Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: yClTTK2WdDfHCwUoEPxsitnggjDSl146qVvXSqk/G0s=
Subject key identifier: F3:74:08:30:70:F9:5F:95:70:F5:F8:45:5A:6B:06:B8:9B:76:77:42
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 0194C350F1FF09B5F5A215E2760C2540C1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: BA
Signing time: Sat 01 Feb 2025 21:00:49 +0000
Manifest this update: Sat 01 Feb 2025 21:00:49 +0000
Manifest next update: Sun 02 Feb 2025 21:00:49 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: /f7AlRPEjJV12Gbqy9O45pcQX0ZLyDl1EZMotU9PT64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:f1:ff:09:b5:f5:a2:15:e2:76:0c:25:40:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Feb 1 21:00:49 2025 GMT
Not After : Feb 2 21:00:49 2025 GMT
Subject: CN=f374083070f95f9570f5f8455a6b06b89b767742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:26:5c:ae:45:20:35:54:41:02:3d:61:42:
9c:f3:af:80:f0:0c:24:85:b1:52:82:c8:9c:8c:1e:
fd:be:86:9f:a0:3f:9b:f2:1d:ff:a6:d4:c8:71:18:
4e:e5:a7:44:cb:3b:ed:4c:34:5b:dc:01:97:74:5a:
28:00:0f:46:8a:dc:7f:92:67:13:b0:33:3b:0a:04:
7b:6e:6f:51:63:1e:65:dd:ba:7b:56:b4:5a:50:6f:
66:01:2e:ad:52:87:56:1e:a9:b7:fe:24:a9:81:7a:
e6:3f:69:f8:24:b0:a7:5d:83:38:82:87:81:37:b4:
b3:71:79:b2:0c:16:30:23:e8:5a:b3:fc:e1:66:59:
20:75:f1:0c:90:f2:82:86:3f:c5:31:80:bf:0c:b8:
bb:3f:f0:b8:41:9e:1f:d2:6b:c3:ec:1e:19:f3:4b:
cd:da:fb:7b:7e:b7:e8:dd:30:13:22:b1:9c:7e:c0:
e3:ae:63:37:b5:3d:22:8b:ee:9a:d2:03:27:35:6e:
84:d5:38:b1:06:33:de:6b:02:d6:72:bf:ae:26:59:
fb:65:4a:62:f2:26:5d:7f:66:f2:e4:4d:fc:f1:65:
c8:9e:40:10:f7:ae:4f:c3:10:cc:7f:0c:23:53:4f:
cd:e4:96:5b:06:ab:7c:0e:7e:23:e3:f3:31:34:de:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:08:30:70:F9:5F:95:70:F5:F8:45:5A:6B:06:B8:9B:76:77:42
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:af:17:70:1a:11:93:71:99:03:3c:4b:59:08:4a:43:83:
a1:14:4c:22:70:45:4d:cc:72:44:c6:a5:84:a3:f0:c2:7a:e5:
6a:bd:29:99:b8:82:66:0d:2a:56:61:00:18:f8:76:ec:a2:ca:
c5:1c:93:88:64:a0:ed:3e:35:79:77:bf:eb:15:c2:1c:d0:a8:
cc:e6:3d:a9:f8:e2:4b:6a:e9:a9:b5:51:b7:ff:42:60:32:67:
08:96:72:c8:2a:31:41:b4:3a:5a:98:c3:62:d3:52:67:77:48:
a3:01:2b:37:94:dd:e5:a7:aa:8b:f6:95:58:17:96:ae:77:8b:
f0:fe:0e:c2:eb:17:c4:8a:bb:3a:03:86:ba:2e:07:4a:a9:3d:
60:cd:98:c0:e0:0a:79:9d:1a:be:d8:bf:7e:d4:8f:48:20:05:
ef:aa:68:c2:22:16:a7:e4:c1:ac:b1:7d:08:92:ec:67:cb:03:
50:8c:ab:d9:9e:3d:cb:bf:c3:f1:a4:a6:83:e1:f0:c7:9d:20:
e4:33:b4:97:42:3a:e5:b4:7c:8b:ce:31:b0:48:fb:a8:28:b1:
05:10:d1:e1:24:57:a1:5e:0a:06:13:b4:a6:ca:ae:5f:c6:eb:
21:07:1c:2c:4f:19:07:9b:cd:f1:b5:5d:cb:78:9b:8b:54:1c:
fe:d5:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:59 2025 by rpki-client