Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
File: bfcVxYs6uhTfvf_-FTvea3p_L9g.mft (raw, json)
Hash identifier: cNAU+O6GTyVBdX89mcXI6UY0ulktGcUOyCaGTWDFzzE=
Subject key identifier: AB:EF:82:BE:46:E2:88:61:26:FD:03:12:AD:89:51:D1:7E:CB:CA:4F
Authority key identifier: 6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
Certificate issuer: /CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Certificate serial: 019512108984F42B66D0B1048CA363701114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
Manifest number: 0A05
Signing time: Mon 17 Feb 2025 04:00:28 +0000
Manifest this update: Mon 17 Feb 2025 04:00:28 +0000
Manifest next update: Tue 18 Feb 2025 04:00:28 +0000
Files and hashes: 1: bfcVxYs6uhTfvf_-FTvea3p_L9g.crl (hash: pdXmY2GYEHyrcWOm4qIKn0tpUtEcDI4qLKuqMbFunWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:89:84:f4:2b:66:d0:b1:04:8c:a3:63:70:11:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Validity
Not Before: Feb 17 04:00:28 2025 GMT
Not After : Feb 18 04:00:28 2025 GMT
Subject: CN=abef82be46e2886126fd0312ad8951d17ecbca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:9e:a6:42:80:4f:ce:54:a6:eb:6c:e7:67:
fd:06:15:82:0e:a4:fb:e4:01:6e:3c:7e:32:9a:58:
43:8b:34:94:9a:af:3d:41:f2:1e:e4:26:d9:02:4a:
7b:c9:3c:21:11:7c:e0:c8:48:9a:b4:a5:92:b3:73:
ee:c6:54:eb:88:9b:63:1e:b0:34:80:8b:05:b9:b8:
e9:fd:ba:f1:b9:ce:50:ee:2c:86:74:83:16:72:fd:
32:7d:44:bf:22:9a:ce:5d:62:0f:d5:60:01:5f:07:
78:d2:cb:93:02:ce:41:59:d4:05:d8:9f:be:63:0c:
fd:b5:32:51:ad:90:6f:16:b6:bd:2d:1a:b7:27:5d:
93:51:1a:67:38:4e:16:c2:e4:af:ae:d3:c2:0b:46:
cc:a0:1f:99:fb:1f:f9:87:5b:cf:d6:bb:c6:b6:59:
05:7b:d3:b2:23:e8:3e:95:a2:c8:bd:2c:a7:9a:20:
21:35:bb:ad:f4:32:85:4c:b3:04:b1:9b:b8:45:83:
b9:fe:22:03:f0:bb:4b:c9:1f:77:87:42:a2:1e:07:
cf:75:66:9c:4b:23:91:bf:7b:9e:aa:9d:45:93:4d:
d8:2a:0a:65:1d:c6:f0:34:c2:68:a4:4e:a1:64:1a:
36:48:6e:4b:85:e4:51:0e:3e:c0:d7:10:72:40:68:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:82:BE:46:E2:88:61:26:FD:03:12:AD:89:51:D1:7E:CB:CA:4F
X509v3 Authority Key Identifier:
keyid:6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c8:07:c3:c9:cd:e4:aa:e5:5a:79:23:83:4e:70:ec:33:59:
24:f0:88:0b:dc:6b:cb:a8:9b:bb:7f:4a:f4:81:ac:5d:10:31:
d5:8a:25:bc:34:18:62:ec:92:7c:aa:b6:82:80:8d:de:cf:77:
7f:d5:3f:d8:e3:92:d9:07:67:61:c5:33:fc:11:e7:4a:90:50:
33:f9:d9:e5:81:db:42:84:c5:e0:19:4b:e4:a5:44:f5:20:74:
70:20:f8:df:47:e7:1d:47:4d:81:58:b2:8b:19:a1:57:a8:b2:
c6:db:e9:cf:91:b2:6e:ac:37:6e:8a:8b:bc:4f:d2:2b:0f:a7:
fb:5b:18:f6:0c:d0:5e:3e:8a:71:92:2c:94:63:40:90:4e:bf:
96:80:4c:0b:dd:65:70:40:01:fb:e8:24:ff:5a:e3:bf:50:ad:
d8:18:cc:be:36:ed:ae:1b:fb:9f:83:e8:a2:a7:6b:2f:44:0b:
34:34:3f:ed:d5:5a:3a:28:e1:31:08:1f:8f:ec:6d:2e:ca:88:
53:86:0e:98:f5:fc:2b:95:57:3a:79:c4:c5:ca:e0:31:7b:3d:
bd:5f:46:ef:ac:77:43:8d:f9:eb:9f:39:22:1f:42:ad:f8:b4:
7f:54:04:9d:cd:3a:0d:4a:83:52:66:b2:94:5f:f0:26:35:15:
ae:45:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:35 2025 by rpki-client