Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: n5gdPIosLxdbc0+rsErRkRM81FZ3skkDTZp8p31KPyI=
Subject key identifier: 8F:1F:A1:12:61:08:40:BF:22:E5:90:6A:A1:0D:5E:C8:02:EC:B3:4B
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 0194C388456C4ABEC5E2F3794670F8389791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 07CF
Signing time: Sat 01 Feb 2025 22:01:15 +0000
Manifest this update: Sat 01 Feb 2025 22:01:15 +0000
Manifest next update: Sun 02 Feb 2025 22:01:15 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: rvb6XL0EgGeOwJQZo4G+vRSZuTpPiObGFpYT5Pwzy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:45:6c:4a:be:c5:e2:f3:79:46:70:f8:38:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Feb 1 22:01:15 2025 GMT
Not After : Feb 2 22:01:15 2025 GMT
Subject: CN=8f1fa112610840bf22e5906aa10d5ec802ecb34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:5d:f0:b0:49:53:5d:bb:33:fc:3b:cc:6b:
f4:5b:1a:8c:80:00:66:38:65:93:a7:07:86:22:10:
9d:a7:a8:2e:99:d3:2c:7c:47:42:53:56:95:c6:ad:
db:46:00:31:3f:34:e3:e9:4a:bc:f7:09:fe:d5:97:
85:9d:da:ce:1c:fe:de:76:07:0d:f4:9f:ac:8e:fc:
3e:05:73:65:a3:be:bb:f0:57:d2:35:2b:fd:5b:83:
67:06:25:fc:f2:ab:4c:cf:5a:38:de:6d:30:84:17:
31:1f:a7:57:aa:0a:f9:e9:6f:af:a4:22:0d:f6:5d:
c4:b1:fc:f0:10:04:ea:47:cb:59:4d:43:27:ba:b4:
23:fc:a5:6b:f8:72:9e:ad:8b:f8:7b:06:8b:ba:4b:
71:96:d7:a6:75:2f:f2:73:71:48:1d:e6:56:49:89:
af:33:7d:1b:34:2f:64:b9:2a:d8:60:02:06:e1:22:
a9:2f:95:73:6f:f1:67:cb:44:c2:bc:54:1f:1f:96:
f7:ea:4c:07:c0:b0:9b:84:e5:0b:09:4b:45:27:cc:
f1:f1:f9:7a:90:e2:a9:64:cb:67:9a:2e:4b:17:4f:
8f:08:78:38:f1:4a:8a:20:4a:90:34:17:8c:55:10:
64:2e:bd:03:e1:f3:ee:2b:f0:6e:bc:30:97:8f:e6:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:A1:12:61:08:40:BF:22:E5:90:6A:A1:0D:5E:C8:02:EC:B3:4B
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:09:8e:e9:4b:e5:ac:0a:b9:2d:4d:3a:ee:d4:5d:5a:2a:
f8:7e:ac:08:73:de:9e:e7:73:f9:8c:4d:08:c9:2a:d6:8b:5c:
15:99:e8:c8:39:8e:3c:dc:de:75:e6:d1:b5:e1:29:7e:62:c7:
91:8a:ba:88:77:8b:94:6b:6d:ea:a9:a6:3b:c9:f3:71:df:37:
74:ab:a0:56:ec:65:68:04:8f:45:2b:2e:41:e7:60:08:20:bd:
f6:2d:87:6d:4c:ea:09:b6:18:a0:c5:d5:8c:3b:f7:d2:2d:fe:
77:47:a0:8f:2e:48:21:f8:17:d7:ba:82:04:80:ee:12:d0:21:
bc:7f:4c:d3:79:be:0f:fd:be:35:cc:30:49:8f:6e:ee:70:7d:
d7:bf:66:e7:3d:60:5f:e1:c3:30:21:57:7c:64:50:e6:4c:36:
47:09:be:4c:fc:d7:fa:2d:3a:7b:79:c5:a1:e7:25:c7:5a:0a:
bc:cf:0d:e2:b7:c4:69:3a:d7:49:b4:e5:5e:eb:24:4a:68:62:
57:56:b1:ca:9e:04:74:cd:2d:11:98:8d:8c:41:2a:3d:ee:34:
67:51:75:d5:88:2f:9d:5b:d3:31:57:cb:64:1c:95:29:c9:b5:
9c:54:63:ab:41:49:00:90:4d:37:82:9c:55:87:39:b1:ca:6c:
e0:70:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:12 2025 by rpki-client