Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: cozZt/+/0H83yTqkFZm9b6aKiUoD0GQpP/QaUwFmUaM=
Subject key identifier: 4B:D5:4D:25:E0:6B:8D:A5:2E:6A:57:7D:1B:42:35:14:FB:DA:7C:D6
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0194C387F7920831692119E37FD5D5BBF9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 0EA4
Signing time: Sat 01 Feb 2025 22:00:55 +0000
Manifest this update: Sat 01 Feb 2025 22:00:55 +0000
Manifest next update: Sun 02 Feb 2025 22:00:55 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: o75dQyNNsiCigGVtPFI4zT0gtriSQQ2/6XJbdSaM5pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:f7:92:08:31:69:21:19:e3:7f:d5:d5:bb:f9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Feb 1 22:00:55 2025 GMT
Not After : Feb 2 22:00:55 2025 GMT
Subject: CN=4bd54d25e06b8da52e6a577d1b423514fbda7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:9f:f3:57:3c:0f:c8:1f:dc:ae:97:8c:96:
dd:2c:61:f9:d2:1c:3f:20:0f:a3:70:0b:82:44:57:
90:dd:db:9a:6c:f9:47:bf:8e:a5:8d:0f:4d:0d:df:
c6:ba:b2:38:c6:12:64:c8:dd:90:62:73:4a:c0:3d:
43:88:a9:cf:b9:4f:ac:79:06:56:cf:1e:af:73:69:
14:26:19:59:a6:62:8e:f7:b3:ee:ec:1d:03:d3:d1:
fd:fa:0a:2b:84:76:80:2d:e2:27:91:70:c8:72:0c:
84:17:56:cd:7f:97:68:9f:92:78:22:5a:74:91:81:
dd:12:99:54:59:6c:70:a9:20:e6:02:fa:35:73:9a:
dd:a1:e7:e9:66:b7:c9:4a:09:b5:c7:b3:b2:f2:aa:
0e:ca:df:84:be:7c:f5:c1:e2:28:88:6c:4b:e8:fb:
2b:55:d3:b7:b7:4a:9f:0b:50:0a:8d:e6:9b:89:df:
38:b0:20:ff:51:09:76:d9:35:0e:80:44:63:09:bb:
79:56:77:40:f9:3a:c6:25:47:95:2e:55:7a:76:42:
76:b1:ee:91:1c:83:86:bf:13:b1:5f:43:4c:b1:53:
bf:2f:c5:a6:6f:65:1f:e4:9b:2b:8e:73:d4:20:b6:
36:a2:2f:0a:af:6a:1b:a1:b6:08:86:c5:6a:8e:02:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:4D:25:E0:6B:8D:A5:2E:6A:57:7D:1B:42:35:14:FB:DA:7C:D6
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:ff:da:6f:ef:3b:ef:d1:62:95:19:79:e1:2b:e2:21:d6:
d7:97:34:cf:6e:b3:4d:c1:0d:bd:2e:46:d1:2e:34:dd:45:00:
3b:0b:95:02:5d:3f:c9:db:15:26:cb:4f:54:3d:c1:56:94:73:
57:1d:7f:9e:0c:2f:17:ef:85:3a:a4:84:cb:48:9c:79:87:95:
8c:77:44:b6:3b:65:e0:6a:c3:db:fb:e1:15:a7:c7:ca:8a:13:
d3:71:4d:4f:c9:f5:6e:d6:86:94:38:64:a9:a5:84:fb:3e:c3:
b8:ad:74:a7:a9:dc:33:c1:dc:9f:4a:8b:8d:a8:97:a2:b4:c4:
73:53:28:c4:1e:63:3f:b6:73:fb:4b:3c:c4:28:89:ca:26:7e:
8a:e5:ea:42:e3:0e:bb:a3:dc:05:08:7c:62:77:89:ee:50:76:
f2:65:f8:f0:61:47:de:8e:4d:6e:7a:46:96:7a:ee:c6:90:46:
e6:23:6b:1a:a1:49:f1:13:74:5f:ae:63:1c:83:0e:25:a3:8e:
41:67:0b:db:a9:b2:fa:50:8f:39:13:04:0e:ca:66:59:12:d6:
b3:f6:a0:3c:6a:7b:60:10:7f:da:5f:ac:fe:41:ea:5d:03:7e:
e5:95:ec:48:2d:b4:93:01:b3:f7:ff:0f:ad:1c:09:43:33:4e:
2e:12:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:07 2025 by rpki-client