Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: QkI97wJzBZxuymNjvVtGAXbD1A/wHS4Hz3+koTN5CHc=
Subject key identifier: 8B:6A:CE:F2:72:33:F6:30:9D:B0:AD:B5:5E:D1:E1:B3:8B:96:06:28
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 0194C38839535BBE2642E802289F889D9E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0AAC
Signing time: Sat 01 Feb 2025 22:01:12 +0000
Manifest this update: Sat 01 Feb 2025 22:01:12 +0000
Manifest next update: Sun 02 Feb 2025 22:01:12 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: 45zL9N28mNh7oPDmBt3K3i4VQ6qp1b2Y8f++m2kludU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:39:53:5b:be:26:42:e8:02:28:9f:88:9d:9e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Feb 1 22:01:12 2025 GMT
Not After : Feb 2 22:01:12 2025 GMT
Subject: CN=8b6acef27233f6309db0adb55ed1e1b38b960628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:43:45:0f:0c:c6:bc:25:c4:a9:ea:d3:22:
fb:51:f7:66:97:56:4f:5e:6a:cf:d1:71:93:7a:ee:
73:fb:52:bf:44:09:36:b2:a8:fc:c6:79:e6:39:99:
6f:7b:82:2a:f4:d8:f3:c0:ab:03:9e:cd:5b:82:77:
5c:52:e6:e5:55:5f:fe:ed:fc:93:0b:12:bc:9a:bb:
03:e8:3f:40:19:84:d6:7b:8e:69:c5:be:cc:f7:88:
98:17:e9:78:d2:4e:9b:1e:c9:59:db:91:1f:74:65:
2a:47:58:19:e5:38:fb:e7:e5:bc:21:4b:4a:09:64:
21:8d:e6:40:ba:6f:c7:1e:92:43:75:6a:e8:86:a2:
ab:98:96:64:4a:b7:f6:35:35:4a:e5:06:3b:48:30:
9f:90:b8:9e:ca:dc:b8:4b:6c:a9:37:f2:70:35:7c:
61:7e:ee:a4:6f:03:10:a0:03:9d:e9:d0:16:47:14:
f9:49:1b:62:9e:68:0f:90:1f:89:09:61:e6:c3:95:
af:11:ae:d5:56:58:7a:c7:77:af:b2:67:41:d2:ca:
63:1f:b0:67:0b:a2:c1:a5:9d:8b:2a:22:2f:3b:82:
cb:a9:22:66:23:e8:55:a9:db:4c:5b:6d:0a:eb:0d:
5a:e0:3d:78:c7:74:7c:0a:f9:dd:bb:19:0f:8f:f8:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:CE:F2:72:33:F6:30:9D:B0:AD:B5:5E:D1:E1:B3:8B:96:06:28
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:5e:09:03:dc:57:f7:f2:c2:94:bc:37:a0:48:d7:c9:be:
47:f3:57:11:1a:ad:a7:24:9f:82:be:c7:ca:93:ae:1a:c8:2c:
da:f7:fa:0b:6a:9c:5a:9f:e2:cf:77:8a:5c:80:7e:37:5f:2f:
8c:e9:22:e0:d0:fe:82:be:65:87:79:52:5f:78:4f:43:19:bc:
6f:96:23:ba:43:6c:1e:ac:fe:e3:56:a6:e1:15:0a:a4:6f:5b:
94:97:16:6b:28:6e:c5:0f:a5:96:d8:21:4a:4d:3a:94:c3:b2:
2c:0c:98:16:80:53:b2:23:2f:f0:89:fb:0f:1c:b2:2e:5b:59:
49:ee:cd:76:cd:a1:3f:c8:0f:d8:fb:e5:3d:5f:f6:b4:b3:dc:
74:dc:73:ef:56:02:4a:71:f4:48:a3:0c:fc:7b:6b:05:88:54:
d1:ee:e9:73:f8:e5:3e:00:35:40:d7:44:60:68:78:de:1e:21:
2c:d1:25:aa:54:3e:7d:1d:35:01:29:fb:6a:9b:ef:00:38:dc:
b9:1d:ce:97:51:42:18:5d:58:a4:2f:08:b8:73:91:66:35:a0:
c4:84:ac:37:ce:1d:0a:9e:fd:19:42:f9:a4:9a:ab:57:36:35:
14:28:8a:d3:80:83:96:19:65:6e:97:3b:47:e6:11:8e:47:ba:
bd:d5:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:24 2025 by rpki-client