Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: Zb2crJem3s5BsLyD6c72aWPqUIqY1/c1WM87VoJIq9w=
Subject key identifier: C5:74:50:24:50:9D:A6:5E:01:E0:F1:86:BF:E3:DB:0F:BB:2A:D9:5F
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0194C3F5A7A9AE7359EBECB925051FBA4633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0CCF
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: jPMOvVBfj+gzyOB5IK+IlRw45Srh7+CVNLxG2XePG1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a7:a9:ae:73:59:eb:ec:b9:25:05:1f:ba:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=c5745024509da65e01e0f186bfe3db0fbb2ad95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:11:0f:b3:9a:64:90:0e:b8:c6:84:f0:8b:
51:d2:74:c4:4b:b4:de:d8:3d:7b:c0:8b:47:e7:33:
22:c8:3c:b5:77:18:ba:d8:76:70:32:b3:1a:37:14:
0a:40:85:e4:41:12:ff:2e:7d:ac:d5:d0:25:82:b9:
10:10:f1:dc:d9:a6:09:59:f1:94:0e:d2:9a:d3:77:
43:dd:5f:e7:f8:1e:48:78:36:90:0d:c4:b9:42:e0:
26:4d:69:06:89:d7:45:f0:d7:14:58:10:af:73:50:
d6:d6:02:4f:1d:7f:7c:32:9a:5b:b4:59:06:eb:18:
2c:66:4c:31:c2:1d:ee:ba:b0:97:1c:66:dd:47:89:
3e:19:a2:a3:33:f7:04:97:47:b8:d9:45:fc:62:9a:
56:4e:f8:17:79:b9:10:61:d4:d3:72:6d:a8:a6:56:
a6:2a:b6:73:c8:49:ee:92:33:e9:9f:dc:e5:13:a1:
06:2b:90:70:f3:74:98:65:6f:33:a8:9d:39:3e:77:
84:11:8e:f6:05:b1:ba:ef:c2:da:e9:7e:c6:e0:61:
22:e9:a8:2d:71:c9:d8:8b:78:ec:30:d5:29:dd:55:
65:ce:1f:30:17:0c:bd:44:a0:8a:82:1f:ab:e7:93:
1c:e9:76:d2:f7:59:50:24:3e:b8:b7:81:f1:d5:09:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:50:24:50:9D:A6:5E:01:E0:F1:86:BF:E3:DB:0F:BB:2A:D9:5F
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:16:7b:c3:37:a3:7a:c0:57:58:f8:e4:b2:05:2f:50:e8:
cb:ea:fd:29:7e:97:5a:ec:f0:f7:65:a9:bf:ae:35:62:0b:08:
e3:85:50:27:f9:fb:24:55:0b:9c:6f:45:c7:0c:b7:22:6e:24:
83:28:8a:40:90:ae:1f:a8:aa:17:fa:43:51:be:dc:b7:a9:9d:
dd:ec:d0:88:2e:00:26:fa:94:a9:5b:46:89:c7:7a:ec:c5:4a:
d7:ed:d7:16:15:07:d0:66:ad:ca:1c:79:0e:58:b0:ec:3b:87:
75:81:42:e7:4e:f9:86:da:13:50:8a:93:c3:38:f9:ba:74:d2:
e0:4c:fc:ba:94:80:3b:9b:04:48:4b:80:67:8c:b6:42:c3:dc:
5a:98:1d:c1:7b:85:9b:e7:76:4a:bd:72:bc:b7:51:7a:01:c5:
b3:df:05:b4:0b:72:f3:cd:16:f0:d2:1c:ab:93:f8:3b:42:de:
9d:2c:24:26:be:56:1b:83:33:4c:85:f4:55:38:bd:3d:c1:2b:
2b:7f:35:ac:94:28:ce:e1:5a:a8:f3:d1:d4:ae:b3:82:df:ec:
27:c2:9c:a7:3a:4c:3c:73:3d:ce:8e:58:3a:5b:2b:ca:65:74:
22:ad:3d:6a:f9:36:d1:f0:58:64:61:ed:dd:59:00:8b:19:d9:
7d:2d:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:14 2025 by rpki-client