Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: 1nIFI+Y/mjMFqyq6rnKbr7WovzhX+ccPuEsAUZdOL3I=
Subject key identifier: BF:26:58:CA:40:72:7C:94:2A:6A:93:B1:0C:88:1B:5E:18:E2:34:5D
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 01958EF32F249713C37C05306C94EE313B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1492
Signing time: Thu 13 Mar 2025 10:00:56 +0000
Manifest this update: Thu 13 Mar 2025 10:00:56 +0000
Manifest next update: Fri 14 Mar 2025 10:00:56 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: JJllsXJCnjBjk8y85NyN1J+1okhqhcWK9CS6u3/agWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:2f:24:97:13:c3:7c:05:30:6c:94:ee:31:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Mar 13 10:00:56 2025 GMT
Not After : Mar 14 10:00:56 2025 GMT
Subject: CN=bf2658ca40727c942a6a93b10c881b5e18e2345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:76:76:ae:e6:12:ef:94:a8:7d:2e:28:bc:
5a:76:37:b1:61:23:47:05:22:79:8c:d9:a6:55:e5:
4e:0b:99:79:a6:60:c3:98:ea:39:7c:2e:63:9e:01:
ae:84:72:32:93:3f:24:f0:bd:3a:23:13:cb:0e:24:
f7:6f:b3:ab:d5:4c:ce:5c:fe:0a:0a:19:3f:0a:f9:
6e:eb:0d:39:f1:fe:e5:25:49:51:25:a0:e0:cf:dc:
55:98:d1:5d:bd:60:af:55:db:82:a8:04:95:26:8c:
37:7b:90:ea:f7:07:36:31:cc:6c:de:ed:9a:7e:fc:
db:89:0b:b5:de:bd:f1:fd:70:be:81:06:61:48:1e:
03:78:0d:43:64:80:c4:c4:bb:b9:cf:c5:27:2d:ae:
1d:3f:81:48:aa:ed:18:97:3f:48:5c:40:26:68:2f:
3b:21:71:53:4c:77:08:2f:e3:94:8d:12:82:88:3c:
97:43:4b:ea:6b:7c:a7:94:8f:47:56:99:7c:bf:d4:
2e:5e:e9:72:3d:61:b5:fa:55:7f:9a:9b:6b:e2:36:
14:1d:79:21:f1:5b:ea:81:37:fa:ca:0e:fd:2c:df:
24:5a:30:f2:a7:4a:3e:6c:4e:ec:02:10:ab:dd:33:
8d:3d:df:61:6f:b5:5b:84:74:6c:1e:d5:c3:32:c7:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:58:CA:40:72:7C:94:2A:6A:93:B1:0C:88:1B:5E:18:E2:34:5D
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:95:10:04:fc:75:5f:82:c3:1e:35:e4:da:27:6e:e8:80:76:
27:ab:e1:5e:0d:7f:84:d2:54:ab:35:a4:1d:5f:a0:42:89:ac:
bf:2a:de:ae:19:f7:81:e7:5a:a2:68:e0:b8:6f:19:27:d9:d2:
84:76:c0:15:87:2c:18:e2:87:39:50:36:bf:4a:29:25:d6:f6:
6d:39:77:7f:5f:62:ce:78:46:cd:02:80:24:b7:6f:2c:56:75:
98:ef:9e:26:6b:13:7f:24:2e:6f:95:6d:22:18:23:68:17:19:
a7:55:e7:ae:5d:b0:28:03:e8:c8:27:28:91:8e:ff:44:eb:d0:
c9:dd:51:d9:fc:72:9d:fc:7f:a0:a1:f3:2d:d0:8e:a7:5a:3c:
63:2d:da:44:79:96:2f:da:0f:b7:6d:a2:cb:41:96:e5:1f:c1:
ce:8c:33:33:f6:fe:b3:ab:10:90:58:a4:a4:f1:f6:ee:aa:8b:
01:2e:25:ab:08:62:1f:d3:96:7c:76:a4:81:ff:c4:b5:18:02:
16:b4:af:c1:ba:9e:5f:f3:52:9e:fb:dc:04:e5:10:2a:36:3c:
74:b4:02:c2:d3:5a:00:8f:ac:af:86:af:c9:1d:27:38:97:35:
10:c1:d8:8b:96:5d:97:61:dc:0a:41:29:1e:b6:a2:2e:de:4a:
af:f8:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:01 2025 by rpki-client