Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: sU3HDsA1GEkuiyDHr65WwOa4sxAv9kOIFw1vE+t7AcU=
Subject key identifier: 23:56:88:3B:E9:98:D7:75:0F:7E:4B:69:AE:E1:C5:F9:94:1D:25:32
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 019511356537403AB207FD1F39381789F3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 1269
Signing time: Mon 17 Feb 2025 00:01:06 +0000
Manifest this update: Mon 17 Feb 2025 00:01:06 +0000
Manifest next update: Tue 18 Feb 2025 00:01:06 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: Nt+x0gEOPhghTD5NWWraHv0n5+riSXh86W1J7FDUc7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:65:37:40:3a:b2:07:fd:1f:39:38:17:89:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Feb 17 00:01:06 2025 GMT
Not After : Feb 18 00:01:06 2025 GMT
Subject: CN=2356883be998d7750f7e4b69aee1c5f9941d2532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:19:f6:ba:7e:18:4c:4e:43:17:ff:f5:85:ac:
6d:77:e5:a1:4c:1b:33:34:fc:17:b0:f4:42:f7:34:
cf:53:b6:12:bb:84:46:75:07:5b:4c:be:76:39:f5:
87:aa:52:a2:36:f1:88:16:95:65:c4:79:2b:c2:3d:
3f:91:63:97:12:23:cf:1c:6e:97:5c:6a:b5:57:9b:
f3:1e:d7:bf:ef:c2:d6:c6:63:93:7e:bc:92:24:88:
71:6d:01:4c:dd:78:4a:0e:99:79:07:a9:be:22:25:
b6:c0:26:84:bc:3d:36:52:80:a1:04:50:75:70:11:
53:d0:8d:a6:bf:05:ba:83:f6:f3:9a:14:5d:d0:ff:
8d:94:c5:c5:18:94:2f:5a:c5:e6:35:bf:3e:be:4a:
b4:e0:20:2d:cb:52:a4:05:82:cf:68:19:d7:2f:00:
e0:e1:a8:74:c8:42:7a:a2:79:8f:31:2b:c2:12:7a:
8e:83:95:0e:42:e3:ef:b3:1e:20:7e:31:88:ed:c4:
28:37:bd:e6:b1:1a:cc:23:95:0c:89:f3:be:fc:48:
3d:64:3e:b7:59:fa:18:1f:5b:e4:f7:84:c6:e0:38:
1d:d7:b0:ea:c3:f2:a0:7c:2f:9a:07:4a:54:3e:4c:
f3:e6:03:8b:2f:d9:a8:1e:8d:36:44:3d:ff:eb:8c:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:88:3B:E9:98:D7:75:0F:7E:4B:69:AE:E1:C5:F9:94:1D:25:32
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:19:47:1f:6b:7c:1b:4b:14:bc:fa:a8:a4:6e:3e:fb:ce:
aa:a7:4c:7c:39:1e:40:bf:01:95:05:51:c5:71:12:f1:3b:2d:
ee:fb:88:e4:8e:1a:18:4a:b5:24:ac:f5:a9:6f:b3:e4:07:65:
65:74:f8:cc:41:ca:3f:e3:12:fd:e4:e4:52:54:18:44:20:a1:
4a:3a:ae:49:1e:4a:42:06:14:6a:61:ba:cf:ef:bb:22:f6:36:
b7:0f:06:02:ae:35:57:82:34:ca:57:a1:bc:fd:0e:93:27:ff:
25:f5:41:df:4b:12:f7:0e:60:a1:fb:c0:33:0f:50:93:1d:5c:
e6:6b:55:ff:0a:06:bc:e9:73:d9:73:18:14:b3:2e:81:06:81:
fa:3d:82:ae:fb:45:93:ba:a4:b7:e8:64:4b:bb:00:e8:87:ec:
4d:0f:9b:83:df:a1:df:0f:a6:e3:5c:38:44:08:96:a7:15:82:
de:b8:32:3d:f0:2d:76:22:d4:fd:54:62:9a:e9:67:a1:4d:5b:
ea:3c:9d:d9:16:5e:98:28:af:86:74:43:00:e2:55:00:f5:f8:
9e:4d:9d:f9:94:08:df:55:9c:e7:1b:8a:17:d1:31:34:1c:e3:
c1:2a:2e:97:51:ce:36:3a:97:c8:f8:91:a7:89:1b:e5:02:26:
43:f8:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:44 2025 by rpki-client