Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: g50AnhBi2cIJyKGEbseclO8ZJWTMiIhDwCkXXvHFOus=
Subject key identifier: FE:02:79:85:B6:89:A9:22:42:B2:00:52:69:0A:F3:53:FF:34:B0:FF
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 0194C4D1150A4724631AC00AE013E51A2B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0C46
Signing time: Sun 02 Feb 2025 04:00:24 +0000
Manifest this update: Sun 02 Feb 2025 04:00:24 +0000
Manifest next update: Mon 03 Feb 2025 04:00:24 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: 6CTHDH/Oman1HriEiJh+0wtYwh9ahTeYlHNj29bPy7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:15:0a:47:24:63:1a:c0:0a:e0:13:e5:1a:2b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Feb 2 04:00:24 2025 GMT
Not After : Feb 3 04:00:24 2025 GMT
Subject: CN=fe027985b689a92242b20052690af353ff34b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:36:65:67:10:c4:a5:3c:58:cd:81:dc:66:
59:a7:cb:ba:21:d3:5b:7a:37:0e:4f:43:b7:b0:0d:
58:29:6e:61:c2:1a:3a:b0:4d:9f:55:50:7a:1e:54:
09:e1:92:c8:68:42:e3:94:0c:cb:c4:fd:74:79:59:
c0:b2:de:65:f1:9e:2a:1b:f5:bd:97:9f:cf:2b:e9:
cf:dc:20:07:5c:2f:9c:06:2c:9f:00:e5:bb:b0:8f:
7b:de:a2:eb:7f:de:5c:c5:ab:67:d9:a0:12:eb:35:
94:1e:64:19:8c:c6:c2:e9:67:c7:4c:ab:0c:ea:f7:
de:ce:25:04:d1:9e:53:48:93:5c:89:eb:f7:9e:f7:
49:91:6b:87:46:85:1f:39:3c:42:26:c8:9f:e2:c2:
58:7e:44:a1:99:60:5a:b4:b0:0d:78:19:86:d5:34:
56:2e:2b:e4:28:ae:48:de:09:fb:cf:7b:56:44:07:
3c:47:db:90:2c:47:87:35:18:34:d3:ed:f3:de:15:
17:b4:3a:12:1f:63:8f:32:a9:89:8d:5c:6d:bc:45:
e0:4c:a6:8d:fb:8a:87:50:df:56:6a:3f:24:ce:59:
20:39:4a:a8:fb:cb:80:16:7a:9c:d0:9b:a3:29:55:
db:36:f5:bc:45:e7:20:15:8f:58:25:df:0c:cf:58:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:02:79:85:B6:89:A9:22:42:B2:00:52:69:0A:F3:53:FF:34:B0:FF
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:05:da:3f:e4:cd:9a:9d:29:ec:06:8e:66:04:f6:67:54:
cd:79:4e:4a:5d:f5:32:7c:5b:48:99:d8:c7:ec:50:2b:22:c9:
24:8e:6a:9a:a2:bc:6c:d5:4b:86:29:ee:e2:f9:58:5a:96:f5:
1b:ea:1b:dc:78:9e:6c:be:b1:3a:de:c2:7c:be:7e:fe:f9:c1:
f6:09:45:e6:d7:8c:db:a4:04:95:a1:4f:0c:5b:d5:f9:04:c0:
20:8f:18:bf:ad:b0:f1:b8:e9:17:ed:77:44:81:2d:26:d9:ec:
60:a7:63:75:69:47:ad:e5:7e:c5:30:53:90:75:3b:4f:f8:61:
ac:00:ed:5a:a3:a0:90:84:12:8d:f3:f6:9c:52:a1:49:8b:55:
af:68:9d:99:73:b6:4f:80:a8:bd:8e:cc:e2:fa:15:46:fb:cb:
2a:df:7e:01:ab:1d:30:d9:2f:3f:14:e9:c8:e1:2c:6c:d5:7c:
09:2d:15:b3:b3:e8:15:57:93:b3:a1:5c:9c:cc:cf:9d:5d:36:
a9:6f:88:69:d1:49:d1:cd:c2:4e:34:ee:4e:ea:f4:d6:79:4c:
7a:2a:fb:30:0a:76:6b:86:6c:aa:ab:06:d7:8a:fc:9b:db:e3:
c2:c2:a3:f9:49:94:a9:b6:e7:76:a0:d2:78:d6:7c:ac:ed:fd:
1e:fa:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:29 2025 by rpki-client