Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: t0+WMSkEpLRHtGXJdJgtdWZTMIGqeVfCftx0UcmGjq8=
Subject key identifier: 09:42:D1:52:FC:EB:CD:65:44:99:CF:3C:CB:C8:E1:85:76:50:A9:18
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 0194C3879B1A09F85F387326B085E996B375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:31 +0000
Manifest this update: Sat 01 Feb 2025 22:00:31 +0000
Manifest next update: Sun 02 Feb 2025 22:00:31 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: mP+Wqyid7/oi7ZP075mIcjVUAxuRpxMIH99pV4y8Mzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:9b:1a:09:f8:5f:38:73:26:b0:85:e9:96:b3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Feb 1 22:00:31 2025 GMT
Not After : Feb 2 22:00:31 2025 GMT
Subject: CN=0942d152fcebcd654499cf3ccbc8e1857650a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:dc:d0:bd:b8:9c:ed:bb:a5:ec:58:e8:ce:
3f:c5:d4:d9:dd:0f:8a:a9:fa:a3:76:bc:f1:bc:f2:
bf:33:ae:2b:c8:ac:d3:92:b1:28:1b:e6:d3:8d:e3:
1b:5c:19:b7:2a:3d:a0:b9:53:f3:2a:c1:ba:d1:d7:
ae:7f:50:4d:b3:26:48:e0:db:bf:8b:45:ef:80:03:
05:fa:ef:37:f4:5b:21:0a:b3:98:7f:96:3b:7b:c8:
d2:d4:69:75:ba:5c:d6:71:40:86:45:66:41:14:11:
f8:7d:cd:64:71:3d:49:60:1d:64:7d:2a:97:09:af:
04:bd:3e:dc:d4:4c:70:ea:c0:78:c6:0e:20:5d:45:
16:2b:fe:72:9b:e9:7a:1a:2a:b8:58:98:35:a3:da:
7f:58:f9:f3:13:db:fb:b2:e3:d4:91:09:12:0b:2e:
89:49:04:d2:b0:ee:89:85:68:50:58:90:15:68:d6:
c0:2a:a3:36:d3:86:ae:ac:11:2a:e3:ad:20:d1:7a:
0d:96:fb:95:4a:c6:37:63:62:5b:89:63:31:97:c1:
0b:7f:6b:f1:38:b4:5b:9d:22:87:08:13:8d:86:fc:
bc:95:d7:b1:40:b8:b7:f8:45:d8:09:81:ab:a7:e1:
d9:5d:87:88:66:a5:d8:64:2b:b9:dd:cf:50:6c:7b:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:D1:52:FC:EB:CD:65:44:99:CF:3C:CB:C8:E1:85:76:50:A9:18
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1f:76:15:5f:1f:6d:61:70:59:f6:db:23:80:ca:00:6a:3a:
f3:d8:4c:9f:d9:9f:1a:40:7e:a6:64:ad:87:5c:91:ae:57:b4:
fc:a9:c9:c1:5f:fd:b1:46:cb:c0:47:f9:30:45:69:55:54:d7:
4f:11:3e:65:71:6d:4f:db:50:a4:fb:21:82:88:85:f0:25:45:
d4:4f:04:7c:b1:31:cd:db:aa:f0:d2:61:19:69:0a:68:ad:4d:
9b:1e:e4:37:5f:c4:bf:3a:bd:11:14:a5:84:29:72:59:f3:a9:
3b:d8:9d:9d:f9:de:09:6b:eb:f8:97:1c:c3:14:ef:5d:27:19:
3f:32:59:9f:0d:47:16:30:db:68:08:73:df:9b:ef:32:2b:2d:
c1:31:e4:97:a7:94:34:1d:69:ee:8f:74:3d:83:ea:50:a6:74:
6f:5e:fa:af:6d:fc:78:97:dd:46:63:fa:61:a5:ef:29:55:34:
7f:02:84:da:03:31:b4:17:4d:36:6e:11:29:81:ac:89:ae:98:
58:ca:6c:f7:c8:9a:40:1e:68:c8:04:d8:37:17:70:46:ea:4b:
65:3c:ca:dd:f5:b4:d9:75:04:9c:fc:d4:fd:b7:cf:ce:5e:8f:
33:fc:24:53:bb:77:46:c4:d7:ca:5d:78:bf:4c:13:78:ea:a9:
dc:54:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:51 2025 by rpki-client