Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
File: _drec0yM3oXb9k0PdWr955y8gCM.mft (raw, json)
Hash identifier: gja3cgkVtIwuC7jt0Cw9zBoEq8inxpCydY/7JHKKEcY=
Subject key identifier: FC:FC:80:8E:90:9B:41:E1:E7:CE:26:82:E1:63:EF:05:89:37:2E:1C
Authority key identifier: FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
Certificate issuer: /CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Certificate serial: 0194C3873E8C32D16E6A4DA1F419F848764E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
Manifest number: 0AFD
Signing time: Sat 01 Feb 2025 22:00:07 +0000
Manifest this update: Sat 01 Feb 2025 22:00:07 +0000
Manifest next update: Sun 02 Feb 2025 22:00:07 +0000
Files and hashes: 1: _drec0yM3oXb9k0PdWr955y8gCM.crl (hash: LBpOO7BK8St3TTb47Czqgu7TVxWsWC86qZo+6DYxuG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:3e:8c:32:d1:6e:6a:4d:a1:f4:19:f8:48:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Validity
Not Before: Feb 1 22:00:07 2025 GMT
Not After : Feb 2 22:00:07 2025 GMT
Subject: CN=fcfc808e909b41e1e7ce2682e163ef0589372e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:f0:97:b5:a1:da:fa:1d:76:8c:2d:9a:60:
73:1b:0e:59:9b:cf:8c:58:1f:7d:f2:11:52:33:a0:
08:13:8c:0f:b5:59:88:d3:f7:56:5a:5a:58:1d:4b:
06:e1:4b:28:ad:3f:d3:e2:d2:f1:02:0d:09:0e:6a:
1c:d0:67:ea:a8:d7:8b:10:b6:30:34:19:4a:ec:93:
9f:cf:75:1a:20:97:61:63:0f:19:f9:14:51:3a:6a:
c7:15:be:60:64:c7:e0:16:3b:57:3a:10:fb:9f:1f:
34:9c:d7:d9:4d:f2:47:59:5e:19:22:02:71:80:a1:
02:5f:f2:de:34:2b:ca:77:cf:92:14:c1:16:d8:ad:
89:7a:6e:8a:10:ff:1f:f9:99:df:e9:b6:cc:39:3a:
94:28:ac:e1:aa:3f:46:9d:96:0c:53:03:56:f9:a1:
fa:ea:55:0c:9b:3c:a9:d6:b3:b0:58:bc:41:dd:df:
8e:09:7c:55:7d:5d:e7:06:aa:1d:32:ab:2d:4c:fa:
bd:10:d9:9b:cb:44:f1:93:03:08:5c:a1:89:cf:aa:
37:78:e1:a8:d8:1f:0d:c7:1d:af:d5:dd:16:78:b0:
ff:03:60:d5:ed:c7:73:a4:7a:be:bf:67:dd:a6:44:
00:55:ca:ca:01:5e:36:34:23:64:02:92:6f:36:6d:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:80:8E:90:9B:41:E1:E7:CE:26:82:E1:63:EF:05:89:37:2E:1C
X509v3 Authority Key Identifier:
keyid:FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1b:27:8f:c2:92:2b:96:d5:b6:db:45:d4:c6:e0:79:92:f5:
54:c1:89:06:f6:8e:29:08:7b:1f:9d:72:c7:d4:be:8d:a0:4b:
ba:71:8c:c7:82:d3:63:c4:42:f1:24:8f:0d:e7:ca:3d:be:3e:
2e:15:ce:40:ea:ab:cc:76:54:a2:16:6d:a7:ec:a2:58:ec:f0:
6e:1e:52:d7:da:7f:87:68:3a:56:29:71:a8:f2:6f:3e:3e:04:
d7:62:64:73:8e:e7:80:34:ff:2c:18:cd:e6:b3:e1:be:6f:73:
5a:18:19:7f:36:7b:7e:09:00:06:25:d4:32:2f:4e:c2:06:97:
6d:6d:a9:0f:4a:d0:39:34:80:7d:fe:49:8b:9b:c5:d1:7b:4d:
16:e2:46:ed:e6:56:f9:70:e8:31:2c:12:cd:4d:a2:f6:be:8f:
f0:dd:0c:30:f7:79:27:62:7b:2e:68:0f:be:fa:f4:74:30:4d:
de:41:ae:7f:7e:ba:4b:71:39:95:46:16:40:d5:f3:01:e7:bf:
04:f7:9e:a7:95:ce:c2:e3:87:a6:b9:6c:13:54:39:c7:d8:48:
94:bf:89:ee:a8:c4:ee:3a:2a:c9:18:48:cb:f3:5a:ff:4f:95:
7f:83:3e:5c:2f:cc:00:47:fe:2a:76:62:75:2c:38:b3:15:26:
cc:fd:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:00 2025 by rpki-client