Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: UWOA8NEW4OVQizuBiVrv85WgyBJgq3djY/e5RLCzFMA=
Subject key identifier: CC:0B:49:40:71:FB:EF:16:4B:D8:9C:13:F7:78:3D:79:CA:5B:A8:69
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0194C3BE9511B9B9BD392781615067378542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0352
Signing time: Sat 01 Feb 2025 23:00:34 +0000
Manifest this update: Sat 01 Feb 2025 23:00:34 +0000
Manifest next update: Sun 02 Feb 2025 23:00:34 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: Aila2iFrEHqk1vGUTpLICfXocChlypalym6UlH4NUyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:95:11:b9:b9:bd:39:27:81:61:50:67:37:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Feb 1 23:00:34 2025 GMT
Not After : Feb 2 23:00:34 2025 GMT
Subject: CN=cc0b494071fbef164bd89c13f7783d79ca5ba869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:f8:23:bb:3c:42:c9:35:f5:c2:3f:f9:16:
d1:cf:6f:9b:78:c3:8e:3b:23:5d:d8:10:b4:7f:af:
01:e6:e2:fa:4d:c8:ac:fc:fe:f1:8a:52:df:b8:cf:
11:51:e1:6e:8c:ee:8d:e6:8f:da:46:7e:9e:14:9b:
da:3b:ae:61:ea:85:83:53:c7:e3:84:6a:22:b3:35:
44:9e:a6:09:99:d1:8c:c9:37:7f:4e:9a:10:02:91:
95:59:82:1e:fd:e3:95:56:f3:bb:6d:1e:87:72:df:
b6:90:bb:2e:ea:cd:de:b3:1f:6c:17:7c:35:d4:de:
d1:62:94:54:8b:74:40:ef:2c:d8:41:a9:84:45:dc:
e9:28:61:bb:09:af:d1:44:c4:54:9a:2b:1a:0a:d7:
de:40:9c:2d:1b:2a:7a:90:5d:bb:dd:41:9a:34:8d:
86:dc:18:21:8f:93:60:09:86:01:75:38:36:77:cc:
55:59:e8:be:02:55:62:71:41:6c:6c:06:73:0a:a8:
0d:c0:04:73:20:79:59:72:6f:93:db:84:bc:be:f3:
44:56:3c:ec:d8:b8:83:99:2d:87:f0:74:a6:4b:ba:
82:d5:92:65:fe:05:a8:da:bf:d4:57:dd:e0:6b:e7:
52:ba:1e:a6:d6:1c:f7:29:53:f1:25:9b:86:b2:62:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:49:40:71:FB:EF:16:4B:D8:9C:13:F7:78:3D:79:CA:5B:A8:69
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:62:04:a9:02:9d:5d:51:4f:25:62:01:92:b1:0a:ca:62:
b4:7d:4d:40:25:68:f0:f9:81:b8:82:db:1a:3b:db:3f:e5:49:
1e:5f:72:9f:dc:de:6e:a4:ec:ed:3a:0b:18:a9:3c:59:7e:92:
30:aa:42:fa:3c:90:6b:b4:db:e4:ca:44:be:92:9d:34:60:6e:
9f:65:fc:b1:34:2c:5c:fe:4e:02:a7:82:38:a6:1c:2b:36:43:
a4:1b:61:f5:2e:2e:e2:76:dd:73:1d:9c:56:2b:a2:b8:9c:69:
bc:49:da:45:e7:6b:b1:05:67:f6:e3:06:cb:73:3e:eb:0d:13:
db:82:21:bd:cb:83:f4:68:2a:4c:f0:94:69:99:b3:b4:32:b6:
4f:f0:44:72:a5:37:f2:02:43:c1:64:ed:de:22:bb:d8:f2:ae:
ad:b5:f7:26:23:5a:d2:a7:4f:9e:63:b8:56:62:e8:fb:74:41:
ef:b1:4e:ba:0b:1b:05:7e:50:04:54:47:5f:8b:21:6a:41:5b:
b1:19:90:56:b4:e4:5c:54:d2:0b:e3:b7:08:9d:39:12:0d:ac:
e5:64:ec:c2:0e:a6:29:b8:d2:19:1c:21:be:ff:f8:b0:09:5e:
b3:ff:c9:36:20:5a:e5:eb:2c:7c:0e:e8:c0:a8:e4:e1:f2:43:
e3:2c:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:13 2025 by rpki-client