Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: 2U9vZO4J95B+zgw9znaVyy6+QwLAvvlgFaZQY9P4WuI=
Subject key identifier: 74:0C:7F:21:D5:57:91:FD:0D:9C:32:21:FB:BC:3B:31:BB:73:24:12
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 0194C4D0EFAF1B74BD15B23B14AD4549DCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 0478
Signing time: Sun 02 Feb 2025 04:00:14 +0000
Manifest this update: Sun 02 Feb 2025 04:00:14 +0000
Manifest next update: Mon 03 Feb 2025 04:00:14 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: lXZvZxrHT6tVYPIknibvWT64/S2VL5akrAzBXOyyXSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:ef:af:1b:74:bd:15:b2:3b:14:ad:45:49:dc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Feb 2 04:00:14 2025 GMT
Not After : Feb 3 04:00:14 2025 GMT
Subject: CN=740c7f21d55791fd0d9c3221fbbc3b31bb732412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:3c:f9:57:4c:70:ca:2a:f0:d6:d4:e4:52:
1f:ba:f5:8a:1b:82:26:f2:f0:ed:87:d4:4c:b6:fc:
15:bf:bc:72:51:9b:88:aa:29:86:f9:45:23:17:53:
c7:db:4b:e9:03:66:2b:24:c8:3e:3d:9e:d0:33:7f:
db:78:f0:b1:69:03:d1:1b:93:26:b1:ac:35:f3:c5:
35:a6:bc:f1:98:ac:19:5c:65:1d:58:2b:11:b5:96:
b0:0e:6f:b7:50:85:39:88:81:da:dd:7c:4f:1b:88:
01:8d:cc:00:2e:88:72:72:1f:59:e5:a8:30:05:20:
2f:8a:32:ec:c4:27:3f:ae:5d:65:f6:81:41:48:02:
98:fb:e3:38:8e:ad:f6:2f:c3:38:2a:46:c2:82:74:
f1:11:b3:b8:5b:10:31:cb:22:8e:7e:96:0b:90:20:
ee:97:97:a6:e4:49:ae:ff:b6:93:6d:9b:b3:e5:2c:
a3:a0:34:c5:c1:a9:5f:08:15:44:3c:da:69:77:57:
c2:55:33:11:d6:58:c5:90:ca:d2:b7:0a:bb:49:63:
e9:c7:e2:88:b7:c4:45:c4:dd:ed:f9:37:37:3d:12:
cf:c9:11:8f:47:d2:b6:5d:1e:f4:9f:ae:dd:e1:e5:
b5:e5:92:41:95:8d:b9:1f:6f:d7:8d:b1:61:ac:6f:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:7F:21:D5:57:91:FD:0D:9C:32:21:FB:BC:3B:31:BB:73:24:12
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:a5:20:80:68:c3:84:e7:89:ff:4c:f2:45:b8:c2:8f:e2:
0f:87:45:9f:1b:9b:4b:c6:a7:11:4c:f9:5f:21:75:14:8b:d7:
53:4a:35:2a:a4:2b:19:ed:87:3f:62:2e:30:b8:ed:c9:2f:7b:
8d:d5:98:63:fd:4c:8e:88:16:bf:f4:8c:66:2a:98:ed:1b:65:
11:ee:40:69:23:7c:a5:72:03:cb:aa:91:f9:3f:88:8d:9c:4f:
21:90:19:09:7e:f1:65:5c:b1:dd:81:7d:fd:ac:4a:9c:ce:14:
b8:ee:4b:3b:25:43:bb:e8:37:e9:52:de:84:8c:15:d5:d9:9c:
51:f7:e4:d0:fb:fd:89:58:39:64:21:d6:d1:53:08:94:10:28:
88:12:e8:dc:1b:e7:4b:15:10:c9:7c:c3:c4:6c:61:0c:c1:50:
44:8a:2d:6b:b2:dc:e4:e1:52:52:0d:2e:75:03:33:59:77:d9:
af:38:c0:c9:fe:50:a1:3c:f2:93:73:e8:a8:17:2c:78:2c:0d:
ab:23:d1:24:23:71:c8:ef:67:36:c1:fd:23:ad:a5:ff:1c:aa:
9a:8c:c9:35:67:2f:c0:85:50:58:8c:e8:1c:7c:ee:cb:ea:9b:
1b:5d:a3:20:e5:8d:15:d9:24:1c:7c:a5:b3:f0:8c:ce:42:2a:
45:02:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:42 2025 by rpki-client