Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: HkDaRdj1Dc3GZj0AITyx1uhABpSo59N0i9j3etAbEo8=
Subject key identifier: 5B:BD:41:3B:97:C9:5A:C3:4A:37:AB:72:C3:C2:46:0E:FC:CD:5D:51
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 0194C3F56538EFB3C7AAF5F5E8EDCCF057E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: C9
Signing time: Sun 02 Feb 2025 00:00:26 +0000
Manifest this update: Sun 02 Feb 2025 00:00:26 +0000
Manifest next update: Mon 03 Feb 2025 00:00:26 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: uqZkfv6gAElXn41OCHPJ/HGwdNVdT4FEoq1eJyPClVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:65:38:ef:b3:c7:aa:f5:f5:e8:ed:cc:f0:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Feb 2 00:00:26 2025 GMT
Not After : Feb 3 00:00:26 2025 GMT
Subject: CN=5bbd413b97c95ac34a37ab72c3c2460efccd5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:0e:73:c0:81:fe:70:7e:a0:41:3f:cf:69:
e1:10:3a:5e:71:7e:ee:0b:5d:b8:ff:24:b4:10:37:
6d:4c:ea:ce:6b:fb:89:d4:1d:7b:7c:2b:e0:5c:15:
3f:3d:59:a5:7a:b1:8d:0b:e1:57:63:e1:2f:a0:a3:
a9:36:66:21:36:95:14:5c:14:93:1b:79:c6:09:d9:
02:48:cd:09:28:a4:5a:c3:90:cc:44:20:bf:69:62:
8d:8d:0e:4f:4a:81:dc:4c:24:fb:f3:27:d4:4b:21:
fa:8a:9d:a4:22:ae:5c:12:87:db:cb:a3:4c:ec:44:
5d:9d:8f:45:bd:df:03:7a:9d:70:7d:02:15:17:c3:
f3:77:15:06:7a:27:eb:79:02:a5:b1:be:9e:6a:07:
c3:ff:d9:12:a5:08:25:5f:37:7a:5e:30:4d:87:0e:
2f:4f:51:c5:3f:2c:21:0a:5a:86:ed:f9:53:e4:1c:
ff:6c:d1:68:73:c7:eb:a0:06:66:af:44:ac:ce:fb:
50:37:54:a3:96:ab:43:4c:c1:05:a4:c9:c0:4b:44:
95:99:2c:10:ad:8b:de:ea:e1:6a:34:4f:ac:17:67:
af:66:1e:21:25:d7:cc:e7:57:cc:bc:70:95:6c:a3:
78:87:5b:f4:90:76:fe:12:65:65:ac:f4:9b:fd:4a:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:41:3B:97:C9:5A:C3:4A:37:AB:72:C3:C2:46:0E:FC:CD:5D:51
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:c0:7e:31:67:ef:5d:2d:0f:76:66:8b:d1:e6:f4:ff:b9:
35:f5:8e:af:ac:70:78:f7:30:3e:9f:1f:f2:43:d1:a5:9e:d9:
d4:6e:48:89:5c:6d:36:e2:04:c5:04:1a:b3:8e:e8:26:3c:b2:
29:0b:cf:aa:b4:19:1a:fa:ae:be:50:3b:51:7a:fd:8a:31:9d:
54:b9:74:2c:76:6d:b5:7d:d3:f2:04:99:11:d4:9c:3d:72:63:
ae:03:48:f4:07:36:0a:df:80:0f:ea:93:9c:d0:a5:ab:53:8d:
49:76:5b:69:df:09:92:fb:eb:5d:28:58:12:af:d5:c5:6a:fa:
4c:35:5b:14:4e:95:99:c3:0c:6a:17:d0:95:0a:7a:1b:50:0e:
9a:cf:46:4a:d1:50:66:47:e8:6f:e9:8f:85:02:01:3a:dc:2e:
01:7d:09:39:6e:1b:5e:9b:cf:fb:79:5c:84:52:5a:8f:02:e8:
4d:e2:4d:48:7f:0d:5e:9d:f6:8a:a8:65:c0:a7:81:5b:3e:d2:
99:f4:5c:98:4d:24:d6:9f:84:f2:9e:5f:ce:64:fd:ac:6e:3b:
9c:fa:cd:9a:c1:c0:c8:4e:1c:92:ed:62:cd:57:80:2d:f7:6c:
cb:05:22:52:b2:82:02:bc:e9:5a:e8:9f:51:22:4b:17:04:46:
2b:d7:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:28 2025 by rpki-client