Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier: ZijvCG9vDw4cQecF8Ka0UKQcmOT+uUYYKAFMGC5di84=
Subject key identifier: 0B:13:2A:61:38:DF:B0:0C:DF:62:79:60:F4:C6:D2:DA:D4:64:86:A1
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial: 019510C777801AD30A61654CD02968D404C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number: 0B36
Signing time: Sun 16 Feb 2025 22:01:02 +0000
Manifest this update: Sun 16 Feb 2025 22:01:02 +0000
Manifest next update: Mon 17 Feb 2025 22:01:02 +0000
Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: B5nIxYrIPzBLu7q/grLWQ9Dm431Nxh50j+D+eg+nSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:77:80:1a:d3:0a:61:65:4c:d0:29:68:d4:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
Validity
Not Before: Feb 16 22:01:02 2025 GMT
Not After : Feb 17 22:01:02 2025 GMT
Subject: CN=0b132a6138dfb00cdf627960f4c6d2dad46486a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:36:a6:e7:4b:df:18:14:8d:0c:88:87:21:
4a:f7:ee:5f:eb:c2:dd:38:c2:80:b1:64:a4:84:5e:
a2:e2:9e:d6:2a:e1:59:72:13:c6:b4:aa:89:6d:7d:
b3:57:21:9f:71:93:99:14:03:c3:ee:f7:e2:35:0f:
c9:91:71:5d:86:32:ae:d8:a7:c1:19:2b:16:4f:43:
e5:f8:70:86:a1:24:c0:f9:96:df:ab:b9:cd:ed:05:
32:b6:af:44:30:2a:cb:eb:65:20:8e:0c:4e:03:0e:
e6:b2:89:ce:60:77:95:ad:63:17:b8:cc:f3:58:7a:
ae:c0:31:86:a9:20:57:f0:ae:98:bc:38:28:7c:b0:
56:78:6b:1e:8c:5a:b9:6f:f2:61:10:9f:34:52:68:
64:93:13:5f:83:ea:0f:24:c8:dc:e6:02:cb:71:97:
5e:c2:22:17:91:86:2b:f7:c3:7a:1c:09:15:bf:f4:
8c:e0:f3:e8:f9:02:6e:9a:40:44:f7:ba:21:36:d9:
53:9b:e5:b6:23:12:b6:be:46:7d:c1:e9:51:06:5f:
7c:37:b9:56:f3:bf:ff:4e:1f:0d:2e:8c:ba:c2:13:
3c:9a:1f:e1:60:7c:ec:67:8b:a9:59:27:97:cc:29:
3e:ec:cd:18:bf:19:fe:d9:dc:59:ad:0a:67:bf:92:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:2A:61:38:DF:B0:0C:DF:62:79:60:F4:C6:D2:DA:D4:64:86:A1
X509v3 Authority Key Identifier:
keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b1:43:06:a0:ef:78:13:60:10:1d:07:b2:23:34:6a:6b:4b:
94:85:e1:20:20:a8:43:39:4a:1f:af:d0:8d:cf:b2:5d:e4:9b:
88:5c:e9:81:58:ab:9e:da:27:a9:3d:a2:9b:d0:77:6e:8d:39:
8c:5e:24:61:0a:02:0f:e1:07:87:76:2c:10:82:cd:3a:fb:c2:
3d:91:bc:91:24:97:fd:b6:d1:36:6c:b5:ca:50:a6:bc:ca:42:
32:1d:d8:59:51:f1:e5:16:e8:f1:ce:80:cd:f7:f3:d1:9f:4f:
f3:79:cd:93:12:b3:2d:73:ea:ac:24:7a:e9:d9:0d:c7:58:83:
b8:be:d3:a0:32:6a:88:2b:50:ad:46:12:c3:6e:ba:fb:63:70:
f2:71:7d:bc:eb:d3:77:48:10:83:be:57:dd:f8:9f:43:b7:9b:
ef:da:e2:7e:77:b9:69:f7:c8:3e:5b:16:36:cd:82:40:8a:64:
17:cd:6a:d7:5a:69:0c:7e:c7:aa:c3:d2:cb:7d:20:ee:9d:25:
b5:f6:0b:98:7c:a7:f0:34:83:81:1b:c8:14:3d:01:1a:db:4b:
c7:f6:b8:91:91:2d:65:11:aa:fc:17:c5:37:50:9d:11:b3:8c:
da:6c:98:05:42:bf:64:fe:f0:a8:06:48:e3:7d:5f:1e:3d:08:
7c:5c:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:41 2025 by rpki-client