Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: hqmQKkRASo2+tCNVqQVuhAaXkrFYitAeGkq1PlJLEQA=
Subject key identifier: 2A:BA:0F:4D:58:2F:2C:E5:D5:54:1D:0D:9F:82:9A:EB:C9:EF:66:9C
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 019510C7CB5A84FBD4F22472F19BFED521A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 04B9
Signing time: Sun 16 Feb 2025 22:01:23 +0000
Manifest this update: Sun 16 Feb 2025 22:01:23 +0000
Manifest next update: Mon 17 Feb 2025 22:01:23 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: Bqw8vgDRJVytNbmVEhBzsFCSQVbVyOfKsUp4QFv9jrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:cb:5a:84:fb:d4:f2:24:72:f1:9b:fe:d5:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Feb 16 22:01:23 2025 GMT
Not After : Feb 17 22:01:23 2025 GMT
Subject: CN=2aba0f4d582f2ce5d5541d0d9f829aebc9ef669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:e3:8f:28:52:1e:2a:f6:33:d5:fc:2b:75:
02:bf:be:c7:0a:f2:13:0d:b5:19:4d:03:83:65:3b:
ed:ab:23:88:f3:ec:dd:af:1d:9f:e3:d7:5d:f3:5d:
18:98:00:1a:65:34:ed:ae:e3:51:a9:6f:a5:56:9d:
9f:b1:ce:44:5b:b8:55:0b:7a:59:1d:76:b6:83:03:
0b:86:6e:7d:c2:2b:c7:29:d0:2e:11:52:92:8c:26:
53:c0:70:f8:3f:20:bb:a5:7c:6e:29:d2:19:f4:88:
2f:fd:7c:fe:2e:7b:de:e8:8a:9a:27:ba:8e:e2:0a:
67:c2:78:85:63:d7:09:f7:c0:75:74:81:3f:9b:c9:
07:e3:ac:26:40:10:6d:dc:a7:b8:f8:3b:c4:f8:1e:
83:c3:c4:e2:8d:8c:9f:76:7a:07:7c:f4:41:d0:a0:
e6:93:5b:88:62:d5:e2:92:d7:97:19:92:df:1e:ce:
2c:85:6b:33:99:38:b6:5e:42:3a:e9:36:82:6b:bc:
0d:d5:08:b3:53:9d:a7:ef:bb:21:c1:ee:1f:27:f1:
10:85:de:cf:19:db:7c:7d:d5:e9:88:61:15:3a:57:
7f:e1:61:7c:8d:7f:08:7f:fc:2e:05:07:64:01:0f:
7b:c9:88:24:4c:b1:93:32:27:ec:3f:8d:e2:10:87:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:0F:4D:58:2F:2C:E5:D5:54:1D:0D:9F:82:9A:EB:C9:EF:66:9C
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bf:a7:c5:0a:5b:a2:86:e9:eb:e0:01:83:50:eb:e2:ce:49:
9b:f9:09:2d:3a:00:f6:e3:5e:c1:41:50:da:2a:e7:0f:ed:b7:
a1:7c:72:fc:27:75:58:48:35:56:b5:ad:2e:7c:c8:3b:e7:0b:
21:aa:cb:85:e7:3d:10:01:95:9f:15:2b:9d:06:b0:2a:5c:2e:
f5:63:28:ec:7a:c8:0f:cd:de:63:7f:4e:44:8d:44:28:ab:6a:
23:5d:0a:a2:12:30:5e:63:2a:d5:ae:35:0b:ac:b1:bc:c4:9e:
d0:1d:35:1e:6a:23:d4:17:2b:ee:0e:c3:03:82:b3:32:ca:02:
f3:2e:c1:d8:5c:3c:32:b1:9b:75:64:2c:b0:4f:af:16:1c:16:
10:db:0c:cb:c8:4f:51:9b:31:2d:2b:23:d0:2e:44:fd:a4:f7:
94:be:de:d5:2b:fd:c3:ed:65:54:e9:43:b7:3e:22:9a:b7:2a:
01:bb:f0:a0:62:4a:d0:20:8f:1e:5b:b4:21:48:fd:52:55:a6:
27:ca:85:48:2f:57:14:20:ec:e8:23:2c:ee:19:ce:cb:b2:93:
15:89:89:c7:70:5d:42:13:66:53:d5:63:b0:b4:4a:30:32:f0:
17:66:9f:5d:6a:b8:4d:c0:5e:80:68:bf:8a:63:a6:b8:c3:ee:
8d:66:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:41 2025 by rpki-client