:cb:c8:0d:b4:4b:eb:36:48:
79:65:2a:2c:ce:fd:ef:db:5a:b8:8a:9d:e3:03:13:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:57:F1:A5:E7:3B:BE:BD:73:E1:02:6B:E8:9D:4F:B7:D9:0B:F2
X509v3 Authority Key Identifier:
keyid:B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:4a:2b:71:6a:ac:70:be:a0:00:5f:84:3f:82:e3:97:2d:
7b:50:e3:0d:a0:b2:f4:6c:1f:8a:ec:77:98:1e:73:4c:62:3b:
b4:c4:c6:4a:ed:69:13:4e:07:5d:c8:98:e9:d0:45:71:d2:64:
6e:0b:41:fb:0e:35:f2:b1:df:6a:91:85:1d:83:5a:0d:9e:48:
64:ab:c0:ae:c2:03:1a:60:62:9c:2f:fb:e1:88:b4:15:d6:30:
19:46:cd:c0:22:d8:87:d3:1e:f8:7a:ce:5d:81:fa:20:70:b7:
6c:83:89:d2:28:83:89:aa:b1:2c:d6:b2:bf:cf:c1:d4:7e:84:
1e:d7:26:52:bb:d3:38:e7:df:ab:83:64:34:a0:53:6a:c9:4b:
1b:23:b7:e3:9b:f6:03:0b:7d:8e:eb:8e:d2:13:c1:d0:7e:c5:
81:5c:a7:bf:ba:94:d0:88:8a:1d:b6:ed:50:cf:10:41:38:e2:
8a:3a:f8:3e:27:85:7a:9c:3d:39:46:c4:cb:b6:df:a0:b4:72:
a7:78:d8:2b:1d:cb:ee:7a:ae:94:b6:3f:5e:ef:b1:d7:db:6c:
fa:57:06:b2:3a:80:93:12:91:c2:d7:66:19:93:f0:95:f4:86:
8e:3d:d7:80:ad:f8:6c:74:30:3c:8c:cc:52:1e:1c:cd:f6:36:
5c:6f:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:00 2025 by rpki-client