Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: NRJhVPe83/B2UfB5rOhz0ag30qkKOwyRebNzcrMqN3s=
Subject key identifier: 85:E7:5E:9F:FF:76:A2:EF:41:EE:82:BF:34:C9:AC:CD:CE:F2:90:76
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0194C4631CB07470ABE1A7B4F5EAFDED2619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 0F20
Signing time: Sun 02 Feb 2025 02:00:17 +0000
Manifest this update: Sun 02 Feb 2025 02:00:17 +0000
Manifest next update: Mon 03 Feb 2025 02:00:17 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: z9XqNMdxh56UX05WFmrr1IQ/kaG3uXT4unDNS8yod0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:1c:b0:74:70:ab:e1:a7:b4:f5:ea:fd:ed:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Feb 2 02:00:17 2025 GMT
Not After : Feb 3 02:00:17 2025 GMT
Subject: CN=85e75e9fff76a2ef41ee82bf34c9accdcef29076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:94:1a:b3:95:fa:11:88:57:7d:20:ec:66:
00:0e:99:6b:22:8f:c4:85:da:ad:b5:be:fd:02:f0:
e6:9c:88:b9:3c:bb:51:54:26:4d:d2:c0:aa:e5:ed:
81:41:86:04:6f:80:6a:da:a7:38:56:7b:4c:da:67:
62:46:ca:e2:42:b9:49:6a:d1:a4:a1:62:01:d4:eb:
29:35:13:52:c8:79:8b:28:41:bd:92:35:db:ca:2b:
86:0b:07:dd:b8:a1:b9:32:59:44:d5:c1:86:8e:12:
0c:78:6d:6a:8e:6b:d6:06:5b:be:eb:bb:ce:f9:e3:
eb:e0:ef:46:09:22:94:2c:9c:3d:cb:7b:4a:be:81:
c8:35:aa:ca:0c:30:38:c7:5f:6e:f2:ae:a9:92:3d:
ad:08:c6:5d:7c:95:c7:40:88:a4:d5:69:57:7e:07:
b8:fe:4c:b1:97:29:5c:65:06:45:ed:7c:fc:e5:a7:
27:5d:8f:e0:d7:ce:bd:da:e7:93:df:b4:b5:3c:e9:
05:73:9c:c2:47:16:ca:7c:dd:2b:3f:b7:9f:93:2b:
e1:48:fd:e7:27:2b:d9:a7:35:e1:56:ea:7f:3e:36:
17:ef:5c:4d:f3:1b:d9:9b:83:1f:6f:e7:43:a5:31:
61:88:f5:92:6f:06:c0:60:3f:6e:38:d6:f1:9c:82:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:5E:9F:FF:76:A2:EF:41:EE:82:BF:34:C9:AC:CD:CE:F2:90:76
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:59:33:b6:28:d4:04:7e:4e:08:da:76:26:73:3b:6d:73:49:
78:70:ff:59:7a:2a:e6:c7:d5:fc:3c:c7:3f:c5:5f:29:ab:ad:
0d:80:a9:0d:66:32:ce:b9:c5:46:c9:bc:13:d4:f7:2f:3c:e5:
e7:24:37:24:4e:e5:16:44:ee:4d:29:8a:10:48:db:fb:c6:17:
c0:17:97:ef:c4:0f:6c:39:ca:4a:9f:ce:fd:fd:2c:ee:d8:0b:
77:3e:4a:4c:77:e6:53:e8:42:fc:aa:bd:fd:aa:4f:da:af:95:
21:74:24:9c:73:45:ba:85:31:5d:07:bb:54:b6:22:8a:be:52:
2f:9a:61:39:56:bd:f0:d2:33:bd:1b:ac:bb:5a:45:74:a3:fb:
31:d4:bf:b2:0e:4f:24:a2:96:6a:9d:fb:1a:04:a7:1f:57:81:
07:42:c4:28:79:76:32:a1:e8:96:32:38:8f:0c:c1:9c:9d:ef:
6f:42:b0:fc:49:ec:19:69:d1:2f:ef:4d:b8:2a:2d:e6:5a:22:
9e:dc:79:a1:f8:f2:10:f7:7f:e7:fe:24:68:8f:56:69:8b:8c:
a7:05:44:f6:1d:d2:94:87:00:ad:73:6b:04:74:ed:33:8f:ef:
3d:3a:21:3d:99:3b:15:b1:a3:6d:42:e6:3d:47:b9:8d:e7:b2:
fc:a1:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:33 2025 by rpki-client