Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: tnu5bJwfHpqocQECfj6h/RrDDqEzEa28g0wkJ6TCBkI=
Subject key identifier: 26:FD:C4:6D:77:69:93:58:5C:E6:6F:9D:81:B0:80:03:96:02:43:97
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019510C7709514B1947F0AE2D25E1C8D811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 0FD4
Signing time: Sun 16 Feb 2025 22:01:00 +0000
Manifest this update: Sun 16 Feb 2025 22:01:00 +0000
Manifest next update: Mon 17 Feb 2025 22:01:00 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: onGAKmZlE7o8jS9GD5q1c13wR1h/PzbhAQZC4blpHpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:70:95:14:b1:94:7f:0a:e2:d2:5e:1c:8d:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Feb 16 22:01:00 2025 GMT
Not After : Feb 17 22:01:00 2025 GMT
Subject: CN=26fdc46d776993585ce66f9d81b0800396024397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:6f:d5:51:72:a4:c4:40:4a:c9:40:88:62:
df:9e:e1:b6:6c:53:70:71:1d:ae:e1:d1:0d:39:84:
6c:dd:10:30:e5:be:f3:0d:11:d2:4f:8c:dc:ac:d3:
1c:48:b7:49:f3:db:c0:b8:ed:13:5d:2a:73:06:1c:
cb:ab:75:1b:43:5f:bb:06:81:c6:7c:b4:23:d0:72:
ef:54:5e:8c:59:c2:1a:16:a9:ce:72:74:6e:38:a2:
4d:e5:0c:3f:e2:2b:04:fb:ad:5d:05:d3:7d:3b:58:
fc:4a:e5:84:0b:30:ad:7e:59:55:37:d2:62:5d:4a:
f1:ea:ec:67:56:00:31:a6:ae:ff:89:3b:ae:81:26:
a3:00:fd:4c:d3:f9:14:ad:ac:ca:99:a2:1d:07:63:
bb:83:aa:39:96:ae:d9:1c:0a:68:57:70:e6:71:a5:
d6:db:04:56:4c:73:71:72:84:12:9a:c8:bb:eb:2c:
ac:cc:3d:5c:95:ea:0a:2c:a2:68:c5:50:34:d5:0d:
48:5e:bd:e4:e8:c8:50:b0:fe:25:2c:bb:54:60:2b:
4f:ac:89:43:8a:fe:db:00:fb:75:67:02:e9:71:d8:
da:08:76:5e:8c:13:81:fd:2c:44:6f:1a:81:81:9c:
99:50:40:0e:f3:8f:43:ea:68:1c:c9:47:63:c5:c5:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:C4:6D:77:69:93:58:5C:E6:6F:9D:81:B0:80:03:96:02:43:97
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:52:7c:20:b1:20:c3:dc:43:97:54:50:17:bc:49:01:aa:
43:ac:86:82:8c:ca:33:e3:28:00:2b:a4:5f:06:d6:fd:34:1f:
c0:40:df:20:79:57:b7:7e:ac:40:be:b3:01:6c:4c:a1:ca:18:
c1:41:db:5e:ad:cb:bb:fc:d1:cb:e6:2e:c3:4c:0d:af:c4:df:
bd:67:3e:7e:3c:a5:f1:d7:d5:96:0f:07:5a:1b:09:03:87:7f:
b6:e1:a4:9c:ac:42:62:c6:3a:e2:ba:cd:4d:0f:ed:20:01:ff:
9b:f9:68:d5:7b:62:f7:b4:ce:e6:b3:1f:0b:42:46:c0:5a:d9:
bc:21:2e:94:ae:40:90:ae:18:79:d4:fd:07:5f:ee:28:12:74:
9f:a2:25:ba:d3:3f:23:c6:12:00:63:72:d2:99:d8:0b:bd:86:
7f:dc:30:1f:0a:19:00:cd:36:a4:3f:95:85:ff:b9:9c:f9:42:
54:d7:7a:4a:9f:72:20:2b:db:53:a4:85:0c:bf:36:3c:a4:d3:
a5:ba:ee:3a:f8:1f:80:27:7a:7f:ba:c3:99:e4:cb:5e:af:9b:
d3:60:ad:71:d5:0d:a6:9f:4d:b6:4b:bd:5b:64:35:90:0b:a0:
0b:9d:aa:ab:64:1d:10:4d:fe:4c:6b:3c:87:31:fa:b1:fb:0d:
71:1a:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:14 2025 by rpki-client