Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier: YWssU/bOqP7QiJ7JpDYcqoPaR6Ffp4kC+5NlJs8OqNo=
Subject key identifier: 38:D7:DC:09:C7:52:44:D3:C5:9E:96:8D:C6:AB:31:44:01:01:7F:10
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial: 0195116BB69DE6F54E08610DA0D02248D242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number: 0ECC
Signing time: Mon 17 Feb 2025 01:00:26 +0000
Manifest this update: Mon 17 Feb 2025 01:00:26 +0000
Manifest next update: Tue 18 Feb 2025 01:00:26 +0000
Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: 4c7rMiXUP96cEF63rr8rjeo6lcxqEcf6szl3ORVggms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b6:9d:e6:f5:4e:08:61:0d:a0:d0:22:48:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Validity
Not Before: Feb 17 01:00:26 2025 GMT
Not After : Feb 18 01:00:26 2025 GMT
Subject: CN=38d7dc09c75244d3c59e968dc6ab314401017f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:d2:90:27:fd:b0:65:93:02:f0:3e:f7:dd:
f7:5f:28:97:e7:64:0a:3d:1f:b3:9a:a6:5e:df:e5:
f2:b8:84:73:83:e9:73:fd:dd:0e:ab:70:d3:04:7e:
db:33:ec:ff:f9:5c:af:e8:e4:1c:97:2e:a7:31:16:
b5:24:58:21:2b:a0:67:f8:a7:d7:e2:37:7c:78:49:
4c:3b:9c:19:a1:27:c8:e8:a5:a4:c9:cd:30:fd:68:
4d:d1:72:94:e7:a9:0e:96:2e:fa:91:af:00:a6:a6:
07:8f:1c:73:f7:f1:92:e8:7a:4a:e1:cc:3f:39:f8:
03:4a:00:21:18:32:ed:be:3c:ef:8a:ad:73:e6:2a:
c4:5a:f2:28:66:a5:25:7f:8a:9e:21:02:a3:c9:2f:
8a:f1:e0:71:9d:c2:03:22:c5:a6:57:f1:a3:ae:5c:
a6:53:d1:41:b1:aa:20:92:b2:c9:ef:a1:bc:5b:e0:
61:3f:b4:e8:6e:f1:c0:04:ff:1c:e0:58:40:a5:e2:
dd:cb:7b:f7:21:1b:15:03:d1:65:88:64:1c:b0:eb:
df:82:f0:68:69:34:3d:23:83:2d:5d:bb:53:27:90:
21:a6:be:74:8f:bb:64:47:ca:47:50:66:4e:03:a8:
1b:0a:18:21:10:86:89:bc:a3:38:96:b9:a3:94:16:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:DC:09:C7:52:44:D3:C5:9E:96:8D:C6:AB:31:44:01:01:7F:10
X509v3 Authority Key Identifier:
keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:6c:d0:9f:ea:42:f7:50:1d:ca:e6:bc:b1:c7:8c:6a:a9:
9d:73:05:dd:c1:55:0f:ca:c4:d9:c8:98:d1:fc:34:1c:76:e2:
1f:5c:ae:c1:29:60:9c:34:67:c9:2a:68:8e:6b:cb:54:bd:01:
7e:7a:41:3f:f8:79:77:40:05:00:3c:de:f9:8a:79:51:2f:bb:
e7:2c:6e:c2:5c:ed:c5:25:b2:ff:5f:6d:c9:75:02:45:c1:98:
1f:29:95:cd:78:57:47:d4:e5:8a:c2:3d:cd:1f:98:c7:13:84:
2d:d1:ae:b9:27:e4:c6:04:3a:d8:0e:57:97:38:e0:4a:05:27:
02:43:49:41:b8:97:0e:9e:5e:de:f5:2b:9e:87:e7:09:15:21:
d9:7c:22:85:85:04:c3:68:90:dd:a0:79:a7:e9:05:fe:5f:62:
14:17:4c:ba:3e:d9:af:26:d6:5e:03:26:32:50:8f:ba:c3:6c:
9c:84:1d:f4:d6:8e:89:68:af:70:24:bd:dc:c5:33:1f:c2:23:
dc:9f:a9:4e:e1:fa:ef:40:83:01:83:fb:8d:90:a9:78:a2:4f:
21:a0:6e:79:72:8f:c9:8b:79:8c:02:6b:32:08:7a:e8:1c:14:
05:44:94:d5:4f:31:03:36:f0:7c:fc:1f:c1:48:36:a7:05:96:
a2:b5:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:25 2025 by rpki-client