Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: aNoTb7Gq21D9DlsAoAuvA5RoqTg+S2qZH9PzAMEUjAo=
Subject key identifier: B1:4F:E7:0D:C6:91:81:93:CC:D6:D2:9D:56:E4:AB:FC:9B:F4:A8:CC
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0194C3883A65620FEC04A53631F24180BFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:01:12 +0000
Manifest this update: Sat 01 Feb 2025 22:01:12 +0000
Manifest next update: Sun 02 Feb 2025 22:01:12 +0000
Files and hashes: 1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: 5foEFxDVw9LjbnCI4y3FkC/L1cAHXzIxVP1vUWbVdfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:3a:65:62:0f:ec:04:a5:36:31:f2:41:80:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Feb 1 22:01:12 2025 GMT
Not After : Feb 2 22:01:12 2025 GMT
Subject: CN=b14fe70dc6918193ccd6d29d56e4abfc9bf4a8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:f0:24:a7:19:31:6c:32:28:17:54:ca:5c:
0b:fd:fd:1c:05:e8:85:23:5d:81:84:7a:f2:77:f7:
31:46:23:10:c3:8e:8e:5d:d1:84:27:28:9f:34:26:
f5:b0:9d:a9:3d:f5:88:d3:cd:0e:67:85:7c:52:9a:
78:ed:3a:14:3e:ab:d0:02:1f:e2:b2:a6:e9:ba:99:
24:4b:8e:79:93:5b:e0:61:d1:41:e1:31:4d:cc:d8:
84:06:a3:d3:8c:1a:32:66:d1:b2:43:3e:cb:46:49:
ae:74:48:2e:51:4c:48:2e:08:20:f3:63:35:9f:43:
82:89:b8:f3:ad:88:44:b5:fd:f7:4e:13:77:b5:7a:
7b:93:fe:c8:3b:f7:72:b6:1c:34:13:82:e5:ed:64:
92:fc:9d:df:01:bc:46:99:a8:81:54:c3:02:75:82:
ae:9a:93:11:98:d0:68:ea:c5:ba:a3:4d:9c:0d:7f:
11:a3:48:af:9e:8c:4b:25:a8:d4:e4:1e:e2:23:b8:
5e:cb:67:8e:8b:51:2d:73:eb:36:d9:b4:e5:40:23:
e0:cd:fe:67:a2:17:7e:43:dd:79:20:33:c8:80:e3:
f0:3b:b1:bc:15:73:9b:89:6d:66:a9:2d:0e:6a:d2:
51:99:87:d5:af:b3:1b:d8:1d:52:85:1b:1b:7e:b2:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:E7:0D:C6:91:81:93:CC:D6:D2:9D:56:E4:AB:FC:9B:F4:A8:CC
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:27:04:fb:7e:62:02:37:66:cd:1c:a7:c8:55:9f:a0:64:b5:
73:52:ba:27:6e:8b:c6:66:79:69:c5:d9:ea:ea:9a:38:62:67:
3d:2e:dc:e0:2c:4a:fd:86:bc:10:af:ef:6e:5b:79:3d:af:ce:
b6:18:e8:05:b4:7e:82:98:e2:f3:12:e8:58:aa:83:91:19:2b:
de:fe:cf:71:f9:86:ec:e6:d1:64:3e:78:e4:4d:cd:89:7b:d8:
11:6e:18:36:3d:27:01:84:1a:65:bb:e1:e1:c0:e8:61:ff:63:
bf:35:24:c0:f1:8d:52:9b:f6:81:3e:26:5d:ef:25:3a:4b:13:
36:fa:90:11:e3:ff:d3:de:17:a4:2d:ad:c5:e8:9b:20:2f:5e:
a1:d1:28:46:de:fb:b8:76:67:97:73:50:80:7f:02:4c:87:ad:
ed:d0:02:c5:9a:e7:83:21:bd:28:dd:f9:f5:f5:38:4d:f5:07:
98:35:a8:6c:db:9c:2e:1a:96:3a:77:6c:36:f8:25:38:64:66:
1b:74:7d:f8:dd:61:01:f4:8e:3e:10:db:e7:f1:9e:03:bf:fd:
71:5c:28:af:94:71:c8:0b:ac:e5:06:28:1b:d5:35:4d:81:c5:
34:c2:fc:01:3b:20:22:11:09:8b:6f:49:40:08:b1:a8:cc:76:
89:72:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:09 2025 by rpki-client