Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: ctM2/eUN7jYD3pF3p2bmHrls9A8qA66SABpZJqy/q94=
Subject key identifier: 4E:D1:BC:42:C7:80:1B:E5:0F:83:72:79:37:39:82:3F:09:F6:91:77
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019510C6ACEC5A372978B57F3B3625D8D41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:10 +0000
Manifest this update: Sun 16 Feb 2025 22:00:10 +0000
Manifest next update: Mon 17 Feb 2025 22:00:10 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: g0Z0F7nkmbAFPaADQRXdrZH0S+9uM6iUkfgF+gpnNP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ac:ec:5a:37:29:78:b5:7f:3b:36:25:d8:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Feb 16 22:00:10 2025 GMT
Not After : Feb 17 22:00:10 2025 GMT
Subject: CN=4ed1bc42c7801be50f8372793739823f09f69177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:bd:1d:11:12:88:4d:c1:e4:f2:28:87:9f:
84:c1:16:84:fd:20:37:56:32:d3:be:8d:89:c5:f1:
eb:7f:41:c7:f6:f1:12:c9:b4:60:31:1b:b9:37:bd:
c9:18:ee:5c:54:96:9b:af:6b:a7:53:3f:61:27:12:
fb:66:1b:24:df:2f:55:2a:63:84:7e:58:02:ab:ad:
37:7e:3e:03:84:a5:30:b0:37:a6:ce:f6:6a:89:7b:
33:ea:ba:1b:9d:4b:38:b7:04:06:a7:8d:51:d0:3c:
22:1f:04:23:1c:d2:ee:6b:d9:1e:5b:a0:eb:32:0c:
70:55:eb:12:d0:58:9b:8d:a2:f5:8e:20:02:d9:d8:
2e:61:88:e1:b2:37:19:16:ab:1b:75:e1:e7:28:4d:
a9:d4:1c:44:02:d0:9a:3f:7f:1b:b0:93:61:00:9c:
bb:91:8e:b3:aa:ec:46:3e:ab:9c:aa:ea:2e:69:74:
20:82:88:14:91:11:42:8d:33:bf:8c:ea:42:6e:a9:
04:f5:b5:4b:a2:8e:6c:3a:c7:19:23:c2:f8:43:8e:
d1:10:96:0e:35:40:30:e1:bd:b1:54:9b:46:87:25:
54:05:a4:77:5f:16:80:05:4f:c9:d9:50:2a:09:14:
2f:d1:e5:1c:00:0d:9b:41:04:0f:7f:d6:f0:ca:56:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:BC:42:C7:80:1B:E5:0F:83:72:79:37:39:82:3F:09:F6:91:77
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c9:f2:47:f7:e9:f4:4c:48:6d:82:1b:6c:5c:59:7d:1c:a8:
b6:ec:1e:b1:f2:49:60:aa:9e:da:16:18:56:27:c5:29:8b:28:
e9:33:3e:9b:ff:d7:96:50:c4:d8:e5:20:a4:36:07:5c:80:1e:
57:b6:b1:70:3d:04:08:2f:62:04:71:b9:44:6e:7b:13:3c:53:
c4:0e:b4:90:81:21:36:d3:d5:a4:d0:a1:8e:50:47:0e:54:16:
73:84:d3:79:9c:a6:d9:af:92:d8:fe:44:ab:d2:2d:56:8a:b8:
d5:f8:c6:56:d8:e2:2a:cb:0d:b3:e3:d9:f3:0d:d1:17:a4:e2:
87:66:07:79:4a:9b:07:44:cd:0e:96:0b:66:30:c3:c4:02:8e:
6a:e6:56:8d:9c:9c:59:1c:52:5f:45:80:3e:b3:13:3b:a2:c8:
bc:87:d8:11:59:6f:82:dd:41:11:04:23:92:b8:e9:13:57:cf:
17:1c:3f:94:d9:4d:e5:4e:6d:5f:f0:69:fe:bd:b8:6f:07:44:
fc:70:24:be:be:3c:79:d9:5d:62:5b:5e:f1:49:56:c7:89:53:
79:de:f2:51:e2:44:38:10:0a:e8:30:b8:29:da:dd:98:9e:3f:
38:be:84:78:28:8b:84:c8:fe:83:aa:f3:36:ed:4f:47:ad:45:
06:87:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:36 2025 by rpki-client