Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: hY7Z8HTijH4UDR0HjET/6vrBfXpSCLLzw8+q4usT5aA=
Subject key identifier: 7B:DA:31:49:09:26:C7:97:64:1A:D7:49:C9:AC:5C:BF:3B:7B:43:BB
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 0194C3885D218A7345527D9E34FFB3D6D366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 0F6F
Signing time: Sat 01 Feb 2025 22:01:21 +0000
Manifest this update: Sat 01 Feb 2025 22:01:21 +0000
Manifest next update: Sun 02 Feb 2025 22:01:21 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: EaL0bM3NtEE9aoCy3KFU36uCI1oUeXA8TTsbtvdrohs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:5d:21:8a:73:45:52:7d:9e:34:ff:b3:d6:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Feb 1 22:01:21 2025 GMT
Not After : Feb 2 22:01:21 2025 GMT
Subject: CN=7bda31490926c797641ad749c9ac5cbf3b7b43bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7a:dc:3b:bf:95:03:66:67:44:6c:f9:ee:be:
fb:8d:fd:eb:1c:1e:b6:e4:13:53:a7:1f:34:16:4d:
1e:f1:e5:0c:49:47:06:78:3c:69:2c:0b:ad:15:43:
d9:9a:9f:e6:d4:b3:66:f7:db:3e:19:8f:68:a4:88:
d9:e9:b4:48:b8:b2:03:1d:c2:ac:9f:a3:a2:9e:56:
98:d9:c6:2a:37:fc:d6:75:0b:5b:0c:90:af:90:33:
98:99:70:be:37:d5:7f:0b:69:ee:b9:3c:06:11:22:
a0:04:be:fb:3c:0d:e1:08:b7:5d:49:5f:b7:d9:9f:
d9:2a:36:58:ff:c3:c8:aa:51:af:33:cd:6f:74:24:
f3:9d:27:f2:bb:eb:07:ed:33:26:cd:6f:3d:74:8f:
ab:d9:41:1b:1b:82:9b:7c:13:84:c9:eb:ec:6c:0a:
cc:c7:f2:35:0d:10:7a:de:c8:3a:2c:d5:66:d5:55:
89:3b:55:18:2a:e3:0a:57:d1:64:d5:2c:88:93:cc:
26:18:a3:e7:08:8a:a8:31:83:43:06:23:56:1d:4c:
57:24:6b:98:e8:f5:8f:5e:10:7d:cc:57:78:b1:50:
37:5f:17:c0:9b:35:ba:26:9e:ba:af:9a:f9:62:1b:
51:62:28:56:a8:c9:76:ab:06:ae:48:e1:4b:e3:30:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:31:49:09:26:C7:97:64:1A:D7:49:C9:AC:5C:BF:3B:7B:43:BB
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:96:9c:20:d9:fb:77:05:37:d0:e7:d8:08:42:ca:f8:f3:
e4:25:06:c8:49:c5:65:01:32:20:fc:65:63:58:9c:60:f1:b1:
ce:44:de:c6:33:fa:29:a5:4b:78:de:c5:0a:4f:3b:e9:4f:d5:
a0:19:cc:8a:d8:b0:9c:89:f6:69:d8:d4:e7:e7:79:7a:61:58:
f2:9e:44:57:31:c6:7a:23:b5:9f:a7:5a:82:c0:93:37:45:7f:
22:94:ff:b1:95:2a:ff:93:02:6e:c3:f5:02:d1:2c:4b:64:28:
5f:5c:3f:32:54:db:a6:97:2d:82:d4:60:77:4f:6d:cc:2e:97:
4b:4a:4a:65:aa:90:ef:35:d9:50:c0:70:8f:1a:ed:3f:73:38:
5e:55:24:bd:ec:e5:03:75:07:50:7b:05:78:6a:bb:87:cc:45:
b6:50:37:13:31:e5:16:19:09:73:35:ef:a1:ff:59:7b:ba:a3:
e7:c9:52:2b:3a:7b:38:aa:43:bd:b1:ec:d5:ec:9d:7b:2a:c4:
9f:dd:db:96:22:af:4c:f6:83:70:37:eb:ff:a1:0a:5e:95:47:
1a:c2:54:79:f1:ae:42:89:b1:51:f8:82:c0:91:f3:9a:c0:d1:
68:0a:36:24:bc:23:25:21:00:c7:e8:c7:fa:b4:e4:13:ec:16:
eb:4e:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:30 2025 by rpki-client