Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: ZOj0lNrZQk7HtvJk6blODSec5j+l6IlHn1sCCNqqOTE=
Subject key identifier: 98:5A:EC:D8:09:07:9B:21:7E:08:43:D4:98:A7:09:13:BA:49:5F:E5
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 0194C387FEF0D2F6F18C607F2E9F3ECD5D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0CFE
Signing time: Sat 01 Feb 2025 22:00:57 +0000
Manifest this update: Sat 01 Feb 2025 22:00:57 +0000
Manifest next update: Sun 02 Feb 2025 22:00:57 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: CwfJ5IAaYz9MpY0N8kChjZ8A7IecKTsxfKmkzN59xEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:fe:f0:d2:f6:f1:8c:60:7f:2e:9f:3e:cd:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Feb 1 22:00:57 2025 GMT
Not After : Feb 2 22:00:57 2025 GMT
Subject: CN=985aecd809079b217e0843d498a70913ba495fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:6d:08:b5:dc:9c:d9:e8:eb:80:a8:85:2d:
53:78:7f:19:20:ee:6b:8c:65:90:2b:03:c2:e7:a1:
af:92:30:b2:ae:a4:92:11:f1:ca:3c:5c:a3:ca:76:
27:e8:e2:f1:d3:0a:45:11:a2:09:6c:51:6f:1b:01:
4f:95:bc:ec:1a:65:e6:62:47:3e:f5:d9:c7:33:a8:
9b:a6:20:35:da:20:17:b5:30:9c:3a:32:e1:15:52:
23:9c:08:9a:4d:f0:09:fb:4e:eb:7a:7d:96:05:b9:
9c:7e:ca:0c:de:0b:c6:b1:7c:9e:f1:2c:2d:60:f0:
f9:84:05:4c:3f:d1:1b:4f:ad:91:c9:63:41:f3:f3:
a9:29:ef:3f:ed:e7:18:4a:c4:e5:45:78:d5:a0:24:
9a:e4:18:52:de:ea:1f:90:7f:5b:9a:43:6c:a2:47:
08:5a:9d:a7:21:5b:44:66:e9:8c:4f:d4:48:8e:08:
e3:6b:03:f8:77:64:6e:dc:bb:6c:a3:b4:89:94:2f:
f6:d0:a3:cb:6a:89:5a:24:56:cb:3d:88:05:16:20:
5f:c4:c0:7d:91:1b:28:f5:58:db:e3:7f:96:77:b6:
ee:2c:1f:5a:e7:b2:b0:c5:b8:1e:2d:ef:c6:f3:23:
06:fe:83:6f:72:0c:29:22:73:d6:89:c2:7f:5c:51:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:EC:D8:09:07:9B:21:7E:08:43:D4:98:A7:09:13:BA:49:5F:E5
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:1e:f8:a9:d9:ce:d5:6a:d2:40:7c:5a:96:1f:39:e3:44:
ea:14:02:cc:35:a5:21:9b:d4:ec:7e:fb:0f:35:fa:71:8d:a5:
97:35:d3:1e:11:03:23:ae:53:08:31:09:2b:1c:de:b9:6f:cb:
e4:83:a4:e8:7b:b8:31:d5:92:b7:ac:5e:6e:8f:08:60:7e:3e:
f2:a4:5a:5f:94:ca:54:63:0b:4e:dd:f3:95:48:91:33:06:e4:
13:a4:cf:09:06:11:c5:f3:1f:5c:e6:5d:22:27:1e:8f:31:82:
f2:fd:7b:9d:de:37:9b:bb:89:55:b3:90:6f:bf:a1:4a:b9:f9:
4e:8d:91:1f:0a:fd:80:f7:48:65:86:10:69:29:4e:ce:4d:b6:
64:eb:82:f2:80:51:c5:a8:c0:b9:a6:d0:c0:57:c9:75:61:78:
01:1f:c6:c7:ab:f4:65:6c:47:bf:0f:14:71:01:1c:23:43:9d:
26:5d:71:4d:71:fa:cd:9d:40:41:ee:82:34:22:fa:49:f4:b0:
93:df:7e:d5:44:98:c3:f0:4a:eb:c9:56:ba:a7:e7:16:41:20:
22:89:d1:a9:7c:b4:69:1b:3a:b0:6f:a4:d8:e2:8d:63:f6:a4:
41:af:02:a9:9e:fd:db:79:a3:a1:32:0d:a3:ae:55:10:d2:4f:
1e:a3:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:00 2025 by rpki-client