Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: motf96atekvZMHh8j/7je2BSucWqSqIElaN1S8oBcpQ=
Subject key identifier: E1:56:FE:92:F4:A4:EF:3D:5C:4F:D0:1C:5C:99:8E:7A:0F:65:E5:C4
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 0195116BD5411863F205DF081B4BF1C111A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 01DA
Signing time: Mon 17 Feb 2025 01:00:34 +0000
Manifest this update: Mon 17 Feb 2025 01:00:34 +0000
Manifest next update: Tue 18 Feb 2025 01:00:34 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: IZQjRlwo3Tr38TpMgamxM5szNq/uYhdcDD6YObL4YqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d5:41:18:63:f2:05:df:08:1b:4b:f1:c1:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Feb 17 01:00:34 2025 GMT
Not After : Feb 18 01:00:34 2025 GMT
Subject: CN=e156fe92f4a4ef3d5c4fd01c5c998e7a0f65e5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:6f:a6:32:7c:9f:ac:83:aa:3b:94:94:08:
fa:e0:0a:ac:15:5f:8c:3a:74:ba:d4:a5:82:2d:d8:
54:cf:c4:79:16:5f:8b:52:e9:e4:b1:d6:f3:66:52:
d7:68:09:57:87:a4:c0:e2:db:50:dd:be:2e:74:97:
c5:33:1e:1e:a1:ba:16:5c:8b:f2:52:15:49:8b:e8:
03:ea:dc:a2:6c:5a:97:fa:eb:11:c1:3e:5e:8f:fb:
a0:10:18:2f:0d:58:0a:ba:2b:f8:a7:ca:f1:35:d6:
66:55:11:c1:63:22:d1:8b:f3:03:08:c3:67:a0:df:
38:fa:70:48:a4:5d:49:ac:7b:73:d9:96:31:af:6b:
d8:69:71:09:75:19:6b:e8:b2:41:eb:1a:fc:23:86:
ae:3c:fd:62:9d:f6:d2:48:c8:b2:f3:38:e8:a2:cd:
59:d2:bb:a7:96:d3:b0:1a:36:96:67:6c:9f:c7:f7:
e1:66:d5:65:5a:0a:43:c1:50:87:95:2f:fe:29:48:
0d:81:18:b1:d7:9c:2f:40:ca:88:8c:1f:b8:4f:9b:
93:7e:ed:45:c9:50:27:d0:05:6d:2c:5f:2e:37:8d:
a3:04:96:ef:5a:b8:88:84:c1:48:0c:9d:fc:ce:11:
ea:e8:fc:86:fd:12:42:97:d3:6e:fa:0d:1a:52:f7:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:FE:92:F4:A4:EF:3D:5C:4F:D0:1C:5C:99:8E:7A:0F:65:E5:C4
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:e8:15:6d:2a:33:58:90:7c:12:d5:96:71:03:9f:42:8f:
42:70:d2:57:80:77:71:24:e3:5b:1a:e6:4d:fe:1f:a3:20:77:
34:ee:b1:3b:2b:b3:06:63:3a:65:01:69:92:cb:61:14:04:bd:
7c:68:33:8a:af:58:34:e2:d9:f0:e3:dc:31:d0:4e:f0:34:ff:
6d:18:58:69:43:31:9f:94:80:1e:a0:0e:32:b7:4e:de:3d:4c:
3e:11:7e:c2:b7:49:07:8d:1b:15:43:f6:bf:57:7d:c0:61:3c:
e5:00:8b:a3:53:2b:20:71:ed:c1:16:aa:29:55:88:59:2c:1d:
bf:c8:f4:23:f9:74:2f:c7:de:bf:74:f9:c2:22:8d:cc:ab:7f:
d8:e3:83:65:9f:8e:58:4b:0a:dd:ba:8f:85:7b:95:72:7a:f8:
49:2f:e1:0c:e0:8f:1d:dc:95:e2:57:fc:51:e9:1f:84:a2:37:
cd:e5:81:81:36:7a:1c:c9:db:72:43:ed:69:8b:2a:15:99:6e:
ca:1c:6a:3a:eb:48:f6:50:31:65:f8:d4:7b:3f:27:58:6c:15:
92:dd:cc:0f:d0:2f:cb:2d:a1:c9:06:44:f8:75:56:97:c3:f9:
3e:71:65:fe:7f:e4:19:2c:26:c3:c7:62:06:c9:ce:7d:08:cc:
eb:69:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:35 2025 by rpki-client