Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier: l6BxnenKZkqbEoOrtoJ13gjYj54Xqg7Jhz7LKJQsP44=
Subject key identifier: B6:C8:5C:23:50:63:15:7D:5B:88:8B:65:EF:72:27:05:8C:67:CA:1B
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 0194C4632ED1E0DA1A4E92AB32BAABFC5C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number: 0BC7
Signing time: Sun 02 Feb 2025 02:00:21 +0000
Manifest this update: Sun 02 Feb 2025 02:00:21 +0000
Manifest next update: Mon 03 Feb 2025 02:00:21 +0000
Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: /sFsREplW83SS2UvoCk0dGlafWURYVVeKCHXnENFDlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:2e:d1:e0:da:1a:4e:92:ab:32:ba:ab:fc:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Feb 2 02:00:21 2025 GMT
Not After : Feb 3 02:00:21 2025 GMT
Subject: CN=b6c85c235063157d5b888b65ef7227058c67ca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:50:c4:56:40:d1:fc:7a:ed:a4:66:fc:93:
a7:a9:35:51:10:07:1a:1d:94:a1:25:7f:22:de:73:
5d:36:3b:d3:4f:cd:c4:e0:18:a5:05:94:47:14:27:
49:ea:fa:5e:75:3b:fc:b2:99:b2:c8:d5:8d:bd:af:
97:c9:71:87:3a:d8:cf:e8:b2:7b:ae:12:de:b9:3c:
44:be:31:df:ac:a0:76:a2:79:1a:8b:30:d7:3b:26:
4b:7a:45:55:ad:38:b5:01:a2:30:30:ca:81:50:27:
1e:9b:49:12:7c:e4:84:26:d0:f6:73:e2:ec:24:cd:
11:52:5b:e3:93:94:47:ab:7d:22:3c:3e:90:02:18:
e0:4d:77:ba:d5:69:c3:7c:7f:ef:2c:2e:b1:19:b9:
8c:b5:af:a6:40:88:37:8e:62:7b:2e:2f:f9:57:46:
56:83:9d:04:31:91:f7:5d:ca:8c:d5:99:12:62:31:
6f:60:44:1d:1f:ac:90:82:2e:ad:a6:7d:6c:cb:7a:
d4:43:4b:12:fb:f5:7b:e2:28:fb:f9:17:82:db:10:
11:c5:f0:31:c9:8b:8a:d3:95:0f:35:f4:16:44:a4:
45:e9:14:d6:26:35:e0:19:75:3a:b0:2a:e6:45:a8:
ca:0e:79:2f:c8:b3:e2:c0:2f:34:80:ce:77:3c:f4:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:5C:23:50:63:15:7D:5B:88:8B:65:EF:72:27:05:8C:67:CA:1B
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:31:de:4a:f7:cf:9e:41:ff:9e:95:85:a9:ab:e8:25:5e:0b:
ae:b2:ef:58:d7:2a:a7:a0:12:29:54:8b:53:ed:30:ad:12:c2:
9c:0d:22:d9:bc:eb:ec:95:e6:b4:71:51:84:16:1d:fb:ea:6f:
e9:fe:ce:b3:95:11:40:b5:ab:3b:1b:60:e3:88:f0:bf:93:3f:
db:86:65:4c:49:f4:d9:c7:60:16:cf:61:68:f0:12:89:fe:70:
e4:76:e2:fa:cd:3f:5c:8d:4d:42:c7:4d:75:4c:c0:af:82:db:
fc:51:c0:30:42:05:a2:76:1d:3f:5d:46:1b:1c:66:26:3a:3d:
9e:fe:60:71:16:6a:8f:d6:d8:53:51:2e:7d:5a:c2:6e:ad:e9:
b6:6f:f3:6b:57:cc:b9:c0:36:ca:a0:64:52:9c:38:72:b7:66:
fe:db:e7:4b:3c:2f:52:27:11:7a:dd:72:a0:17:b7:a8:78:0c:
a6:58:65:13:b1:aa:cf:db:7b:d5:af:db:14:43:59:43:4b:bc:
16:cf:8c:4e:c1:f7:b1:cd:07:d9:b7:cb:64:a9:59:f8:b5:ed:
48:91:bf:81:13:09:5f:d1:47:cf:19:d9:85:73:4e:cd:10:7c:
0c:99:0f:a6:9b:6e:5d:43:1c:6e:d5:22:0b:84:04:9e:b0:2c:
3b:aa:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:05 2025 by rpki-client