Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File: sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier: PYeBVCYWIEs0q60+1VUpLzJDsNq5XYfXx74bsu23Rrs=
Subject key identifier: 4D:3C:9B:6E:84:20:D9:95:85:56:92:F1:F7:DB:0B:29:DC:19:2A:9F
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer: /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial: 0194C4D16B7C4AE78F7ACD5B3E339716234D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number: 88
Signing time: Sun 02 Feb 2025 04:00:46 +0000
Manifest this update: Sun 02 Feb 2025 04:00:46 +0000
Manifest next update: Mon 03 Feb 2025 04:00:46 +0000
Files and hashes: 1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: mTMtny7eBR0ZM2qYBfGZel7XZh/6VwZw7yrTwC+a2co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6b:7c:4a:e7:8f:7a:cd:5b:3e:33:97:16:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
Validity
Not Before: Feb 2 04:00:46 2025 GMT
Not After : Feb 3 04:00:46 2025 GMT
Subject: CN=4d3c9b6e8420d995855692f1f7db0b29dc192a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:4e:f5:ca:fb:1f:28:c8:9c:7d:25:c1:3c:
9b:cf:96:35:3e:bd:7d:1f:62:d2:42:41:0e:22:80:
ef:10:87:4c:1a:35:49:d8:dd:92:20:4b:de:8c:a8:
c5:64:ce:45:72:49:c4:35:0b:3d:0e:a5:44:ab:4f:
64:62:d2:79:60:a9:76:f8:ae:b6:3b:5a:89:39:06:
37:17:dd:af:b5:a3:5a:4f:92:6f:14:3c:8e:74:fe:
bc:13:10:ef:9a:c9:67:68:b3:3f:d7:95:6a:8d:5b:
aa:2d:c3:37:6e:0f:d9:99:38:d1:57:06:07:36:6b:
1c:68:1c:1d:35:f0:a4:f5:0f:09:b4:5d:14:ed:e7:
46:62:83:f3:5b:04:06:e8:d4:74:ee:17:93:7e:38:
8c:ff:dd:37:33:b4:94:b1:d8:c8:2d:92:06:e7:76:
5e:33:44:4e:78:6d:41:b1:f2:cf:fa:ea:8a:01:09:
f4:78:c3:78:9b:30:8a:79:3e:c5:a5:1d:5a:05:fe:
40:11:34:d2:e6:eb:2d:4b:a3:c4:7b:35:ae:75:5d:
8d:2f:ce:ca:cd:16:61:0f:cd:23:83:f7:0c:6b:8d:
fe:c4:b2:61:72:92:ed:ce:da:8c:4a:6c:3e:e2:c3:
17:42:a9:c0:d7:9c:71:ca:01:26:4c:d0:ab:a3:95:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:9B:6E:84:20:D9:95:85:56:92:F1:F7:DB:0B:29:DC:19:2A:9F
X509v3 Authority Key Identifier:
keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:59:69:8c:5b:2e:68:56:cd:69:90:5a:cd:bf:6b:f7:c5:
fa:10:af:14:77:c8:b5:93:14:76:fb:70:bc:b8:c1:be:ad:27:
2b:2e:92:da:28:2c:76:88:43:4e:23:f7:47:34:20:8d:7b:51:
43:49:a1:d0:db:de:dc:65:5f:bd:c1:4f:98:ab:fb:27:33:08:
fa:97:53:fd:b2:8d:ba:fe:c4:e5:88:f2:79:ae:62:7f:3b:6c:
5b:a6:c2:39:95:9f:5d:7b:f9:f7:a8:12:3c:b3:f7:de:10:65:
18:6e:9f:dd:83:71:19:66:9f:62:08:1b:b1:de:18:ff:45:68:
a6:96:15:da:e9:19:12:9f:33:20:f4:73:d1:14:00:d7:9c:c1:
08:0e:48:71:33:03:a3:08:fc:b0:c9:7b:d7:02:66:40:86:60:
bb:59:d4:4e:2c:8f:63:d2:2a:95:ec:ed:d5:9f:49:c9:02:93:
72:b8:9b:75:53:a5:05:39:91:df:6d:b1:92:43:18:3e:0d:0c:
98:1a:2a:e0:71:11:65:66:08:a0:5b:cf:eb:ec:02:af:ac:86:
82:b1:f2:bf:7c:cc:34:24:5a:26:9a:dd:37:a3:62:e8:db:f7:
45:43:0c:29:00:f5:dd:be:b0:8e:71:59:58:c2:25:ec:ab:cc:
30:0d:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:55 2025 by rpki-client