Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: ZLa0fZkc5sGio5LGlaM+9O/UiP6hMZEv+TVCO6664gs=
Subject key identifier: B4:A8:27:1F:44:CB:86:BE:0A:17:A8:B4:08:B6:09:22:A4:05:14:11
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0194C4D13FA1E4B28F6DB60EFDD0220859B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 04:00:35 +0000
Manifest this update: Sun 02 Feb 2025 04:00:35 +0000
Manifest next update: Mon 03 Feb 2025 04:00:35 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: 6oP3v4koHM6CfhRm26jRKTEzIAa2FhKihNLF/JfVy2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3f:a1:e4:b2:8f:6d:b6:0e:fd:d0:22:08:59:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Feb 2 04:00:35 2025 GMT
Not After : Feb 3 04:00:35 2025 GMT
Subject: CN=b4a8271f44cb86be0a17a8b408b60922a4051411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:dd:8e:3b:79:bb:ad:9c:9f:bc:12:7e:7b:
c2:4b:61:fe:c7:be:99:c5:70:4e:21:5b:58:d7:a2:
7e:f3:c5:d9:32:67:2c:0a:4f:aa:03:0f:ec:e7:92:
85:95:75:cc:90:f1:ae:70:3a:fe:fe:6b:ed:5a:c2:
4f:a8:4c:9a:46:57:97:ee:8e:a9:fc:8c:aa:4b:85:
7c:a1:71:82:cd:fb:91:1a:6f:c3:fb:85:45:10:68:
c7:29:a4:c0:fd:f3:ae:b2:d1:19:93:0a:e5:10:74:
43:7d:91:ac:dc:78:a4:55:f5:f9:45:ac:e0:4d:c8:
89:88:4d:7d:4d:bd:63:91:0f:75:f9:90:2d:93:18:
4f:05:89:16:a3:26:35:f1:48:0b:09:9b:d4:c1:77:
4e:f5:c6:f5:fa:93:28:06:61:7c:5f:75:43:f5:b8:
d0:3d:1e:eb:11:19:a7:43:3b:34:e2:7e:cc:3c:c9:
43:f8:63:76:e0:89:12:00:e4:24:c7:e4:1e:0d:b2:
fd:a3:01:66:df:a6:62:cc:b5:bb:8f:e7:7b:2f:36:
9e:47:15:84:d2:db:f9:f6:95:34:23:3b:5d:e3:0d:
9a:f1:9c:db:1d:e3:b3:8e:2b:2e:21:9a:75:00:58:
6e:8b:b9:02:ca:2f:b5:4a:d6:ec:17:00:45:ab:14:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:27:1F:44:CB:86:BE:0A:17:A8:B4:08:B6:09:22:A4:05:14:11
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9d:17:98:8c:68:e5:4b:f8:eb:43:a6:0e:e4:51:9f:cf:8a:
41:d0:c0:00:d8:d5:3d:66:e9:0f:6c:9e:82:38:8d:79:6d:ab:
78:8d:e5:2c:6a:e3:55:4f:bf:59:a7:89:c9:a2:a5:bb:e7:c9:
e7:65:cc:98:b2:11:81:2a:2f:22:11:5d:d4:50:a4:26:5c:25:
17:b2:42:f5:09:cf:22:3d:92:90:83:8e:a4:f9:41:7f:e9:8c:
3d:06:e8:ab:7b:7e:ed:79:ef:18:c5:c6:5b:fc:1a:fd:b1:59:
0d:b9:bd:43:72:c0:84:38:d6:b2:74:2c:12:ea:67:a8:fd:2d:
54:93:d0:4e:d8:31:6b:ae:9c:18:df:84:cc:b1:da:92:11:7c:
92:a9:1f:41:3c:65:e2:e3:10:b7:90:00:85:5a:7b:af:4a:6c:
70:d7:92:53:e5:8d:70:f8:c9:b6:b8:73:94:55:46:06:63:b1:
e8:05:48:fd:26:e5:ae:d4:b9:57:64:63:71:6d:22:15:01:bf:
e1:c0:d7:e0:1a:81:00:7d:7e:4f:88:bf:8d:08:f6:ce:a3:c2:
1c:2c:ac:7f:b0:ad:c8:22:f0:80:12:b5:bc:74:11:10:b7:a5:
e3:bd:bd:6e:5c:10:fc:ea:a2:44:82:50:94:9b:19:79:49:ff:
2d:45:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:44 2025 by rpki-client