Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: N36H7saD1U+O742s6Up7s45dYIAdBeNZUh/dS+HkC8I=
Subject key identifier: 1A:59:22:82:4C:6A:D3:5B:3D:D5:4B:79:98:A0:EF:A1:24:F1:53:B8
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 0194C388200699404314BE378FFF8E1C0405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 1429
Signing time: Sat 01 Feb 2025 22:01:05 +0000
Manifest this update: Sat 01 Feb 2025 22:01:05 +0000
Manifest next update: Sun 02 Feb 2025 22:01:05 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: g+g7Vdvtldk+DlJ2Yu3Osh++mhRZ80QoV6CerhBar+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:20:06:99:40:43:14:be:37:8f:ff:8e:1c:04:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Feb 1 22:01:05 2025 GMT
Not After : Feb 2 22:01:05 2025 GMT
Subject: CN=1a5922824c6ad35b3dd54b7998a0efa124f153b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:2e:0a:41:1c:9b:71:d6:10:08:01:13:3a:
3d:61:b9:25:09:5d:4f:06:be:ee:3f:0f:74:89:99:
89:b7:8b:0b:90:24:42:32:7d:ea:bb:52:60:93:4f:
a0:bd:70:3e:04:69:ac:0a:8f:07:dd:07:da:51:22:
35:10:ff:d9:d9:af:fc:ac:59:0e:e8:a5:ad:60:a1:
ba:c0:cb:5e:8c:09:6a:c9:d3:a5:9e:77:c6:5e:a3:
ff:1b:4e:0d:13:c6:a2:39:64:f7:08:1b:a6:e3:ff:
7c:c0:fc:e6:a9:06:51:c8:29:89:4f:55:c6:aa:2b:
27:f6:fa:35:6d:39:3c:b8:58:a2:b4:4e:b2:9c:9d:
2f:1d:a5:47:c1:b8:b3:63:e5:8e:06:ee:18:b9:61:
41:6f:c7:79:12:91:b6:d4:dd:35:e9:bf:13:4e:fd:
f1:f4:1b:9e:27:37:aa:92:a1:9c:46:31:bf:69:61:
bb:1e:a6:65:4b:c2:f0:e9:cb:01:a6:cf:26:47:b8:
c2:e8:38:8d:66:a8:8a:74:35:33:74:92:0a:4b:79:
40:ab:76:33:e6:4b:e1:3a:2e:5d:09:bc:5b:3d:dc:
b7:48:f8:df:6d:ce:fa:4a:12:f9:54:21:be:06:d6:
f4:61:d9:8e:ef:05:35:42:76:ef:d1:49:5a:ee:30:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:22:82:4C:6A:D3:5B:3D:D5:4B:79:98:A0:EF:A1:24:F1:53:B8
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:31:6b:c9:35:00:50:d6:3f:08:07:06:ca:48:cb:4a:b3:14:
f6:f6:c0:fd:37:30:85:d1:94:cc:d3:26:b7:82:6c:1a:6a:97:
9f:d0:ba:e7:c6:b1:24:a8:b7:a6:12:f7:7d:69:72:10:e8:e3:
29:7b:64:33:bb:a0:30:5e:dd:39:05:d1:c4:49:a8:ae:9c:83:
02:b0:b0:8e:53:9f:29:55:8e:4f:b0:92:fb:7d:dc:07:c9:fa:
27:9d:7a:0a:69:7f:9b:26:7a:84:d8:61:c2:df:5a:1f:7e:b5:
eb:6c:48:06:e3:a8:37:07:1b:6a:be:31:5d:f5:2f:c3:31:5c:
9c:a1:67:00:2c:4f:92:2c:2e:25:c3:f9:da:a3:c6:c9:ad:c8:
fc:55:94:19:ac:f0:92:de:96:4c:d8:66:37:bb:0e:30:01:b4:
61:a1:40:12:fa:4d:22:30:14:ce:f7:85:bf:7e:c4:5a:f2:9d:
09:93:05:ae:3a:ad:6d:39:b1:b4:0f:10:e0:b7:ec:31:69:07:
f6:ac:13:f5:8b:10:13:17:6e:e6:a9:eb:0d:b3:14:ed:56:59:
79:74:9d:1d:dd:f8:34:25:73:f3:74:45:28:65:71:3f:42:12:
37:e1:ac:b5:fa:01:9a:56:ab:64:36:05:cc:6c:67:c8:0a:4b:
5a:5c:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:11 2025 by rpki-client