Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: a301VzGC4i4HhAx5nNaM1xSHkW1BDKnZCGrRqIjjp2U=
Subject key identifier: CB:A8:1D:BA:C7:97:46:93:25:71:6D:31:D6:0D:86:70:B2:D2:EC:D6
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 0194BABB3029CCDFA90CDD65ACA21B4D98E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0B09
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: 4KtRfC+8pLg6hmxQoN6073XE3tRf70etd8s38LJ/DAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:30:29:cc:df:a9:0c:dd:65:ac:a2:1b:4d:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=cba81dbac797469325716d31d60d8670b2d2ecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:08:4f:cf:a3:dc:70:3f:d9:85:89:b5:35:
2f:12:a5:41:b8:11:5b:b9:ad:45:23:82:b4:0a:14:
d2:23:b5:4b:ca:a6:08:01:0f:12:8a:8e:bd:36:ba:
2c:1e:fd:b1:3c:e0:6c:19:5b:f1:6a:45:8c:a1:18:
10:67:1c:14:d5:40:b8:74:62:c1:76:e7:c7:a5:a1:
53:8b:71:0b:f1:30:14:89:15:3a:b5:5c:a8:f4:03:
aa:22:ff:89:29:dd:cb:b1:e0:b9:f8:4f:a0:b2:36:
91:dc:86:30:4a:85:d6:80:79:e3:5c:f6:ca:63:ee:
45:8e:89:bb:ea:6b:38:dd:85:91:b7:bd:55:40:99:
5d:40:02:18:c8:0a:3a:02:9f:10:33:df:ca:c2:b6:
4b:4d:d4:9e:59:6d:3e:26:66:83:ea:f4:73:7e:81:
ce:0d:f8:e4:1b:ce:8f:82:9d:14:bc:3d:86:f7:01:
37:0e:4e:f8:c6:11:1e:0a:24:82:f5:f8:d7:05:f5:
e0:91:53:8b:11:1f:ef:fc:f3:37:13:5a:2a:69:4f:
85:ff:f1:fb:fb:31:80:65:a6:0a:2a:26:57:66:28:
85:91:7a:71:12:e9:0e:06:af:3a:a2:b0:15:d9:c1:
41:0e:8b:d8:78:57:93:21:82:62:1f:22:03:58:69:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:1D:BA:C7:97:46:93:25:71:6D:31:D6:0D:86:70:B2:D2:EC:D6
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:cb:fa:13:f4:81:35:3f:f9:6d:32:f3:7f:00:00:2f:a3:
0d:51:74:95:fd:b9:b1:3d:3b:e1:47:25:8d:a6:7b:f3:fd:d2:
b4:15:72:b5:11:66:b6:64:81:f6:dc:fa:8d:c5:c3:7e:4c:61:
de:7b:dc:60:51:22:43:39:9b:96:9a:91:3f:77:03:80:cd:65:
6a:6c:0c:d6:cc:ea:fb:11:03:9b:83:bf:65:47:08:ae:52:bd:
9b:9a:e5:26:e0:02:77:7d:59:17:71:df:95:c3:d0:e7:8b:42:
8a:c1:11:80:7c:2e:02:b3:16:3f:88:f8:d4:3c:30:0f:bb:36:
27:4b:11:88:6b:50:79:21:d5:a3:7a:b4:c9:0e:86:f2:fc:32:
5b:58:c7:c6:14:4e:e5:8c:b0:be:1a:c8:9d:00:0f:e4:64:7f:
e5:2e:ef:c8:22:3f:f3:53:00:35:9a:0d:e6:f6:38:b3:69:80:
29:20:25:d3:1d:33:44:76:8a:e3:57:ca:a7:5a:0c:bb:1b:29:
cc:50:4e:6b:d1:e7:95:22:9d:3e:7e:de:0a:2e:99:33:de:eb:
8b:b2:4c:90:a4:aa:af:af:96:88:e6:a9:b0:a4:25:16:c5:37:
93:77:d2:7f:f4:93:b4:e6:32:1e:00:18:78:64:b0:19:59:13:
8f:a5:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:57 2025 by rpki-client on console-fra.rpki-client.org