Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File: eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier: pZBZmVYRq1/sdhqTv8i6shcLuIpEf3nHTIfJNDG+msg=
Subject key identifier: 55:49:49:66:92:56:EB:14:40:CE:CC:84:ED:95:FE:64:D8:42:1D:D7
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer: /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial: 0194C350EBC485ED77F182D98C2425C347E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number: 3F
Signing time: Sat 01 Feb 2025 21:00:47 +0000
Manifest this update: Sat 01 Feb 2025 21:00:47 +0000
Manifest next update: Sun 02 Feb 2025 21:00:47 +0000
Files and hashes: 1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: rKlJ7nrI7EkPQOYm+H9RE50cPNa8JC8mS3cH3wqtH3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:eb:c4:85:ed:77:f1:82:d9:8c:24:25:c3:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
Validity
Not Before: Feb 1 21:00:47 2025 GMT
Not After : Feb 2 21:00:47 2025 GMT
Subject: CN=554949669256eb1440cecc84ed95fe64d8421dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:ba:ff:26:5f:ac:f4:12:1f:d2:15:f6:69:
9f:38:19:9e:55:7b:10:b1:03:37:ad:3a:33:c9:d6:
c1:a9:5a:61:7e:5a:df:97:09:d1:aa:d2:f1:95:41:
7a:8d:3d:eb:cc:f0:cf:27:ef:ab:98:26:3b:4c:44:
0e:60:b2:d5:38:f2:be:92:b0:ef:a8:4a:82:05:8b:
37:93:a2:df:c2:d4:59:18:06:ea:52:5c:37:d4:d9:
41:1a:19:82:19:b8:01:a9:df:54:b6:62:ee:66:fe:
92:bf:a1:d9:ce:89:91:47:6c:57:5c:f5:fd:18:eb:
6e:53:99:db:30:ca:48:f0:56:a6:e6:08:12:46:c2:
65:3f:bb:72:03:30:fe:a0:54:25:5c:7b:27:f4:e4:
e2:10:3a:c3:99:c8:0f:c3:a2:cd:a4:6b:30:b9:74:
4f:29:79:f8:a9:af:5d:1e:0e:07:d1:13:fb:2d:55:
db:41:87:58:28:67:5d:3a:1a:90:83:2c:4b:df:39:
29:70:28:04:d2:d6:3c:d4:1f:25:60:dc:dc:99:5c:
f8:96:df:54:69:03:0e:53:87:38:74:cf:3f:0c:7b:
47:3c:cb:ad:84:4a:33:aa:17:4a:36:a0:13:18:4f:
38:ac:d5:9a:04:58:24:12:49:6f:6a:18:6f:71:d0:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:49:66:92:56:EB:14:40:CE:CC:84:ED:95:FE:64:D8:42:1D:D7
X509v3 Authority Key Identifier:
keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:af:93:6e:f8:77:29:2c:d1:e8:fc:0e:f8:3f:01:37:d7:82:
f7:a5:42:a7:04:5d:fc:8d:2c:af:4f:52:63:7b:2d:68:4f:76:
99:56:9f:b4:66:71:eb:dc:a3:9b:b6:8d:d8:54:e2:e2:c8:5c:
de:5e:1c:1d:d9:c7:9d:2c:a5:63:88:3c:86:54:d6:71:4d:ef:
b9:b4:8a:dd:99:1e:b1:eb:5b:15:ef:0b:8f:c4:ce:79:f3:67:
02:c5:e5:fb:41:df:a3:31:c4:1d:aa:ad:17:a3:24:64:68:67:
77:4c:9c:f3:b0:b0:19:9c:88:8f:c2:58:e1:ed:e6:67:ef:74:
28:ba:e2:24:78:ae:5c:5f:61:41:62:b7:98:a2:60:16:a4:22:
25:fa:3e:98:76:c5:62:68:3d:a3:37:1c:16:fb:e5:a8:0b:fd:
d3:82:66:6b:b3:89:c7:9d:6f:64:48:f3:e7:79:27:56:f6:ba:
6b:f4:ed:63:fa:60:76:31:d3:9e:aa:d4:2e:36:02:80:05:51:
27:6a:9d:2b:e1:7a:60:b6:68:11:38:7d:f0:f3:39:e4:92:c8:
c7:d0:1d:25:52:07:c9:c6:5d:3c:b8:a1:19:3a:d5:5b:d0:f0:
b2:7a:2d:c0:d9:c1:65:96:a8:dc:b1:dd:a3:c2:d1:64:15:43:
d8:c4:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:48 2025 by rpki-client