Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier: e15ohaBypi03sd/K/a6+/ta34cZ70vgqcMqpxi3NalE=
Subject key identifier: F8:8A:75:E6:B1:1D:AF:95:82:9A:46:47:03:EF:43:DD:10:CE:83:BF
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial: 0194C4631DC781E6257B04066EBFFBDC8DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number: 0EB8
Signing time: Sun 02 Feb 2025 02:00:17 +0000
Manifest this update: Sun 02 Feb 2025 02:00:17 +0000
Manifest next update: Mon 03 Feb 2025 02:00:17 +0000
Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: I2cg8ki3vFidSFkxs6cMYQ9yZS791pzDoNOmT91M+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:1d:c7:81:e6:25:7b:04:06:6e:bf:fb:dc:8d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Validity
Not Before: Feb 2 02:00:17 2025 GMT
Not After : Feb 3 02:00:17 2025 GMT
Subject: CN=f88a75e6b11daf95829a464703ef43dd10ce83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:81:62:d2:aa:5b:18:af:d7:8f:72:47:56:
5b:df:e3:a4:1e:a5:33:48:d7:5e:c2:0e:ef:e5:44:
08:ef:97:95:ea:ca:76:f0:eb:7b:20:77:1b:df:df:
9d:5a:46:2f:aa:98:f3:bc:cb:2d:fd:19:b2:bd:b1:
a5:5f:4e:0b:4e:0a:0c:15:ea:6b:3e:97:81:6c:79:
83:e3:73:07:1b:1b:c1:e3:02:73:98:fd:40:13:96:
c1:2c:7d:95:e2:6e:a8:82:fa:c7:26:5e:1c:61:c4:
53:a6:85:10:28:6f:13:1f:9e:82:c9:6d:9b:a2:b0:
39:89:28:24:9f:7b:5f:a1:95:b0:06:f2:12:da:17:
63:24:4a:a8:d1:b5:66:d5:a2:84:ec:95:00:1d:8b:
83:5f:bf:94:d7:ad:89:91:dd:50:e4:48:bf:7d:5f:
00:c9:24:2e:41:e4:50:5d:9e:5d:09:d2:7f:9d:73:
19:9a:75:91:49:14:3d:3d:a3:7b:26:b0:ac:32:73:
33:c5:ef:8b:64:0c:90:72:88:6c:4d:73:8c:44:61:
1f:95:5a:4d:56:68:8f:92:9f:2c:c0:b1:9e:98:60:
d6:53:f6:9e:67:94:13:a1:5f:8b:23:19:39:6e:ab:
51:69:07:66:a3:2f:54:89:fa:da:6f:11:a5:a5:94:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:75:E6:B1:1D:AF:95:82:9A:46:47:03:EF:43:DD:10:CE:83:BF
X509v3 Authority Key Identifier:
keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d0:43:72:ce:48:06:cc:3f:28:31:63:c2:8d:7e:7c:77:56:
bb:54:26:bd:fc:19:91:f0:c1:f1:37:dd:bf:e4:3c:ab:33:ff:
ed:a2:4f:0f:a3:cc:2a:f1:db:a5:bf:7a:25:fd:35:ad:0b:99:
ff:20:60:69:47:87:71:e1:56:94:dc:77:40:c4:55:d2:15:e5:
92:50:df:df:39:e1:a2:f1:ef:00:b5:96:33:45:8f:ff:d2:49:
c6:a3:c2:0a:73:01:c5:19:3e:50:3b:01:1e:74:89:cf:0f:ff:
cc:62:7f:1a:91:5a:e5:8e:2c:00:4c:f4:87:7b:68:90:be:d4:
3e:6c:26:8e:97:e1:a1:e2:bc:70:0a:9d:b5:b4:d6:c3:a3:c8:
10:c9:9d:ae:cb:96:9d:7d:21:86:91:a2:b7:30:1f:8a:db:12:
75:e9:77:7c:6a:fe:1e:d1:93:96:09:5f:8a:17:e0:64:7c:c5:
f8:95:4e:8a:e3:1b:f4:94:02:05:2d:8b:4a:6b:1a:45:d6:ae:
6e:91:6f:1d:03:c5:51:e8:42:40:7b:03:54:d3:0b:e7:78:79:
ef:35:76:3c:86:b6:46:99:b0:a2:6d:40:10:bc:44:5b:af:6f:
24:34:b5:af:d9:7f:cc:e0:74:6b:e3:61:7b:ae:4d:10:34:84:
e2:be:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:03 2025 by rpki-client