Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: S6LH6fmAdzmBQ852RVp00dvC5WT04yeLmHDwaOHdLYE=
Subject key identifier: 4B:D4:AA:72:A1:4D:0C:07:CD:A2:A7:63:28:B3:EA:AE:E2:EA:1D:85
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 0194C3F62670B260AD6B4ED9EAC8B4A1E47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0BF8
Signing time: Sun 02 Feb 2025 00:01:16 +0000
Manifest this update: Sun 02 Feb 2025 00:01:16 +0000
Manifest next update: Mon 03 Feb 2025 00:01:16 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: hO8sniXrBzcaPtMtcc6S0pCuAhkZjs4S3gsIeNXSQvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:26:70:b2:60:ad:6b:4e:d9:ea:c8:b4:a1:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Feb 2 00:01:16 2025 GMT
Not After : Feb 3 00:01:16 2025 GMT
Subject: CN=4bd4aa72a14d0c07cda2a76328b3eaaee2ea1d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:fc:59:d9:8f:d1:60:06:eb:9e:dd:ea:73:
43:8c:91:71:86:df:c8:b4:0d:14:a0:57:25:3d:09:
32:39:31:d6:46:6c:17:15:70:8f:f2:84:34:3f:f7:
50:c5:a7:b5:99:aa:42:f8:e6:2a:8a:d0:45:73:6a:
69:6a:c0:e0:7a:1e:32:59:5f:da:e6:c4:6b:b1:b1:
f9:1e:a0:dc:e8:b1:66:56:74:05:88:c1:e6:bc:0a:
ff:71:44:8e:30:33:cc:10:a1:56:28:4e:22:af:1a:
5f:24:24:13:47:5b:04:80:c4:f7:f3:53:b9:ef:1f:
24:ce:fd:75:88:db:66:f8:f4:fe:df:9f:63:43:62:
01:5c:d2:1c:d6:74:90:92:16:aa:81:92:c2:50:20:
a7:52:d9:ad:ce:b4:3c:2a:1d:e3:ac:95:b2:ca:61:
0c:62:07:7f:6c:bf:ee:f9:15:a1:40:66:8d:ba:bd:
e5:00:23:8a:bb:1a:47:d7:ac:ac:fe:82:34:fe:3b:
ce:fe:de:55:96:e5:55:fe:96:a0:d2:67:2a:c3:8a:
f8:47:7d:cf:1e:ab:ac:74:01:27:81:04:d8:28:e5:
a0:5c:46:52:eb:c9:9f:d6:e0:ec:f0:fc:21:18:0c:
a2:7e:3f:e2:ea:85:2e:37:66:fc:82:74:3a:8d:7e:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:AA:72:A1:4D:0C:07:CD:A2:A7:63:28:B3:EA:AE:E2:EA:1D:85
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ff:7c:e2:9a:e8:85:e6:f9:90:ba:2f:72:b3:82:47:10:ae:
fe:1a:24:09:29:b5:d6:d7:c6:5f:ad:bf:50:69:a6:f7:00:34:
5d:b7:83:41:50:d4:98:3a:1a:3b:bc:d8:7e:26:fd:e0:db:c7:
60:60:51:5b:8d:3d:60:e4:20:90:6b:a6:fc:63:5d:81:ff:59:
55:45:80:3a:10:66:46:5a:99:7a:1c:c9:9e:85:38:08:0f:25:
31:f4:e5:04:e7:c0:cd:4c:10:98:01:cb:7d:46:33:36:26:cd:
aa:6c:bd:46:3a:fb:18:17:f6:72:c9:5f:6f:02:ed:fa:e7:81:
ac:37:60:dd:7c:ca:27:e2:a2:53:8b:16:01:0f:6a:71:89:ee:
54:b6:c0:48:54:b1:b7:0e:46:6b:fd:bf:0c:d6:16:0e:6c:39:
33:99:a9:b0:38:26:95:17:95:f7:a9:b9:16:2a:8a:b8:f1:28:
5f:3e:23:61:b9:2c:a2:33:e1:a9:22:41:cd:8f:fd:01:40:98:
e9:6d:eb:ca:29:d6:38:e4:b1:02:d5:b0:7c:2e:0c:f7:36:f4:
14:85:ed:96:a6:54:e4:c0:e5:d4:72:d4:2e:64:66:dd:60:a6:
f7:02:3e:93:d1:ff:ec:86:7c:78:1b:17:a5:05:59:02:66:1b:
e1:d2:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:42 2025 by rpki-client