Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier: eykg2OjQy1qZiOML7rXk7H3D9KnUNVFUqsknvHzvFRk=
Subject key identifier: 14:52:5B:85:F4:FC:91:F1:F0:A2:7E:88:C0:06:F9:9F:67:A5:67:76
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial: 0195903DC0441931E3E48545F5158DF89FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number: 0B78
Signing time: Thu 13 Mar 2025 16:02:00 +0000
Manifest this update: Thu 13 Mar 2025 16:02:00 +0000
Manifest next update: Fri 14 Mar 2025 16:02:00 +0000
Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: /gmKD6PdagPKSmwtlE8SMVsHgaBtUCiHWJIbERjKqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:c0:44:19:31:e3:e4:85:45:f5:15:8d:f8:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
Validity
Not Before: Mar 13 16:02:00 2025 GMT
Not After : Mar 14 16:02:00 2025 GMT
Subject: CN=14525b85f4fc91f1f0a27e88c006f99f67a56776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:ca:14:94:06:0a:d1:0f:27:78:3e:fb:8f:
33:70:31:86:11:e3:71:cd:3e:bd:0b:03:a4:11:77:
68:85:99:de:a7:6d:24:de:af:bc:cd:b8:00:69:fb:
71:75:70:e0:da:96:22:c8:d7:86:9c:9b:0c:cb:92:
3b:50:4f:f7:c5:9f:3a:63:ff:3f:f4:57:8c:b1:d9:
d0:b3:fd:d3:4d:93:6c:52:50:a4:e4:e1:8c:9e:a4:
5a:21:ba:93:4b:6f:11:be:01:6e:fe:28:59:03:bb:
2e:2e:ad:87:69:4d:21:b7:16:91:e8:6a:6e:f5:d1:
14:67:bb:70:f6:87:26:f8:1d:35:6f:48:7e:a1:77:
23:dc:46:fe:19:90:86:cf:9d:7a:e0:06:ec:6e:16:
52:04:9c:f3:76:89:09:98:29:06:d8:9e:70:20:af:
d1:97:02:5b:42:f8:2a:8f:84:c3:47:40:fe:c7:9f:
7c:4c:31:43:9a:21:7e:7a:25:64:81:43:a4:ee:81:
4a:bd:71:63:0e:ea:52:3b:ac:2c:59:5f:c9:82:26:
04:a1:f2:4d:b2:7d:54:ea:f9:e0:24:ca:d3:66:a6:
b1:49:96:36:19:f2:35:f3:f8:74:73:43:73:06:71:
8d:4d:3e:7b:6e:5c:11:91:b5:b5:d1:a0:0c:7f:8d:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:5B:85:F4:FC:91:F1:F0:A2:7E:88:C0:06:F9:9F:67:A5:67:76
X509v3 Authority Key Identifier:
keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:25:d6:80:1a:c1:36:6e:ec:46:89:2b:0e:69:14:ac:fc:
f1:d9:b9:e0:c8:25:95:28:b4:3f:83:a6:c0:1f:6f:16:e3:66:
59:05:d6:a4:b8:f6:cd:18:8c:64:bb:0e:95:75:6f:ca:80:31:
16:41:8e:64:49:d5:f9:40:28:64:ec:b8:bd:7a:f1:ab:6f:c6:
4a:98:ad:8f:8c:0d:97:12:4a:54:42:e0:01:af:09:06:50:6c:
ea:01:54:72:30:61:ee:00:6f:6c:71:1b:eb:e5:d7:0d:cd:83:
e6:db:0d:0f:ad:59:8e:37:05:38:af:3f:0f:2f:68:8a:1a:0b:
96:dc:92:07:60:03:d0:8e:69:35:73:71:d5:08:83:c6:28:8d:
72:c9:6b:b1:29:fc:17:e8:2c:8e:de:a3:bc:73:a8:e8:de:cd:
26:8e:8a:1a:36:e6:22:50:c9:15:f7:28:84:5e:54:c5:d5:80:
ee:2a:6e:56:c6:91:b4:30:07:f5:45:ed:bf:13:23:f5:ce:b5:
db:62:02:95:cc:2f:2e:3f:63:86:58:8d:19:5b:78:73:12:97:
fa:08:e1:bc:c8:3e:61:fb:08:03:79:ac:8b:68:0c:8c:dd:84:
a8:ea:95:cc:c3:1c:db:41:66:d7:c3:50:44:41:2e:e1:b0:4a:
6f:e4:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:13 2025 by rpki-client