Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: xfXC2QuZdMMTFBN2OPp2167L/rgZNzkBDrAdxEsr7Qk=
Subject key identifier: 32:F6:A6:4C:CB:D5:62:20:EF:EE:79:E1:FA:B1:68:6B:85:24:79:F8
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 0194C38777FF4439E11EB722F78AB43D5FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 054D
Signing time: Sat 01 Feb 2025 22:00:22 +0000
Manifest this update: Sat 01 Feb 2025 22:00:22 +0000
Manifest next update: Sun 02 Feb 2025 22:00:22 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: 6ktg7FCYyK3058IcfsIeuRSnwzXdwvUcRiwNUrnXMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:77:ff:44:39:e1:1e:b7:22:f7:8a:b4:3d:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Feb 1 22:00:22 2025 GMT
Not After : Feb 2 22:00:22 2025 GMT
Subject: CN=32f6a64ccbd56220efee79e1fab1686b852479f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:13:89:d4:73:a9:e4:f1:12:86:64:0d:fc:
66:26:c0:c7:2f:da:66:64:d5:e0:4f:23:49:f4:46:
2d:a8:57:b4:d5:52:32:7c:41:18:f8:46:95:41:c6:
4b:63:d2:f4:18:b1:ee:59:72:35:d1:ad:92:74:97:
c9:2b:25:2a:8a:55:e9:f1:60:39:41:e1:78:3a:de:
70:4b:a6:be:d3:22:06:f6:0e:73:d8:da:42:9d:a2:
b6:dc:db:37:63:56:9a:0d:e7:48:b8:39:0a:91:fd:
30:85:fd:0f:79:2b:22:28:93:e5:5a:4d:47:7b:ce:
55:f5:0c:c9:73:e6:98:ea:4e:c1:23:2b:92:d7:04:
35:b1:16:69:e6:59:a2:b3:8f:9e:23:15:ab:48:b1:
d6:59:8f:a0:e5:17:4c:20:19:e5:4e:1e:d9:a3:3a:
20:80:9a:14:4d:54:16:d6:a1:cf:3c:09:41:0a:2d:
75:1f:a3:38:e2:68:95:ad:e2:07:90:f0:3c:87:65:
52:2c:03:6e:db:24:e4:fd:a2:84:e9:f6:54:b7:5a:
83:d1:00:c2:72:ba:59:1d:15:f7:97:df:1a:01:eb:
83:28:6f:07:ed:31:2a:6a:e4:06:90:b7:e0:5f:b4:
85:7c:81:73:ff:10:d2:ed:31:84:2d:17:e7:a6:59:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:A6:4C:CB:D5:62:20:EF:EE:79:E1:FA:B1:68:6B:85:24:79:F8
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:47:01:d2:bf:f9:21:d6:b8:3a:55:d7:4e:ee:4e:b4:04:
68:cf:ea:5b:27:31:90:58:f1:01:1d:30:a3:78:79:5d:44:53:
16:b6:65:06:6b:1f:d8:13:e1:52:4d:73:f6:e9:0d:35:17:19:
74:f0:41:b2:aa:cf:6a:1c:c1:2a:32:45:7e:b9:3d:c5:71:90:
23:af:c8:34:eb:1a:cb:ac:b1:c2:f5:bd:1c:8d:77:4a:d9:54:
3e:a6:e2:91:d5:37:7a:a0:9d:0a:ba:62:99:0a:6b:4e:ac:cb:
c1:d8:02:17:72:a5:fd:0f:16:fc:ad:14:09:bf:fc:04:f0:ef:
eb:b9:6f:e5:59:8d:19:63:55:99:6b:70:66:89:3c:b2:3d:a7:
02:aa:5c:17:8d:15:6e:68:dd:de:48:5a:55:1b:8c:d9:f2:09:
ed:7e:13:75:04:d2:aa:79:1a:c4:7d:7b:8d:cb:98:af:5e:2a:
01:b5:01:a2:e4:9b:f1:68:b4:48:3e:cf:b2:41:ed:ba:99:ba:
f2:21:62:41:de:f1:98:d8:19:a6:c1:56:0b:56:f0:f8:00:26:
de:5c:cb:0d:50:70:7b:19:7a:5c:eb:0d:d3:b0:93:19:62:53:
99:54:7d:a5:50:3a:e4:5a:e9:b0:00:c5:38:e5:ab:41:6f:f4:
e5:aa:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:01:48 2025 by rpki-client