Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: R++HGAOSh26onmFB3EBO9bRRcqjxiQWmbDWs4Hsyyg0=
Subject key identifier: 8F:96:DA:8D:9C:16:99:9F:16:9B:18:D0:8F:E9:EF:EB:3E:40:08:91
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0195790FD08A20497B71861A1449C9339F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 047B
Signing time: Sun 09 Mar 2025 04:00:34 +0000
Manifest this update: Sun 09 Mar 2025 04:00:34 +0000
Manifest next update: Mon 10 Mar 2025 04:00:34 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: XmxGtAdfktTkAaSR/D4C88UsH8vBKzo1jmHkExjLAls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:d0:8a:20:49:7b:71:86:1a:14:49:c9:33:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Mar 9 04:00:34 2025 GMT
Not After : Mar 10 04:00:34 2025 GMT
Subject: CN=8f96da8d9c16999f169b18d08fe9efeb3e400891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:47:14:1d:8c:61:69:db:b2:09:ed:cd:b9:
f6:73:e6:c8:50:01:5d:c2:9f:15:8d:57:de:4d:88:
a3:71:5f:41:5c:61:76:2b:56:e5:14:61:fb:e4:0f:
12:0d:c2:77:33:a5:37:55:6f:15:b4:7b:04:30:1b:
65:47:e5:52:e1:bd:11:ea:ae:11:1e:b2:5c:a0:e9:
87:e9:44:93:54:12:2b:36:e9:10:17:46:36:ee:80:
42:39:db:8e:53:34:1a:6b:ed:ea:17:8f:b7:37:8a:
45:de:01:98:0b:21:44:d2:e1:93:02:2c:8e:9a:a8:
39:8c:39:5d:d9:4b:13:bb:b5:8e:30:25:cb:2b:2d:
44:81:7f:e6:2d:d0:7b:44:d0:0d:43:d0:0e:22:a9:
3f:bb:e1:d8:f2:da:bd:50:1f:d0:25:39:39:d6:ed:
a6:b0:f4:dc:a0:a7:96:76:7c:53:b6:61:76:8b:8e:
c1:af:ac:93:10:3e:50:67:72:11:62:27:57:06:07:
cb:92:8e:1a:bf:d3:2a:ad:bb:b9:d0:5a:26:dd:94:
49:27:3a:2a:b9:c2:ac:75:44:ae:0f:0b:d9:cc:d9:
b8:db:bd:63:04:d8:60:a5:0e:67:9a:a9:6d:37:5e:
71:5e:b1:9d:3d:a6:34:8b:c8:73:e8:ef:83:2f:c2:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:96:DA:8D:9C:16:99:9F:16:9B:18:D0:8F:E9:EF:EB:3E:40:08:91
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:85:df:a0:cb:1d:6f:a8:86:8b:fb:20:fc:f4:c2:e3:26:
9b:df:ad:21:51:e6:90:b3:76:5d:e0:f8:c4:23:9b:b8:72:15:
2e:93:73:50:0d:8e:99:ce:6c:c0:b0:90:90:0f:c0:30:26:a9:
7e:a9:00:e7:11:4e:02:e2:0c:86:62:4c:42:c0:12:fb:06:6f:
1d:8c:ee:ef:93:57:38:f5:fa:6a:1e:cd:55:97:59:9b:e6:1b:
87:da:7e:b0:10:8d:0a:f7:fd:ed:2d:b3:32:24:e9:41:0e:ad:
b4:d5:0d:f3:bd:b3:1e:27:99:4e:52:dc:b3:a1:83:4a:81:16:
83:ae:b1:cf:a7:d1:47:af:41:7e:65:b4:57:10:bc:c2:40:78:
d2:94:12:37:56:49:0a:9c:a6:22:09:bc:3f:97:f6:c1:12:46:
30:78:0d:72:ca:3b:c8:31:d0:d2:95:31:e6:fa:80:16:e5:14:
54:a4:5f:bc:9f:e8:27:82:c0:25:e6:19:f9:34:8b:4d:df:c9:
c4:17:05:69:fb:b8:d6:a3:e6:ea:73:38:3f:af:1c:04:28:d7:
af:30:69:95:85:60:ea:c3:c8:c9:18:3d:1a:d3:5a:9f:78:5a:
25:08:cc:7d:35:e8:01:d7:0e:74:08:98:fa:4b:58:98:ef:81:
ec:d1:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:18:09 2025 by rpki-client