Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: hccDQ4pGrN8DURq4jdZF+OD0Db3LD3ZAjlUaxbg4SQ4=
Subject key identifier: 2D:E1:CC:0B:C8:6E:79:83:AC:E9:70:E4:91:BC:C7:DE:8F:AD:4E:BE
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 0194C4635659ECC64C86F280B5482001AF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0B40
Signing time: Sun 02 Feb 2025 02:00:31 +0000
Manifest this update: Sun 02 Feb 2025 02:00:31 +0000
Manifest next update: Mon 03 Feb 2025 02:00:31 +0000
Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: bou8TeCG9obU0Tm9aMkFLlb+5ES1Li0cIkw4GadDoK8=)
2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:56:59:ec:c6:4c:86:f2:80:b5:48:20:01:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Feb 2 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2025 GMT
Subject: CN=2de1cc0bc86e7983ace970e491bcc7de8fad4ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:b2:84:61:c2:3b:b3:51:3d:2b:3d:37:fd:
6e:9b:d6:7d:81:3b:52:7f:83:64:1c:6e:b6:dc:60:
d3:d6:19:d1:3e:29:28:81:d1:f5:6f:fb:ee:38:7d:
d7:d4:2f:46:64:ba:38:c5:3c:90:56:6c:de:1f:47:
c9:6a:dd:b8:9b:34:ec:22:1c:7f:55:ba:a6:c2:b2:
cd:36:74:a1:6e:fd:1e:57:df:60:8c:f3:93:ec:d1:
19:00:04:2f:c6:68:49:49:50:59:23:67:56:48:5a:
3f:5c:de:83:5d:17:11:26:c6:65:ac:ee:8c:6a:c3:
c3:cf:c1:06:e9:a8:b4:f9:c3:53:00:f5:7e:8f:4f:
1e:18:28:6e:18:53:c5:09:6b:c0:7e:5c:f7:89:5b:
6b:ca:25:ea:2a:d0:da:ec:58:43:83:5e:d3:45:4e:
80:85:b4:aa:02:d9:90:29:cf:fc:d8:03:a3:b7:b2:
62:b5:ed:6e:94:71:e2:65:5e:b3:f9:67:2b:03:36:
97:c7:ff:65:e1:0a:1c:78:7f:a3:69:3f:56:3f:57:
cc:a0:b8:d1:15:4d:a9:f3:53:d6:6a:71:f4:30:b4:
97:45:c9:6a:8a:45:00:ba:46:b6:42:28:52:10:62:
98:f3:7d:22:f9:d3:2c:ef:35:d5:e3:99:57:e7:7d:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:CC:0B:C8:6E:79:83:AC:E9:70:E4:91:BC:C7:DE:8F:AD:4E:BE
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:bc:24:cf:0b:bc:01:42:ab:eb:02:e3:12:06:db:21:11:
9f:c6:de:e5:d1:33:60:aa:3f:3f:aa:5c:78:b4:ce:51:07:3e:
9c:ef:6b:05:f3:90:4a:45:cf:97:d1:c5:23:71:6f:0b:73:9d:
0e:71:6e:7d:4d:de:00:51:4d:d3:c2:f2:32:29:1a:b9:13:4a:
d9:f8:57:3f:ad:ce:3d:78:fd:42:71:c3:95:47:8d:23:cc:35:
a9:cc:7d:03:89:86:63:6e:ea:6d:a4:91:cb:d5:76:76:67:32:
74:c4:48:71:94:09:86:8d:72:f7:44:11:e1:72:f5:87:e4:b0:
28:e2:77:35:2b:c2:a0:33:18:96:d9:ad:f8:a0:4a:47:1f:33:
cf:eb:58:4c:fc:7b:55:66:77:cc:06:fa:fe:1a:fd:56:45:1e:
97:50:d1:58:78:08:de:f4:5b:87:3e:1c:b4:4b:ef:e4:db:e0:
cf:88:7f:5d:85:8b:4d:26:97:bd:9c:68:f5:33:8f:81:22:62:
d7:f7:3e:e2:c1:4c:12:8d:40:d9:0f:dc:41:a9:72:d4:dd:6b:
6e:06:43:32:82:4a:32:fd:e7:28:ff:ff:52:8d:1b:70:db:fe:
14:53:81:e3:62:60:3f:ec:a7:39:6c:63:27:46:94:d9:ba:2e:
6b:85:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:15 2025 by rpki-client