Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: ++uBYqRBUwk6yHqiRn7GFRs2CF+Qd4+pjnl+Z1jLXeg=
Subject key identifier: 56:83:49:8A:F8:5D:91:3F:87:EE:22:98:46:5A:D5:E0:1E:AA:66:95
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019510FDE1A6CB0AE98042BFF230C8A47F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 0300
Signing time: Sun 16 Feb 2025 23:00:28 +0000
Manifest this update: Sun 16 Feb 2025 23:00:28 +0000
Manifest next update: Mon 17 Feb 2025 23:00:28 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: 5BNXbC1n+MkFwthj3Geu8Eml9Hbq1gp95IC9VcxjRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e1:a6:cb:0a:e9:80:42:bf:f2:30:c8:a4:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Feb 16 23:00:28 2025 GMT
Not After : Feb 17 23:00:28 2025 GMT
Subject: CN=5683498af85d913f87ee2298465ad5e01eaa6695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:b9:a8:dc:d8:39:de:61:84:50:df:c3:8c:
01:14:f1:5b:83:bc:d1:55:9f:b6:b0:6c:a7:68:ce:
83:66:ea:fe:52:32:97:b4:59:76:84:24:04:61:0f:
85:8f:4d:94:0f:c9:ae:e7:62:9b:05:f0:d1:5b:64:
9e:66:f7:ba:fb:be:e5:e3:3c:34:1a:bb:a4:39:93:
a4:1f:5d:e5:fa:ce:4b:2e:c2:0d:ff:84:28:39:0c:
7c:d7:e9:f9:ad:27:06:db:2e:8e:1c:3c:b1:94:22:
71:c9:03:85:6c:4c:63:15:35:fa:9b:f7:89:2d:e2:
ee:ab:b3:8d:62:be:90:d9:83:cc:24:07:6f:ef:d8:
23:55:9f:7b:f1:be:7c:83:69:b6:bc:f1:ec:3b:91:
10:f5:46:f0:04:5b:68:80:51:a2:ef:ec:5b:f5:f2:
f4:01:ab:3c:26:7f:78:6f:00:3f:96:10:74:61:90:
e0:15:e2:0f:54:b6:59:21:0e:86:85:fe:39:d0:ad:
ca:90:62:b7:a0:fe:92:17:89:4f:d7:34:d7:d1:f1:
e0:c6:34:22:bb:3c:06:55:06:3a:19:ce:f0:fd:b4:
a9:2c:bd:4f:5a:65:16:0c:a3:f7:60:78:04:6a:6a:
1a:a0:70:2f:c8:7f:e6:d6:31:5d:73:83:50:ff:dd:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:49:8A:F8:5D:91:3F:87:EE:22:98:46:5A:D5:E0:1E:AA:66:95
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:05:d7:44:6a:fd:48:e4:96:62:7f:a6:fd:fd:fa:4c:6a:30:
ba:19:9b:ef:8c:90:6d:92:79:d6:b0:b3:45:21:73:04:f7:ab:
37:89:98:4c:cb:cb:de:c6:93:41:25:2c:91:cf:cb:70:5c:91:
88:09:03:5a:73:7f:08:f1:94:9e:70:99:37:bc:58:5e:c7:7d:
ea:b8:64:f6:69:fa:35:ba:d7:2f:ed:c1:22:6a:3c:3c:e8:f2:
06:e6:dc:17:79:90:1b:cf:50:e8:ad:f5:3b:6c:f7:61:1f:d6:
b0:49:48:bb:c1:b9:41:7d:39:ee:62:01:3a:ed:72:02:16:65:
83:2b:b9:32:de:3d:90:72:d5:07:ab:5d:f5:b9:33:da:8a:84:
1f:b3:32:0f:b7:47:28:4c:0b:07:94:94:5d:0d:a2:f7:48:1b:
c8:17:1e:be:e2:7f:b5:c3:33:84:85:46:5e:84:29:63:c3:0c:
5b:12:99:78:d4:c8:2a:8d:1c:26:1a:30:e3:59:b0:ca:5c:99:
0e:f2:a0:f9:aa:57:a0:87:f4:77:ec:95:df:49:63:eb:a2:24:
01:40:22:11:b5:80:20:13:fc:ff:5e:65:ba:86:57:1e:a1:e3:
cd:f5:4d:6b:ec:66:d5:2a:1f:04:61:14:4b:2d:6f:c3:45:6c:
8b:f8:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client