Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: dTpHIx9DxBNohehxXgY5s3ouEjuBT7UPiOSpe6eT7+s=
Subject key identifier: 39:77:4E:BC:97:D9:84:EA:D2:01:33:78:E1:B4:DB:99:4C:59:8E:8E
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0194C3F62C9B0415ED2AC3F35010AA4A1591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 1F
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: DaejWjEtL+SwEuHrhMQeQfJ+lkM26j298r8sN2B6i/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2c:9b:04:15:ed:2a:c3:f3:50:10:aa:4a:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=39774ebc97d984ead2013378e1b4db994c598e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:ea:e1:52:c4:88:47:81:ed:91:de:77:cd:
a5:cc:57:e0:fc:67:83:da:8b:67:55:17:7c:35:7a:
68:82:61:e6:be:a4:73:71:18:84:32:db:54:18:23:
46:08:21:f2:15:b9:9d:6d:c8:48:74:bc:ae:44:88:
54:1d:f6:df:0f:97:56:d6:4c:c6:d0:53:15:b2:ef:
77:8a:41:7f:d5:9b:79:0d:8d:6d:d5:5e:c9:53:63:
01:92:aa:4a:e3:78:b4:ec:b1:6a:56:b0:84:89:71:
fe:7a:ee:4b:88:0e:e8:be:bd:e4:5b:51:53:a5:53:
29:16:48:7b:44:26:04:b6:c6:43:33:c9:59:e4:98:
d1:3f:0a:9b:69:92:01:58:17:2d:21:d9:25:20:c6:
77:0f:ca:fa:9b:42:23:1f:05:08:2f:2d:dd:43:4b:
89:14:f5:9c:78:48:59:ec:06:ec:91:32:9b:17:ed:
94:61:ba:00:6a:8e:87:44:20:06:b4:6d:39:ae:c4:
19:5f:86:d5:e9:02:82:1e:77:8e:17:a4:0c:cd:54:
a6:25:9c:c4:f5:71:af:11:56:64:d7:93:03:82:83:
50:f2:63:f8:99:9a:d3:e0:f6:cd:a5:97:8d:a2:bc:
60:a0:b9:f4:29:3f:f4:56:e5:86:ca:7d:86:3a:40:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:4E:BC:97:D9:84:EA:D2:01:33:78:E1:B4:DB:99:4C:59:8E:8E
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:35:01:dd:5b:8f:83:a4:60:19:84:b6:47:1e:81:e5:06:
38:84:96:fa:7c:0c:bc:b3:d7:2b:6b:17:4a:5d:a9:89:70:a8:
b1:39:4d:78:68:49:6a:eb:bb:b3:2a:6b:ec:e9:60:25:a4:05:
1d:8f:66:0a:6d:b3:39:d7:bb:b8:a5:61:ae:2e:b9:17:c2:49:
0f:19:1b:14:ae:09:ee:91:e7:52:e9:eb:16:c5:61:85:d6:e7:
8c:ca:13:4a:22:2c:18:73:39:c7:65:71:b1:b3:2a:ae:b0:ef:
31:4f:d6:60:a0:d0:17:4d:c5:36:fb:ec:f3:7f:5e:ae:0c:5c:
47:3d:87:de:19:b3:b5:55:58:59:b1:9a:92:e4:18:51:ed:0e:
0b:d7:4b:74:b7:85:64:b5:23:df:83:30:1d:0b:6e:d3:c3:a3:
08:6f:47:8a:13:48:ea:d3:07:98:57:05:da:6a:0b:86:ba:c7:
52:9e:8f:c4:4e:db:97:84:75:e2:09:61:7d:8e:49:25:29:16:
cb:4b:aa:f8:5d:9a:db:f3:f5:c1:ef:76:63:6d:91:de:c4:d8:
6d:23:ff:8b:1d:dc:58:85:3a:b5:8b:0a:29:f2:b4:b1:89:21:
40:e1:a7:6c:8e:e5:13:ba:23:aa:51:91:c2:14:52:17:29:29:
bc:78:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:24 2025 by rpki-client