Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: Kw7s9TpB0mKpq3dCu2n3aVToV8uZR+BQ3nG8QpxFE74=
Subject key identifier: 2C:8F:DC:E5:A4:78:D8:42:E3:5E:63:96:4A:8E:4E:10:74:F4:D2:DE
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 0194C4D1589A7AF054A4630899D5DD3BD03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 24
Signing time: Sun 02 Feb 2025 04:00:41 +0000
Manifest this update: Sun 02 Feb 2025 04:00:41 +0000
Manifest next update: Mon 03 Feb 2025 04:00:41 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: pOCPtRc3arwPHkdKDLtFb8oq295Kl4u1qzN88CzLbXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:58:9a:7a:f0:54:a4:63:08:99:d5:dd:3b:d0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Feb 2 04:00:41 2025 GMT
Not After : Feb 3 04:00:41 2025 GMT
Subject: CN=2c8fdce5a478d842e35e63964a8e4e1074f4d2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:85:60:e8:41:03:c2:1c:1e:14:c9:f3:ee:
bb:02:e1:d4:cd:ef:23:ab:f1:c1:cb:3d:e9:3b:e7:
f9:1a:d9:07:56:76:17:b6:55:18:f5:9d:8d:49:1b:
ad:32:c4:53:f1:47:d5:08:75:93:40:b8:ed:1b:b7:
a3:65:2b:52:92:07:3e:69:3e:fe:55:59:4b:77:5e:
98:97:3a:9c:76:a2:c2:1f:74:35:53:e2:b7:19:5c:
71:75:f9:1f:05:cb:5a:54:0f:2c:07:94:32:d4:18:
ba:85:71:ad:46:5f:60:69:69:e5:5e:c9:78:4b:63:
8a:a2:57:b7:07:58:80:34:6b:63:52:b6:6e:a0:3b:
f5:6e:d4:e3:6a:b6:24:9d:5f:ff:40:08:15:b7:ea:
76:ff:0b:6b:10:d8:8f:5b:c9:50:ec:d5:0a:1a:91:
12:a6:ac:1f:96:fc:ad:54:7a:bd:68:5c:a8:26:7c:
5f:37:ff:33:bd:22:2c:fb:23:ed:83:d1:88:fb:12:
db:c7:0f:a5:36:ac:2c:2a:6e:80:70:e7:8e:60:60:
19:f4:95:65:40:21:6a:94:bc:77:2d:41:99:59:e1:
c7:de:21:8d:9d:c9:98:d6:5c:5d:9f:7a:58:54:a3:
ce:1c:ce:84:b1:a3:9f:29:b1:72:0f:d5:c6:d6:e4:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8F:DC:E5:A4:78:D8:42:E3:5E:63:96:4A:8E:4E:10:74:F4:D2:DE
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:b8:bd:34:0a:9f:26:16:ef:7a:15:03:6d:ac:d8:ba:a9:
f9:2d:49:67:cc:74:f9:5b:9f:b0:3c:54:07:2a:4e:42:1b:13:
17:ba:c3:83:85:48:a8:73:fe:de:5a:37:88:a9:aa:bb:6d:4d:
0f:b6:69:32:cc:fa:13:48:a2:90:d6:53:7c:d4:73:57:dc:3e:
6c:9d:bd:5b:0d:08:16:19:86:7c:53:19:9f:14:b3:e3:7e:76:
08:54:7f:40:7c:29:f8:13:35:e8:05:a9:12:44:c1:cd:54:c7:
16:68:27:8b:bf:e4:88:ee:95:45:5f:01:36:b8:43:98:9a:41:
e0:74:b7:92:e3:56:88:e9:c9:41:9f:fc:4a:84:ad:29:72:02:
b3:3f:e3:1e:03:32:42:29:c4:63:0d:e8:df:48:f4:35:f9:1d:
82:d3:11:fe:cf:80:72:a4:53:81:98:24:d7:f0:3d:e2:84:9a:
45:ae:bb:d8:72:25:e2:48:04:62:9a:4e:97:39:f8:62:c1:d4:
99:6a:41:f0:1b:bc:73:4f:92:47:86:4c:7c:99:45:1b:83:dd:
b8:b7:ba:f8:f0:55:81:82:b2:9f:5e:ef:a3:1c:6c:08:0b:a7:
c3:fa:b1:84:13:93:27:5f:4e:33:f9:b9:1c:0d:c8:db:b7:b2:
a9:fb:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:22 2025 by rpki-client