Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File: agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier: 0q/gRn2Yrr0e5KJUsf0SeykALIT/Hrfm3Da39QpkpDI=
Subject key identifier: 49:D8:A5:0A:56:C0:BF:8B:6C:70:9E:0C:80:83:A5:31:F8:6A:E5:EF
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer: /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial: 0194C4D0ED6D0875E01B89817219DF7ECCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 04:00:13 +0000
Manifest this update: Sun 02 Feb 2025 04:00:13 +0000
Manifest next update: Mon 03 Feb 2025 04:00:13 +0000
Files and hashes: 1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: V03rRCoOjmRLj0bheomN4SRlvxGIYHffEI1iUKTyry4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:ed:6d:08:75:e0:1b:89:81:72:19:df:7e:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Validity
Not Before: Feb 2 04:00:13 2025 GMT
Not After : Feb 3 04:00:13 2025 GMT
Subject: CN=49d8a50a56c0bf8b6c709e0c8083a531f86ae5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:b8:f4:53:74:78:27:f6:99:c6:86:1f:b5:
1c:dd:48:ba:2b:a2:16:a5:ed:a0:da:9e:6e:0e:45:
03:1d:07:89:10:e1:7e:54:4d:85:d7:66:af:22:ca:
73:9c:5f:ed:27:ad:27:de:9b:a1:9b:7f:7b:c0:98:
c2:b1:49:0f:a6:c1:22:0c:b0:46:76:99:bd:0d:7a:
4d:7f:c1:62:3f:eb:d9:e2:52:4a:48:cf:06:94:24:
ca:c8:e6:fd:a4:ff:29:a2:ee:5d:39:bc:4a:4e:b6:
dd:2e:1f:7b:c1:25:e0:1e:f0:81:18:48:91:c6:29:
7a:f4:16:ff:67:14:32:e3:28:45:8e:57:95:b0:34:
80:e4:28:01:f2:50:00:8f:b3:a7:71:0a:e7:d0:80:
cf:71:53:84:a2:97:08:bf:d5:6e:c5:94:44:cc:1a:
45:8c:7d:8d:2c:b8:cf:2e:16:1d:8f:9e:97:85:57:
fd:ba:c7:c3:02:c0:7b:0b:1b:c9:71:30:2a:2b:4c:
92:48:7e:9a:e5:a9:1a:6c:55:94:23:61:7f:dd:e2:
53:f9:eb:5b:9a:0e:25:20:ed:42:b6:95:04:ac:91:
ca:40:25:d8:5a:9b:c7:26:66:1b:15:13:d4:eb:ca:
a3:62:65:e2:4e:8f:8c:fa:7f:24:b3:7f:85:be:eb:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:A5:0A:56:C0:BF:8B:6C:70:9E:0C:80:83:A5:31:F8:6A:E5:EF
X509v3 Authority Key Identifier:
keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:04:e1:72:25:ee:90:4a:85:f3:9f:f4:98:a3:9b:b2:75:
de:6c:e2:a1:45:0d:7b:40:f0:6b:a0:32:7e:67:ed:f2:1e:27:
08:28:15:d8:3d:07:ac:a9:a9:7a:1c:6e:60:83:fd:d7:bc:1d:
65:ae:f1:b5:42:ce:e4:77:fd:fb:6c:43:dc:9f:73:f1:19:15:
97:0a:8d:76:0d:e6:64:ad:4f:28:da:a0:1e:94:53:03:74:ac:
03:38:c8:03:2d:cf:41:76:42:6b:7e:11:7d:3d:fa:ab:8d:46:
e0:db:de:4a:eb:a8:42:b1:09:69:a0:af:b6:e9:62:60:b9:88:
8c:58:df:f8:12:97:0f:d2:6f:d6:6f:65:ca:38:94:4c:e7:07:
ff:2c:26:ed:97:61:9a:e0:f4:32:e8:66:85:c3:ea:e9:b8:54:
be:55:05:4a:e4:71:37:bc:fb:1f:cb:cb:4c:fa:9f:aa:4e:5c:
97:6c:87:36:bd:05:bd:cf:d3:24:7e:b3:91:4b:2a:76:6b:37:
40:d2:44:d5:9c:b5:64:cd:1e:a9:c2:fe:47:94:bb:06:f0:9d:
df:6c:ad:e4:52:dd:50:fa:3f:e7:be:fb:69:d5:c2:f4:d4:b4:
ea:02:1b:4c:0b:ee:6f:e9:0a:a0:0b:a8:65:5b:ef:21:34:47:
cf:0c:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:01 2025 by rpki-client