Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: IJZC/K3xQ8nrsWFI1HONlOcMneEpjLM3xVREtoOEp+Y=
Subject key identifier: B3:9E:90:51:49:87:36:C9:49:DA:FB:3E:BB:3B:B1:B7:D2:4E:B9:CD
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 0194C463A4698802BB978A944B4D1637CD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 27
Signing time: Sun 02 Feb 2025 02:00:52 +0000
Manifest this update: Sun 02 Feb 2025 02:00:52 +0000
Manifest next update: Mon 03 Feb 2025 02:00:52 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: HP4dzvQonTsVk3OAaOritvtwdPx+37o+a1+FwK+xu/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a4:69:88:02:bb:97:8a:94:4b:4d:16:37:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Feb 2 02:00:52 2025 GMT
Not After : Feb 3 02:00:52 2025 GMT
Subject: CN=b39e9051498736c949dafb3ebb3bb1b7d24eb9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:7b:39:29:6e:40:99:e3:fb:e7:f2:45:d6:
4d:e2:66:ce:36:44:63:15:7f:80:0b:ac:de:8f:7d:
ea:6d:59:79:e2:dd:18:8c:a7:37:10:82:3d:45:88:
09:30:bd:41:2c:e5:ff:2d:b5:e5:50:ff:26:8a:ef:
3e:74:f8:6d:3e:6f:3a:a8:08:37:ea:01:53:97:a5:
c6:42:00:99:8e:03:df:d0:97:bf:3b:9e:c8:78:b0:
6c:a0:07:b5:90:a9:88:52:dc:54:a6:36:46:cc:31:
a0:be:9e:79:b9:bf:14:f7:98:85:d5:05:e9:41:b5:
5e:cc:1f:b7:ff:c9:22:89:7f:9d:c8:b9:4e:7f:35:
61:e1:11:62:95:23:78:08:5b:0b:8e:47:81:be:1f:
52:9a:68:37:82:e4:2e:e7:fc:ea:1b:90:1d:c7:f4:
c4:16:90:a2:33:04:4d:43:33:a6:a0:f4:40:e8:69:
df:5e:8a:2f:4c:11:29:42:25:1f:31:95:40:c9:56:
34:8c:00:f1:88:43:00:4e:13:8e:64:7d:23:c6:00:
c0:14:d6:b6:98:cd:07:06:10:ab:06:a5:b7:03:d9:
e3:b2:86:66:09:16:a0:35:2c:1f:ee:34:ed:ef:96:
b0:5c:1c:58:a4:d7:eb:7e:92:f5:5d:52:54:e0:b2:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9E:90:51:49:87:36:C9:49:DA:FB:3E:BB:3B:B1:B7:D2:4E:B9:CD
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5d:0a:ed:9d:58:99:67:eb:31:9f:93:c7:ec:d3:1c:3f:33:
80:9e:13:70:09:21:32:84:6b:a9:77:34:80:a1:33:c8:57:e7:
aa:9c:16:90:9a:bf:02:3c:57:21:5a:1e:a9:7d:03:6c:8c:1a:
de:da:4a:c8:41:30:1c:0e:1c:72:ab:41:63:ef:d1:1b:04:d9:
52:85:77:c6:5b:09:34:7f:b5:da:b6:0a:49:84:9b:db:b5:50:
a7:2a:53:fb:73:1d:f2:8e:f8:03:74:cf:06:b9:16:e2:d7:8a:
92:b5:6b:7b:36:f0:e1:32:f3:00:9d:6e:78:1b:3a:e7:ad:e8:
09:43:32:b3:a3:e5:09:07:d8:fd:c7:ed:72:ad:00:4e:b0:cf:
bf:28:f2:bf:ee:da:9b:57:aa:62:9a:24:b8:89:e3:94:50:10:
85:ad:c7:6e:32:f7:d8:f9:73:9d:9f:93:6f:25:37:b7:bd:f1:
9e:58:27:2e:a0:87:56:46:b6:fc:16:d4:0c:d3:7b:a0:b6:5f:
8f:ba:44:c8:3b:cc:74:11:e0:13:7a:d8:69:62:ec:f0:67:21:
87:4e:38:97:86:b3:fc:ae:78:2c:92:49:c7:ce:b9:fb:64:f5:
06:c6:d0:17:85:54:0d:0c:5a:6e:bc:41:6e:57:8b:11:18:ec:
12:02:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:17 2025 by rpki-client