Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: b6YIYjw0HOJNjJCfdP/ZAwfeQ6rjo2GYWtyEibrPECY=
Subject key identifier: 5B:48:B0:F9:C7:FA:02:18:09:C0:4E:B3:70:E5:D8:0A:E4:9A:AA:16
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 0194C463669280EDD9762CD94FC246302C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 1049
Signing time: Sun 02 Feb 2025 02:00:36 +0000
Manifest this update: Sun 02 Feb 2025 02:00:36 +0000
Manifest next update: Mon 03 Feb 2025 02:00:36 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: 7ZCmR2mg+lduikcqz4FAaeG6yiw9n92BZ3Ggp+uOJv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:66:92:80:ed:d9:76:2c:d9:4f:c2:46:30:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: Feb 2 02:00:36 2025 GMT
Not After : Feb 3 02:00:36 2025 GMT
Subject: CN=5b48b0f9c7fa021809c04eb370e5d80ae49aaa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:cd:7e:00:29:28:40:bf:27:e8:f4:71:64:
39:c0:cc:5c:9b:6f:a2:11:5e:fc:1a:ef:58:3b:36:
ac:55:a2:66:9a:1f:fb:2a:8c:a7:e5:bd:7c:49:9a:
53:7e:0a:45:26:bb:1e:a2:d0:00:20:3a:cc:72:06:
a0:a1:f3:b7:d2:60:6e:76:9b:fc:03:90:3b:99:f8:
80:33:a4:09:f3:d1:16:4f:48:23:c1:eb:cf:85:07:
14:5d:16:7d:e8:56:db:c1:99:b1:c8:9e:a2:65:88:
af:26:b8:6f:4d:87:56:33:5a:cc:cc:f0:ce:aa:ca:
1c:fd:29:c2:76:68:b9:fb:3e:91:71:7c:79:e0:ca:
04:a1:a8:6f:16:d6:a7:cf:12:98:db:6d:62:04:22:
ef:61:76:b6:56:6e:80:cf:fa:62:d4:e9:52:a8:7e:
1b:07:ac:96:b2:63:25:f7:b4:66:5a:1e:0e:d4:2f:
e1:b6:d0:2a:67:76:f7:d5:fc:17:c3:87:2b:87:88:
6f:bc:b2:d3:ab:31:e1:68:08:9e:c5:02:b4:b2:f9:
83:a7:24:10:9f:31:ac:25:92:a8:67:74:77:1b:c4:
dc:93:46:f7:f0:fb:67:af:c2:72:dc:e9:f9:1e:1e:
17:e7:15:db:2c:4c:2d:34:86:50:8e:4d:d8:18:f9:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:B0:F9:C7:FA:02:18:09:C0:4E:B3:70:E5:D8:0A:E4:9A:AA:16
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:f6:b0:42:a0:ae:78:f0:11:b7:4f:22:59:10:12:13:40:
3f:c5:31:04:b4:f2:12:f5:b4:b1:4d:00:c4:3d:50:01:86:dc:
bb:e0:41:f7:fa:48:e7:f9:e8:0b:6d:f6:b3:7e:2f:4f:ee:83:
e1:a8:cd:b2:dd:3b:4e:53:2d:dc:02:52:b6:26:fb:c4:89:d8:
90:1d:70:b6:17:54:23:bd:d9:88:46:8f:a5:d7:fe:e0:6c:61:
9d:e0:85:44:52:33:38:c4:ee:f8:cb:90:e7:3a:85:4b:c1:32:
1c:bd:75:1d:06:ce:ce:fa:bd:b9:a8:fb:35:15:71:03:7f:56:
07:55:07:50:95:00:f7:54:a6:1a:e6:a0:ac:c8:73:17:0a:b0:
ba:3d:d0:91:5a:48:57:88:56:27:e8:7b:66:1c:a9:86:51:e6:
6e:02:9c:1d:3d:2a:d5:9b:0e:6f:17:8c:19:32:6a:55:63:f2:
e9:89:01:89:27:cd:a3:df:94:8c:32:83:97:e9:5a:74:38:d7:
3c:17:bc:36:65:24:0f:36:e7:42:7c:d5:11:14:25:fc:db:d4:
36:8a:5f:d7:7a:31:d3:b5:07:70:19:8b:94:30:27:56:06:ac:
5e:1b:f4:d0:ba:a4:64:97:38:ec:c4:b0:85:ee:5f:89:ee:8a:
59:c6:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:17 2025 by rpki-client