Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
File: o_60EOB9CI-2UbkTdJuBJX47mVI.mft (raw, json)
Hash identifier: tOY5lhvAI5lzFQTFCYpYWmNmUkitTDQWQIhjUgE1WBk=
Subject key identifier: 23:BB:DE:36:AD:43:69:C1:B1:5C:7A:BE:35:79:58:6E:70:0C:B3:82
Authority key identifier: A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
Certificate issuer: /CN=a3feb410e07d088fb651b913749b81257e3b9952
Certificate serial: 0194C38827B2995E0180DD48DDD2CC696F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
Manifest number: 0E78
Signing time: Sat 01 Feb 2025 22:01:07 +0000
Manifest this update: Sat 01 Feb 2025 22:01:07 +0000
Manifest next update: Sun 02 Feb 2025 22:01:07 +0000
Files and hashes: 1: o_60EOB9CI-2UbkTdJuBJX47mVI.crl (hash: AUDYXKzFwZ7W4XFH43m4MWT6+NBWUnZgOYGE+Hxnp3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:27:b2:99:5e:01:80:dd:48:dd:d2:cc:69:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3feb410e07d088fb651b913749b81257e3b9952
Validity
Not Before: Feb 1 22:01:07 2025 GMT
Not After : Feb 2 22:01:07 2025 GMT
Subject: CN=23bbde36ad4369c1b15c7abe3579586e700cb382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:25:54:7f:c0:89:05:03:d9:3e:6b:cf:59:
30:64:30:f2:1e:20:4d:da:df:f8:b2:50:88:9e:54:
c3:fa:82:9e:82:7a:eb:50:82:4d:64:59:e1:96:d6:
47:9e:8c:e3:e3:e7:ff:10:a4:aa:55:c0:1f:ca:df:
8e:f9:70:5a:19:52:f8:b2:18:ce:15:13:4c:fd:44:
19:5b:3b:ad:e7:5f:ab:e5:c3:10:46:3b:f2:14:83:
c9:e8:c0:dd:9a:13:70:e7:90:10:64:3b:84:06:cd:
62:a4:74:fb:96:c4:fd:67:a0:12:7a:2f:f1:3e:91:
e6:b6:2a:ae:7f:50:ee:25:43:13:e4:2b:19:5c:b3:
28:62:90:8d:05:d0:af:de:55:b4:0c:f2:e2:ab:a1:
69:a0:c2:a0:74:76:ac:29:05:45:fc:f3:0c:2d:61:
9d:3b:69:47:71:4e:fe:6b:4f:53:f7:5c:c1:95:27:
3f:47:03:bd:d0:d6:ad:5f:c0:37:18:fd:23:c7:e6:
4d:d9:89:12:09:7f:24:3e:4e:48:6b:27:15:52:05:
40:3c:a9:a2:81:7b:fd:b0:7e:3c:e6:08:4d:36:e0:
3f:14:5c:99:0b:16:65:79:71:3b:f4:30:d8:8d:ae:
3c:3c:d8:e3:84:d0:32:2f:8e:b3:3b:4e:86:2c:f1:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BB:DE:36:AD:43:69:C1:B1:5C:7A:BE:35:79:58:6E:70:0C:B3:82
X509v3 Authority Key Identifier:
keyid:A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:f0:43:97:43:ff:9d:a8:aa:8b:ab:1d:43:b4:d0:74:6c:
7e:df:72:5c:7d:23:d7:87:dd:0e:2e:a0:33:f5:ae:43:d1:ff:
0b:35:02:b0:9d:00:04:91:3d:78:f9:73:af:3d:31:3c:f0:fa:
1b:b5:ea:95:76:de:f1:26:e3:e7:36:1c:61:91:83:50:c2:fd:
a1:d6:2a:b2:ef:a9:9a:90:cc:90:f5:80:68:0c:66:c8:40:2b:
06:e2:c0:97:9f:26:3f:ef:70:b1:06:2f:7d:2d:ef:21:1c:3e:
1c:31:c7:23:d0:33:9e:d2:23:d0:9f:76:6d:1e:ab:f9:32:34:
b8:25:a6:a9:86:1f:c0:c8:22:a7:5b:27:ae:13:a5:9f:50:c8:
34:e6:72:dc:bb:01:08:63:16:75:bb:70:eb:2d:e6:cd:97:71:
f7:19:22:e4:c7:93:27:e6:86:18:26:d9:db:fe:01:47:55:81:
55:cc:59:13:f9:29:27:9b:09:2e:c4:0f:67:3a:63:4d:48:39:
1a:37:af:89:0c:bf:20:47:50:e6:bf:66:8e:2f:bb:97:af:e5:
24:1b:4b:73:50:af:0e:55:74:3e:04:d4:c8:be:de:e0:ab:88:
96:63:2d:f7:f1:9e:3d:df:5c:5c:37:0f:b0:de:ec:df:70:c3:
98:67:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:47 2025 by rpki-client