Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: hZunn82ae2ZebhohCIRm2EZ2ej5kncVHaF9FyM/T680=
Subject key identifier: FF:21:75:32:CB:A3:CE:DF:4C:DF:54:89:A2:A3:3D:43:BA:6F:AC:AB
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019510C6A3986CD3957B75C0B7F4FB342B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:08 +0000
Manifest this update: Sun 16 Feb 2025 22:00:08 +0000
Manifest next update: Mon 17 Feb 2025 22:00:08 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: BjybibmJDWdLM6McqTbR31CR0Ji1VnYhQQrHI++6jdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:a3:98:6c:d3:95:7b:75:c0:b7:f4:fb:34:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Feb 16 22:00:08 2025 GMT
Not After : Feb 17 22:00:08 2025 GMT
Subject: CN=ff217532cba3cedf4cdf5489a2a33d43ba6facab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:01:d4:29:a1:68:b4:07:98:cc:f5:cb:a4:
5a:15:2c:15:12:7d:81:ba:9a:eb:22:0e:fd:91:ef:
10:8f:71:fe:88:5f:6d:1e:3d:06:cf:f1:36:68:b0:
38:67:a8:ca:b4:e3:e2:23:e6:01:82:9e:d3:c5:90:
65:f3:ed:f0:7a:c8:74:af:c5:0b:f1:a3:98:13:db:
68:b8:a4:d4:34:06:50:82:ce:35:4e:fc:d3:90:4f:
f8:62:5a:10:f5:c4:2c:93:89:3f:c8:9f:3d:11:ac:
8f:78:fc:17:98:13:80:c9:b1:4b:8b:93:1d:56:90:
64:5b:27:60:31:f9:1a:8c:cb:ce:05:0d:aa:e2:f0:
ab:60:ef:f9:6a:b9:eb:58:b1:52:9e:18:d8:19:dc:
4d:f9:67:00:3c:e4:3a:2c:c4:7a:47:6d:d0:3c:97:
77:dc:b7:0c:16:dd:b5:09:7d:40:dc:c7:24:88:06:
db:72:82:af:4b:c1:9b:43:12:92:59:05:52:4f:6b:
24:42:2b:db:f3:7d:fe:f7:d5:c9:6f:3c:8b:e5:2c:
7f:ba:26:f3:2d:36:fc:ca:17:91:8d:2d:66:21:a2:
85:1b:56:cf:7c:8d:38:78:76:d0:e3:e8:f6:22:99:
68:e7:8d:6f:7e:8f:d0:82:6a:80:44:8d:e9:fb:fd:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:75:32:CB:A3:CE:DF:4C:DF:54:89:A2:A3:3D:43:BA:6F:AC:AB
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:29:42:81:d2:74:a8:bc:51:27:3d:07:07:92:9b:5c:72:1c:
2f:d4:0c:05:9c:51:11:8e:70:9f:0d:f6:08:2f:25:3a:84:58:
b0:fc:e4:10:ec:06:c6:f9:ba:01:05:87:a5:27:13:bb:9d:af:
fe:8a:c1:c2:0e:9d:ee:f0:41:4f:93:1c:54:9e:ac:bb:c0:7d:
60:53:fa:ba:21:a9:1c:b6:ab:1f:0d:98:bb:24:98:19:8b:30:
99:b7:ad:25:3c:d6:1f:5a:3e:61:11:b8:de:52:e3:77:cd:f9:
70:bb:8f:3c:39:a7:8e:a1:53:e6:6a:c0:3d:db:b8:94:38:55:
86:43:42:3c:fc:e0:6a:6b:ef:5e:4e:ae:f0:dd:e1:ad:5d:06:
e8:42:77:e3:20:5d:f5:45:66:8d:0f:c5:28:e7:b5:1b:a5:13:
6f:bb:1f:06:0a:f6:0d:17:be:b7:02:c4:d2:e3:42:d7:f1:a7:
fc:61:25:ef:f1:e4:a6:f9:e2:8d:50:cc:f8:90:7c:74:16:cf:
9d:6b:e0:91:66:4e:29:40:3f:54:df:ca:6d:bb:1f:c6:1c:9c:
c8:4b:fd:26:9e:f7:0e:1f:23:27:33:34:52:e0:08:b5:95:bd:
90:8e:c0:f1:3b:19:22:e3:b0:0a:76:d2:0e:fb:11:ed:ce:8e:
ac:ce:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:58 2025 by rpki-client