Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: FQCJxdBUExkS5vG5HdS6Nnx8T/Qz8j2/5I65E7k9Odo=
Subject key identifier: 3A:F7:48:0C:DC:68:D4:73:03:6D:79:70:96:D5:D3:6A:68:BB:BE:78
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 0194C4D16A66F3BC749B26A7BE25615D7E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 6A
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: us6TO9977odYZlq3qZhT/au6/0ywQ38l/A9yIIpFADY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6a:66:f3:bc:74:9b:26:a7:be:25:61:5d:7e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=3af7480cdc68d473036d797096d5d36a68bbbe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:87:76:28:df:06:20:b8:50:73:07:a0:1b:
fe:82:96:cf:86:0c:9b:7b:f1:96:24:bf:9f:87:47:
0a:8a:b5:c0:6c:a7:db:4c:a6:d9:ec:44:ea:86:bd:
e5:fe:19:b5:a3:90:6a:53:ac:7c:b5:aa:4b:a5:bb:
3e:9a:17:a2:77:fe:04:26:28:57:2a:0e:65:88:1d:
db:38:84:2e:65:40:b6:ff:6f:87:c0:9e:5a:d9:f6:
f5:bf:ad:e9:71:09:c7:6e:6e:ae:5c:85:30:79:cb:
78:a7:26:a2:97:32:19:dd:aa:c2:22:33:11:95:fc:
31:3f:46:08:07:49:c1:5f:10:c7:07:b1:a8:aa:34:
5d:c6:b1:09:3e:e9:a6:86:76:25:b3:30:d1:6e:48:
8a:94:b6:be:56:9e:12:fe:50:86:c6:21:ed:d9:72:
2a:80:17:43:fa:d0:7f:11:a4:56:32:57:82:34:e3:
b7:e8:cb:42:44:84:40:4e:05:97:c7:c9:13:d2:b0:
25:3f:d2:4f:15:44:d2:d6:c7:6b:2c:46:fa:1b:46:
5a:a6:bc:7e:e2:ed:a7:b6:90:3a:23:6c:35:3d:c6:
cb:aa:b9:9a:6b:0c:cd:dd:71:37:33:4d:73:e1:6f:
33:c6:b1:82:18:4c:b4:40:2e:30:02:8e:50:56:13:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:48:0C:DC:68:D4:73:03:6D:79:70:96:D5:D3:6A:68:BB:BE:78
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:2f:c1:1a:9a:30:a9:4f:94:3d:d6:29:d2:df:4a:5d:dd:
8e:ae:19:53:4a:12:e7:5e:75:fe:3d:f9:a5:62:d8:1c:f4:09:
ef:38:3e:ec:b8:5d:6f:b2:f5:1d:79:76:8b:ca:44:88:86:7d:
05:33:7f:2f:75:d0:94:25:e9:89:f1:a5:ee:56:85:0a:e7:8d:
32:d2:b3:70:78:79:22:b5:09:cf:d4:31:ac:58:bd:8a:0d:9a:
55:0b:23:91:25:ca:69:86:8c:92:c5:ab:e2:a1:96:b7:c2:f1:
7b:8e:79:a6:a1:f5:a3:87:99:53:6d:c9:52:ab:19:1f:25:e4:
bd:2b:dd:d7:26:99:a3:57:a8:9d:6f:4d:e2:0c:52:52:8e:79:
1f:b0:68:70:ec:4b:ed:9a:e6:e8:e5:a2:b2:66:b3:9a:59:4d:
91:f6:1a:38:8e:49:3b:29:96:04:7d:b4:33:4f:ec:9a:66:bb:
91:d9:d2:56:8b:85:73:6e:99:27:fc:27:de:91:3d:06:8e:11:
42:90:00:3c:60:df:71:ec:5f:0c:70:3a:0a:6f:cf:70:80:fb:
62:ac:cd:0e:2d:f4:1c:23:98:9c:52:11:dd:37:17:c5:d3:b9:
26:be:f7:3f:7a:77:62:70:74:bc:5d:37:b8:a0:90:6e:95:f0:
52:30:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:41:54 2025 by rpki-client