Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: 9H1xgZlgxAzOW3rDi5Y1QRkkpR25Ie6mE8/Y6hhmx8c=
Subject key identifier: 91:79:5C:49:21:75:F1:F5:C4:D2:78:9A:31:A1:35:C0:7C:D3:7B:DE
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019512109600612CB7577C9C40F9C670D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0AAB
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: CY1lj1BeF+qVgfnmPD5Pe8pg+itigNYvFq51FCE4+ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:96:00:61:2c:b7:57:7c:9c:40:f9:c6:70:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=91795c492175f1f5c4d2789a31a135c07cd37bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:b0:15:a1:78:1e:48:22:a2:51:38:c1:20:
20:1b:94:1a:94:57:bf:2c:27:91:06:a3:4f:2f:f6:
ae:45:9d:75:75:d8:21:18:6b:bd:47:46:27:f6:b0:
f2:39:dc:97:f5:95:9d:c7:7c:bd:81:c6:f9:a4:d2:
f5:de:08:d6:95:0d:77:8b:a2:b5:36:04:fc:d4:43:
cd:ce:69:a5:24:44:58:6a:9d:8a:dc:cc:04:96:51:
30:a3:96:e7:19:fa:cf:04:fc:3e:41:ea:da:8f:7a:
b8:03:85:ae:7d:04:17:79:59:72:81:58:17:c4:20:
3e:50:d0:e9:fb:9c:34:06:c4:3a:d4:ed:60:79:90:
52:14:93:0f:d3:57:2d:c8:e9:7e:3d:2c:2f:19:40:
6f:67:c3:6b:4a:08:da:03:6e:48:e1:41:5e:80:e2:
ac:7a:e3:fe:e2:83:c4:84:33:ee:b2:92:a2:0e:21:
66:e8:3c:77:97:68:79:87:ea:90:be:92:3e:ab:ac:
d2:d4:2f:b2:d9:bf:49:7f:40:3c:c7:c0:e0:a4:0f:
42:89:69:a8:7d:b0:53:35:cf:2b:49:60:0d:b8:b0:
48:97:27:ac:2c:f3:8e:3f:9d:f3:ff:f2:48:3b:c8:
0d:79:80:cb:ac:3c:3f:e7:9b:e2:6f:a3:85:4f:e1:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:5C:49:21:75:F1:F5:C4:D2:78:9A:31:A1:35:C0:7C:D3:7B:DE
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:2d:f0:35:85:ea:70:b4:f8:ec:42:5b:1c:ea:7d:21:0f:
ec:81:06:72:f3:57:e0:98:87:c3:2e:39:32:f7:ee:95:15:dc:
65:34:f9:23:68:94:bf:ae:ee:b1:2e:94:45:13:36:b4:ad:c0:
02:27:05:54:62:5d:d8:79:18:1b:a2:cd:68:6b:e3:fb:23:37:
68:df:9a:cd:69:90:30:1f:48:4f:6a:70:85:21:b8:c7:b4:fb:
27:9d:68:30:8e:55:a5:c2:7b:cb:77:01:10:30:74:fa:f7:c6:
d0:3f:db:33:c1:22:af:44:77:78:ec:e1:b8:a6:64:ac:e6:a7:
4a:fb:80:e9:45:5b:92:6c:8d:dd:ad:2a:22:b3:73:9b:d0:71:
fa:b2:29:c5:59:7f:d9:88:e1:44:3b:b7:e6:7d:00:d2:ea:14:
62:42:c8:b7:25:b8:6d:a8:72:e8:6a:da:57:53:5c:21:7e:ca:
c7:e1:af:b1:a5:c2:89:5c:0a:61:06:cc:ac:73:8d:21:2f:bf:
c2:be:5b:0c:da:bf:13:90:e2:24:a7:19:45:09:6b:c8:c0:2e:
63:24:96:20:c5:8f:54:4a:da:c9:f9:b8:36:38:3c:40:f1:e8:
41:8d:76:57:2d:6d:55:d3:c4:b3:50:73:38:db:6e:60:10:1b:
df:e0:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:26 2025 by rpki-client