Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
File: 9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json)
Hash identifier: DaD2Q3SvJo8XpZBrNybhPQ0DVcTlX4TLm4w8YpzGKUQ=
Subject key identifier: CB:29:12:D6:2E:2F:C2:F1:34:2B:B7:32:72:73:5C:3D:D5:09:5F:B2
Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Certificate issuer: /CN=f6fc2879500e1eb80855705cf8435e03635137de
Certificate serial: 019510C6C615D20508EA0B4708B1DAF520BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
Manifest number: 04A8
Signing time: Sun 16 Feb 2025 22:00:16 +0000
Manifest this update: Sun 16 Feb 2025 22:00:16 +0000
Manifest next update: Mon 17 Feb 2025 22:00:16 +0000
Files and hashes: 1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: z4Kxre0UL3i43rfYMbnnpDOgpkS6M8RmN9VeAJQoicE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c6:15:d2:05:08:ea:0b:47:08:b1:da:f5:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de
Validity
Not Before: Feb 16 22:00:16 2025 GMT
Not After : Feb 17 22:00:16 2025 GMT
Subject: CN=cb2912d62e2fc2f1342bb73272735c3dd5095fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:c5:cb:1a:cb:cf:76:69:dd:37:6b:11:c0:
9a:1d:b2:a4:c4:2d:ff:6a:1f:cc:ff:e2:cc:6b:97:
1f:ba:a2:d3:49:a7:95:d9:d2:b1:b2:e8:9d:eb:14:
21:d7:0b:84:bb:c9:85:fa:24:2a:3f:e7:78:91:2c:
05:2a:f8:10:67:52:0f:66:c4:13:be:65:aa:13:64:
1c:ff:fd:ba:84:12:65:b5:ca:83:5f:03:b2:25:d5:
ca:9b:b4:19:96:e0:41:5a:63:68:76:25:b3:a6:86:
2f:41:55:6a:a2:cf:ae:bf:74:91:74:20:b2:b8:ea:
f6:5e:86:ce:f3:4a:b3:bd:e4:3a:bb:7e:c6:53:02:
9e:16:70:08:23:b2:e5:83:7c:f7:74:1c:44:77:72:
fa:da:ab:1c:2d:32:f4:cf:b7:d1:df:f4:6c:88:de:
87:6a:87:d4:7a:12:20:49:cc:bf:bb:31:4b:1a:00:
dc:05:1b:48:db:cf:76:86:24:c6:9e:99:4f:26:80:
b9:94:dd:6c:2a:bc:6f:6e:2a:90:ed:c0:31:d6:11:
20:3d:9e:2a:ec:b6:3e:50:68:96:31:7c:20:a2:fa:
e5:b6:16:c0:af:21:c6:64:44:9b:82:75:05:c6:5c:
a0:30:c6:bb:73:5e:9a:0c:5f:99:de:59:39:f7:1a:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:12:D6:2E:2F:C2:F1:34:2B:B7:32:72:73:5C:3D:D5:09:5F:B2
X509v3 Authority Key Identifier:
keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5a:7b:fd:d4:8a:5b:6e:fa:69:57:3f:c0:bf:57:ac:39:37:
cb:57:87:d5:db:30:e8:58:7a:59:27:d2:15:ba:dd:d9:a3:f9:
d8:36:8e:f4:df:da:96:7f:13:11:79:c8:8b:fb:b9:55:fd:e8:
00:53:86:6f:9a:7f:30:19:7c:10:ab:f3:62:69:22:ce:7c:c7:
6a:69:31:d4:51:05:68:14:a0:16:07:ab:17:bb:41:2f:a3:ae:
7b:61:4d:8e:1f:76:c3:a6:e2:2d:12:77:d4:5b:75:63:cb:d4:
25:12:62:fd:00:60:01:fa:1e:ed:10:d7:88:15:23:78:a3:d0:
99:32:5a:cf:92:1a:7c:6a:00:5c:63:0c:ff:44:09:4a:25:bc:
0b:c1:73:bf:28:44:a5:d0:b0:91:21:4f:31:b6:93:49:94:3e:
26:6e:43:0d:48:59:94:3d:8b:ba:d6:be:ec:87:73:52:c9:49:
03:df:5d:e1:ed:a2:06:43:78:02:50:be:54:0c:ea:dd:4e:f3:
dd:8e:2a:37:a2:79:1c:0a:7e:c9:ca:c2:7e:48:a6:51:06:3a:
8e:b7:c9:e3:df:a1:9c:18:de:0a:2f:ee:32:f1:aa:eb:5f:43:
e3:0a:dd:09:9f:1a:22:40:51:19:9c:0b:9c:87:7f:b9:d0:4b:
d1:8e:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:46 2025 by rpki-client